Digital Analytics - University of Utah: Google Privacy Policy

Showing posts with label Google Privacy Policy. Show all posts

Tuesday, February 18, 2014

Mind Your (Online) Privacy !!

Introduction to Online Privacy

Online privacy is a very much debated topic in today's digital world. You cannot work in

the web industry without thinking about who will be tracking your details every time

you key in your sensitive information.

A couple of years ago, we witnessed EU laws came out strict regarding cookies. Even

now, EU countries are thinking about taking action against Google, who is considered by

them as high risk to people's privacy, even though useful in many ways.

Google's Eric Schmidt on the other hand, although had emphasized the importance of

privacy, had also indicated that definitions of privacy are changing as a result of so much

information being willingly surrendered to the internet. In a 2009 statement, he

suggested that if a person wanted to keep something private, it was probably because

they shouldn't be doing it in the first place !! Sounds right sometimes, but not always !!

Again creepy for the years to come, to all who plans to continue using Google !!

2011 statistics says, almost 140 views for every human being alive at that time !!

Facebook founder Mark Zuckerberg said three years back that in the age of social

networking, "people no longer have an expectation of privacy." !!

Is Facebook Privacy Policy Good Enough ?

So let's go back a little and think about what is privacy and how different it is when it

comes to online privacy..

A Brief History Of Privacy

Privacy as we know it - a term that we understand and define based on the culture in

which we are raised - is a relatively modern concept. Prior to the rise of democracy

privacy merely referred to a man's right to be left alone, free from physical harm.

If each man's thoughts and opinions were valuable and important, then protecting an

individual's personal space, ideas and feelings became suddenly more important.

No longer could the State simply invade people's homes to billet soldiers, conduct

searches - registering births, deaths and marriages became a topic for debate as did

taxation and the State's invasion into people's financial affairs.

Even so, it was not until the age of technology that privacy became a real concern for the

average individual, in the form of online privacy.

Online Privacy in today's world of Emerging Technologies

Contrary to the previous times, in the last 10-15 years, however, we have willingly tossed

aside our own right to a private life, not just through our obsession with the lives of

celebrities, but through our desperate need to emulate fame through reality TV shows,

blogging, live streaming our lives onto the internet.

Most of us have embraced Facebook, Twitter, MySpace, Flickr and LinkedIn as an easy

means of keeping in touch with friends and family and of making business contacts and

finding others with shared interests. What we fail to consider is how our willingness to

make our private lives public reverses those hard-won rights to decide what to make

public and what to keep private, as the more we happily put into full public view the less

we inherently reserve the right to keep private.

Auto-complete features in web already have your data !!

With the emerging trends of tracking website activity in place, people have started to

discuss about online privacy ever than before.

Yearly mentions about "Online Privacy" (from NYTimes)

It is very important that not just those of us working within the internet industry,

encouraging increased use of social networks and using technology to gather increasingly

large amounts of information about people's lives, their likes and dislikes, their habits and

their buying patterns, understand the wider implications of changing our definition of

privacy, but that members of wider society understand how this will affect their lives as

individuals, and that we analyze the good and the bad aspects of this cultural shift.

The future of Online Privacy

Let us just say that you will be tracked wherever you go in all aspects. You can watch the

below video for a better understanding of this.

So, who all should we be aware of ?

Well, even a school kid can take a guess at this and get it right.

Most importantly, Google and Facebook, because of the simple and alarming fact that we

are giving them tons of information every single day about ourselves !! NSA is an another

agency who keeps track of people through their cellphones (almost 5 billion cellphones

tracked by NSA everyday !!).

Below is a short video which shows how much Google already knows each of us !!

Which technologies/methods are used to collect your data ?

For example, Google openly admits that they collect and track 6 different kinds of your

personal information !!

1) Device information:

Your android smartphone talks back to Google and sends back information such as your
device ID, model, network details etc.

2) Log information:

Whenever your android phone uses Google' services it logs your call activity, such as
the other caller's number, duration of conversation.

3) Location information:

When you use a location-enabled Google service, the company may collect and process
information about your actual location, like GPS signals sent by a mobile device.

4) Unique application numbers:

Information about the apps you install may be sent to Google when you install or
uninstall that service or when that service contacts the company’s servers for automatic
updates and other unspecified reasons.

5) Local storage:

Google may collect and store information, including “personal information,” on your
device using browser web storage such as HTML5 and application data caches.

6) Cookies and anonymous identifiers:

The company says it uses unspecified technologies to collect and store information
when you visit a Google service, possibly including sending one or two cookies or
anonymous identifiers to your device, even when you interact with services the company
offers to thier partners.

Google is storing all your passwords (Chrome Keychain) and also storing your financial
details - account numbers and card information - in your Google Wallet. Pretty much
everything about us !!! They have also admitted to scanning emails of non-Gmail users -
who wouldn't have likely agreed to Google’s terms - sending email to Gmail users.

Again, if you think Google still has not breached your privacy, you should probably take
a closer look at what Google aims for with the acquisition of Nest for $3.2billion
purchase.

Google can now start tracking how you move around your house and what you do when
you are not online !! A very serious privacy breach, again hoping will not turn disastrous.

Facebook, on the other hand aims to track your online social behavior, your interests and

website activity more and learns more about you and start recognizing your friends using

state-of-the art facial recognition algorithms acquired from Face.com and also starts

showing marketing campaigns and recommendations for you. This had caused a lot of

privacy concerns a while ago. They seem to have subdued at the moment, while we hope

these will not be used against us in the future !

Organizations protecting Online Privacy

The Electronic Frontier Foundation (EFF), the Center for Democracy and Technology
(CDT), the American Civil Liberties Union (ACLU) and Fight for the Future are the main

organizations against Online Privacy. Two years back, they collectively conducted a
campaign against Cyber Intelligence Sharing and Protection Act (CISPA), which actually
was not clearly defined such that it may dismantle existing protections provided by the
Federal Wiretap Act and the Electronic Communications Privacy Act and other laws.

Tactics/Workarounds to protect online privacy

1) Creating multiple identities: Interestingly, Google itself had come up with an

interesting workaround to protect online privacy. The central idea is to create multiple

identities (accounts) for the same person, so that your personal and demographic data

will not be tracked along with your official identity. This is just a way to provide

abstraction, both accounts can be still be identified and grouped together.

2) Clearing cookies : Clearing cookies will help protect online privacy temparorily

3) Using different Web Browsers : Using different Web Browsers for personal and

business use will help provide an extra layer of abstraction.

4) Using PrivateBrowsing feature in Web Browsers

5) Using BrowserExtensions that help protect privacy

In addition to the above, there are some tips provided by EFF and TRUSTe .

References:

1) www.theguardian.com/technology/2010/jan/11/facebook-privacy

2) www.theregister.co.uk/2009/12/07/schmidt_on_privacy/

3) www.huffingtonpost.com/2012/06/19/facebook-buys-face-com_n_1608996.html

4) www.allaboutcookies.org/faqs/protect.html

5) https://www.eff.org/wp/effs-top-12-ways-protect-your-online-privacy

6) www.truste.com/products-and-services/consumer_privacy/privacy_tips

7) Big Data: The End of Privacy or a New Beginning? - Research paper by Ira S. Rubinstein

8) A Theory of Creepy: Technology, Privacy and Shifting Social Norms- Research paper by Omer Tene and Jules Polonetsky

The Piracy of Your Privacy

Privacy on the Internet has become non-existent in the digital age. Your digital footprint is tracked and analyzed by various marketing firms all vying for your attention. They have found ways to weasel into your computer, tablet, phone, and other Internet-connected devices. They know every website you visit, how long you were there, what you did there, how long you were there, how you got there, and even where you are signing in from. Nothing is secret anymore, so be mindful of the information that you send to cyberspace.

Web browsers like Google Chrome have found a sneaky way to track all of your digital movements across all devices. They ask you to sign in. This act allows Google to keep a history of all of your movements on all devices. The “Stay Signed In” checkbox on the login page keeps this action further from the user’s mind because they do not have to sign in each time they open Chrome.

Chrome is also able to combine all of your Google services. Like the slogan on the page says, “One account. All of Google.” This means that they know of all of the Google Apps you are using and how you are using them.

According to PC Mag, the Federal Trade Commission (FTC) issued an advisory on Web tracking of customers. Chrome was one of many browsers to enable features that protect their users from advertisers. They also have an Incognito Mode that allows users to move around the Web without leaving a footprint behind.¹ While these options allow a user their privacy, most users are not aware that they exist or understand their purpose.

Further actions have been taken in the industry with the creation of websites such as donottrack.us.² which allows users to opt out of tracking by websites that they do not personally visit. However, a Wall Street Journal Investigation found that the top 50 websites in the United States install an average of 64 individual trackers to visitor computers.³ These trackers are often fast and invisible. Even though this article was written in 2010, it is not hard to imagine that tracking software changes as fast as its governing laws do.

Why do companies want to stay ahead of governance? NBC News reports that is because online data has been transformed into a lucrative marketplace. Information is being sold to the highest bidder. This information includes names, addresses, phone numbers, and credit card numbers, which are being traded out in the open.⁴ This continues to be a growing concern among consumers. According to a study performed by the Pew Research Center, fifty percent of Internet users are worried about the information about them online, compared to thirty three percent in 2009. Of those surveyed, eighty six percent of people have tried at least one technique to hide their activity online or avoid being tracked.⁵ The study also found that 68 percent of people feel that the law is insufficient to protect their privacy.

Causes of Privacy Loss:

People are providing too much information on social network sites and email.
E-Commerce sites are better able to hide their tracking
Security breaches of E-Commerce websites

Laws for security breaches come from individual states. Currently, states require businesses and public agencies to notify consumers of security breaches of personal information. According to USA Today, California often leads the way in challenging privacy issues. They are considering multiple protections for Internet users.⁶

Password Protection – California feels that security breach laws should also protect passwords, usernames, and security questions. Hackers for popular social media websites such as Facebook, Twitter, Google, and Yahoo stole nearly two million usernames and passwords.
Do Not Track – While current legislation does not ban tracking, the new legislation requires companies to disclose how they comply with requests from Internet users who ask not to be tracked.
The Teen “Eraser” Law – Requires all website and mobile app operators to provide a way for those under 18 to delete a posting or photo. The reasoning is to protect those under 18 from publically sharing “ill-advised pictures or messages”.

Works Cited

1. Muchmore, Michael. "Google Chrome 31." PCMAG. PC Mag, 11 Dec. 2013. Web. 18 Feb. 2014.

2. Mayer, Jonathan, and Arvind Narayanan. "Do Not Track." - Universal Web Tracking Opt Out. Center for Internet and Society, n.d. Web. 16 Feb. 2014.

3. Butler, Christopher. "Unlimited vs. Limited Web Tracking." Tracking Best Practices. Newfangled, 01 Sept. 2010. Web. 18 Feb. 2014.

4. Sullivan, Bob. "Online Privacy Fears Are Real." Msnbc.com. NBC News, 6 Dec. 2013. Web. 18 Feb. 2014.

5. Flaherty, Anne. "Study Finds Online Privacy Concerns on the Rise." Yahoo! News. Yahoo!, 05 Sept. 2013. Web. 18 Feb. 2014.

6. Prah, Pamela M. "Target's Data Breach Highlights State Role in Privacy." USA Today. Gannett, 10 Feb. 2014. Web. 17 Feb. 2014.

Tuesday, February 11, 2014

I have a stalker? How your web browser tracks you

Maybe you are like me and are constantly typing in your username incorrectly for websites. The other day I was logging into a website on my laptop and I was frustrated at the 7 wrong options for my user name that appeared as I began typing (in my defense it is an 8 digit alpha numeric username). I deleted my cookies and decided to start again. A couple of minutes later some mates turned up and we hit the slopes for a day of skiing. There was plenty of jumps and falls. We also made time to check our university grades online using my smartphone (serious moment of truth). Nobody failed, so we continued skiing.

Do not track has gained a lot of support.

Significance of the story? When I returned home I opened up Google Chrome to log into the University learning management system (LMS) and there was my username along with two of my mates’ usernames. I asked myself how did this happen?

I did some research and realized that there is currently a huge “Do Not Track” movement[1] with California introducing new laws effective January 1, 2014.[2] This is important because Google Chrome has a synchronization feature that is enabled if you sign into Chrome, Chrome OS or an Android device (with Chrome pre-installed) with your Google Account. Are you thinking about your phone and what account you used to set it up?

Privacy: So what do they know about me?

According to the Google Privacy Policy (which I’m sure we have all diligently studied previously) updated December 20, 2013[3] they collect information in two ways:

1. Information you give them when you create your account.

2. Information they collect from your use and interact with their services, including;

Device information (type of device, operating system, network and link phone number to account)
Log information (search queries, telephony log and cookies)

Location information (location when GPS is enabled)

Unique application numbers (identifies apps installed, uninstalled and updated)

Local storage (data caches on your phone)
Cookies and anonymous identifiers (sent to you to track your interaction with services such as, advertising.

Now ask yourself if this is an invasion of privacy? Is it harmless? I often ask myself these questions when I watch Australian comedians Hamish and Andy’s Ghosting Challenge – not exactly the ‘tracking’ we are talking but if you are in need of some light entertainment right now have a look!

Tracking: Why you might support it

Data collected enables more targeted advertising (unique visitors and return visitors are more easily identified across multiple devices) e.g. Amazon promoting product you may also be interested in[4]
Tracking your behavior helps companies understand your interaction and improve their sites to suit you
Many online services are offered free because of the ability to target advertisement.
Has shown consumer safety benefits, used successfully for product recalls[5]

Tracking: Why you might not support it

Data is being used for activities such as, predicating your likelihood of entering or exiting a relationship[6]
The possibility of co-mingling data from multiple sites to create profiles of ourselves with more data than we are willing to share on any one website[7]
Concerns about hacking and stealing of personal information from big companies e.g. Yahoo[8], LinkedIn[9], Facebook[10] and Twitter[10]
Companies may be making assumption that are inaccurate and hurting consumers[11]

Tracking: Why you might not care about it

The privacy policies take too long to read[12]
You had no idea what was going on (don’t worry you are not alone)[13]

Privacy: Here’s what you should do as a minimum

Many will argue for and against web browser tracking and the effect it is having on our privacy. The internet is constantly changing our perception of privacy. Now if you are worried about your privacy and web browser tracking start by asking yourself the following questions and work from there:

What information would I like the world to have about me?
Do I mind being tracking for marketing purposes?
Am I now freaking out about web browser tracking but regularly share personal details, health conditions or my financial situation on a social networking site/blog?[14]

(I have used Google Chrome as an example because it is my preferred browser. Do you know what your preferred browser tracks?)

Finally, everyone should be managing their own online privacy based on what they feel comfortable sharing. This post was not intended to scare anyone, personally I don’t mind web browser tracking and targeted advertisements. I am however very careful about what I share on my social media accounts and how many accounts I have (that is another whole blog post right there). So be aware of what you are sharing and get back to enjoying the internet!

**If you are concerned here is a link[15] that helps you with “Do Not Track” on Chrome, Firefox, Internet Explorer, Safari, Twitter and Pinterest.