Slashdot Mirror


Google Consolidates Privacy Policies Across Services

parallel_prankster writes "The Washington Post reported Tuesday that Google will require users to allow the company to follow their activities across e-mail, search, YouTube, and other services; a radical shift in strategy that is expected to invite greater scrutiny of its privacy and competitive practices. The information will enable Google to develop a fuller picture of how people use its growing empire of Web sites. Consumers will have no choice but to accept the changes. The policy will take effect March 1 and will also impact Android mobile phone users. 'If you're signed in, we may combine information you've provided from one service with information from other services,' Alma Whitten, Google's director of privacy, product, and engineering, wrote in a blog post." The angle of the Washington Post article is a bit negative; Google sees this as consolidating an absurd number of privacy policies for its various services into a single, unified document. Reader McGruber adds: "Donald E. Graham, the Washington Post's chairman and CEO, joined Facebook's Board of Directors in January 2009. Curiously, the Washington Post article neglects to disclose that."

11 of 239 comments (clear)

  1. Hmm by Anrego · · Score: 5, Interesting

    I actually assumed they already did this (used your email to determine what ads you saw on search and such).

    Either way, personally it doesn’t bug me too much. If they were selling the information it might.. but as long as they keep it in house and it’s all being processed by automated algorithms I’ve got no qualms.

    That’s not to say I don’t recognize other people might have issues with this, and I definitely don’t subscribe to the whole “if you have nothing to hide” nonsense. This is just my personal view. Some people want privacy and they don’t (nor should they) need a reason.

    1. Re:Hmm by swillden · · Score: 5, Informative

      I thought they did that regardless of you being signed in or not.. maybe that's the way they used to do it? with cookies, but perhaps that would have soon been illegal in some locales, whereas using your signed in information is not?

      the question again is does the tracking end when you log out.

      The privacy policy is pretty clear, I think. Yes they use cookies to track you even when you're not signed in, and they try to connect that with you when you do sign in. If you want to ensure Google never tracks you, you can opt out using their privacy tools. That will install a "do not track" cookie which will cause Google to discard all of that data, except where they aggregate it into statistics that are in no way connectable to you. Unfortunately, various actions can cause that "do not track" cookie to be lost, so if you want to be really sure install Google's "keep my opt outs" extension, which will ensure the cookie is always present.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
  2. Re:Great idea by fast+turtle · · Score: 5, Insightful

    The explanation as given makes an awful lot of sense. Simply put, as they've purchased many of the products they're offering, they've had mulitple privacy statements. All that is happening now is that they're finally consolidating those items into "Google" tm itself, thus they can finally simplify and consolidate many of the privacy statements into a single version, which in my mind is a "Good Thing" as I'll be able to follow any changes to those services I use on a daily basis.

    One thing I've always figured is that Google was using any and all of the information they have collected on me to target their ads to me so this actually pleases me because I don't have to look all over the place for each services privacy statement to know what they actually collect and how they use it. It is important to note that as they've said, some products/services have regulatory compliance issues, thus they will retain individual privacy statements in order to comply with those regulations.

    --
    Mod me up/Mod me down: I wont frown as I've no crown
  3. Re:evil is as evil does by mr1911 · · Score: 5, Insightful

    People need to wake up and realize there is no "free" service. Google provides things that cost them substantial dollars to create and maintain but users do not directly pay for. Your information is what you trade for Google's services. No one is forced or coerced into using Google's services. There are alternatives out there that you can pay for and expect lock your privacy down.

    It is no different than anything else. There is a restaurant in town I will not go to because their service is pitiful. I refuse to support their model with my dollars. If you don't like Google's practices, you are free to take your private information to another email/search/whatever provider.

    Of course most of this is wasted thought, because many of those complaining about Google violating their privacy just updated their location from their phone, posted what they had for breakfast on Facebook, and tweeted details of their morning bowel movement.

    --
    This post comes with a double-your-money-back guarantee!
    Any offense taken to this post is at your sole discretion.
  4. Re:evil is as evil does by Whalou · · Score: 5, Funny

    Of course most of this is wasted thought, because many of those complaining about Google violating their privacy just updated their location from their phone, posted what they had for breakfast on Facebook, and tweeted details of their morning bowel movement.

    You must be one of my followers.

    --
    English is not this .sig mother tongue...
  5. It's not a policy change, just education by swillden · · Score: 5, Interesting

    This isn't a change in Google's policy, or practice. Google has long collected information about all of its users, and used that information for targeted advertising. Those of us who think about things realized long ago that Google has tremendous visibility into our on-line activities and is smart enough to be able to extract a lot of information about us. All that's happening here is that Google is making this fact more visible to users by condensing dozens of long privacy policy documents written in legalese into one short, understandable document. According to their blog entry, Google is also going to be doing a lot of advertising to make sure that everyone is aware of the policy document.

    In the short term, I think Google is going to suffer from a lot of backlash from users who are frightened by the explanation of what Google collects about them, but I think this is a really positive move by Google and I hope it spurs other on-line service providers to follow suit. If you're going to collect and use personal information about people, telling them what you're collecting and how you're using it, and doing so in a way that is easy to understand is the right thing to do. Spending money on a media blitz to make sure that everyone knows how you're watching them is going above and beyond.

    Google's policy document also contains a link to Google's privacy tools, which make it easy for users to see what Google is tracking about them and to opt out if they don't want to be tracked. It's potentially risky for Google to advertise that to large numbers of people, but again it's the right thing to do. Google's theory is that when given the ability to make an informed choice, people will see enough value in the search personalization and even targeted advertising that they'll be okay with it.

    I guess the truly selfless thing to do would be to make all of Google's tracking opt-in, rather than opt-out, but that's probably too much to hope for -- and it may even be that the world is better off this way, because if Google is right about the value of mass personalization we'd probably never know because hardly anyone will opt in. This way, it's possible that large numbers of people will opt out, but not the majority. In any case, making it all opt in would almost certainly be very damaging to Google's business. The current approach is significantly less risky, but still enables people to limit their privacy exposure if they wish.

    [Disclaimer: I'm a Google engineer. I work on the security of systems that process payments to/from Google, though, not on anything related to personal information tracking or privacy (other than I do work really hard to make sure users' payment instruments are well-protected, even from me). These opinions are my own, and based on Google's public statements not on inside information.]

    --
    Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    1. Re:It's not a policy change, just education by swillden · · Score: 5, Interesting

      Oh, I was also going to mention that only two points in the policy document surprised me, and both in a good way.

      The first is that Google does not aggregate DoubleClick tracking data with all of the rest, unless you specifically opt-in to that tracking. Personally, I think Google's personalization is useful enough to me that I will probably track down that opt-in setting and turn it on, but I'm surprised that it's not on by default.

      The second thing is that while I'd always believed that Google kept all of the data in-house, and didn't sell any of it, I hadn't ever seen a commitment in writing to that effect. After starting work for Google early last year I quickly realized that the company would have to change dramatically before they'd ever sell user information, because there's a strong sentiment -- arrogance probably isn't too strong a word -- that no one else would use it as effectively as Google, so selling it would be a waste. There's also a strong sentiment that no one else would be as responsible with it.

      Anyway, it's nice to see Google commit to not selling user data. I'd like to see a similar commitment from Facebook.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    2. Re:It's not a policy change, just education by swillden · · Score: 5, Interesting

      Spending money on a media blitz to make sure that everyone knows how you're watching them is going above and beyond.

      Hmmm, now I'm suspicious... wait a minute...

      What makes you suspicious?

      Actually, I know what makes you suspicious, and it's a common problem for Google. Everyone thinks that no corporation can ever do anything that appears good for the public and costly to the company unless there's some hidden profit motive. Since Google not infrequently does things that are good for the public and costly to the company with no hidden profit motive other than building long-term goodwill, people get intensely suspicious, certain that there must be more than meets the eye... and since the company is clearly trying to hide whatever that something is, it must be something really nefarious.

      But the truth is simpler: Thought Google screws up from time to time, it generally does try to be a good citizen, and up front about its motives and methods.

      [Disclaimer: I'm a Google engineer.

      Ah, now I get it.

      That doesn't mean what you think it means. Like most engineers (and especially security engineers), I'm fairly suspicious of corporate skullduggery, and protective of on-line privacy. Like most Google engineers, I'm capable enough that I could easily work elsewhere if I felt like my talents were being put to evil uses. And as a recent hire, it's not like I have much of my net worth tied up in Google stock (I have a few shares that were given to me as a signing bonus), so I really have no motivation to shill for the company, even if I were dumb enough to think my posts on slashdot could affect the stock price.

      So, again, what I post is the simple truth as I see it. There's no doubt that I have a positive bias towards Google, but that bias arises not from the fact that they deposit my bi-weekly paycheck, but because I see a lot of what Google does from the inside -- and it impresses me.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
  6. Re:evil is as evil does by squiggleslash · · Score: 5, Insightful

    Alright: the article says two things:

    1. Google is creating a single, simple, privacy policy (GOOD!)
    2. The policy includes provisions that allow Google to share data with Google - that is, if you go to site.owned-by-google.com, and then go to also.owned-by-google.com, Google will use the information that you put on both sites, consolidate it, and use it to select what ads to show you. (OH NOES! BAAAD!)

    Now, the billion dollar question: the second point is a surprise to me and probably 99% of the people here. Why? Because I pretty much thought Google already did that. I mean, why wouldn't they? When I'm on GMail and Google Maps and Google Plus I have a big bar on the top of the screen reminding me I'm logged into the Google.

    Is it evil? Well, depends really on what they do with that information. If they make an agreement with Blue Cross Blue Shield that anyone searching for the words "Cancer symptoms" will automatically have their name, address, and social security number sent to blacklist@bcbs.com, then yeah. If, on the other hand, they use it so that ads.google.com/showad.pl?customer=wb serves an ad for "Underworld" because you watched all the vampire shows on Youtube, received email from someone called "megagoth@yahoo.com", and did a Google images search for "women in black latex catsuits", then so what?

    And there's the rub. We pretty much know what Google does with this information. It's using it to select ads for us to see. I can see how collecting data enables Google to do evil, but I don't think collecting data requires Google do evil. Google can keep the information private, and use it to provide a service that's useful for advertisers and, to some extent, advertisees alike. That's not evil. And to the best of my knowledge (that is, nobody's reported evidence of the contrary) that's what Google does.

    I really don't see this as being anything other than another fake controversy covering a company that's made a lot of enemies lately.

    --
    You are not alone. This is not normal. None of this is normal.
  7. Re:evil is as evil does by squiggleslash · · Score: 5, Informative

    That's not actually true. There's a box you can uncheck on the initial signup page that allows you to opt out of creating a profile, and, further, even if you create one, you can immediately delete it.

    But yes, Slashdot did report, falsely, that very allegation earlier today, and it rather emphasizes my point: a lot of bogus negative stories about a company that's made a lot of enemies lately.

    Can we limit criticizing Google to things it actually does, for example, it's awful search engine?

    --
    You are not alone. This is not normal. None of this is normal.
  8. big difference by TheMeuge · · Score: 5, Insightful

    You're not correct. And THAT is where the big difference between Google and Facebook lies. Google sells eyes, but the fact of the matter is that they are anonymous eyes, but sold as eyes belonging to people most likely to purchase the product being marketed. However, until you click on that link, all the company knows is that they've been matched to you by the black box of Google magic.

    Facebook, on the other hand, shares information with "partners". They are BY DEFINITION a personal info vendor.

    Google sells ads, and tailors them to the vendor. Facebook sells your data to the vendor directly. BIG difference in privacy implications.