Niantic Responds To Senate Inquiry Into Pokemon Go Privacy (techcrunch.com)

← Back to Stories (view on slashdot.org)

Niantic Responds To Senate Inquiry Into Pokemon Go Privacy (techcrunch.com)

Posted by BeauHD on Thursday September 1, 2016 @11:30AM from the question-and-answer dept.

An anonymous reader writes from a report via TechCrunch: Senator Al Franken has questioned Niantic, the makers of Pokemon Go, about how it handles user's information. He asked the company to explain several key details about how Pokemon Go works, including whether all the data collection was necessary, how data will be shared and how parental consent is obtained for kids who play the game. The game was under the spotlight soon after it launched when it was revealed that users had to provide the game full access and control over their Google accounts. Niantic general counsel Courtney Greene Power responded to Franken via a letter (PDF): "Country is collected and stored, to provide a user the appropriate experience; language may be stored in future updates, for the same purpose. The app collects certain information to facilitate important quality and stability objectives and to prevent abuse. This includes information such as mobile operating system, mobile device identifier, and hardware build information. This information is used to debug phone-specific game problems and to detect and deter cheating in the game. She went on to explain that players under 13 are redirected to the company's website when they register to play, where their parent must also register. Parents are then asked to verify their identity through third-party vendor, Veratad. "Niantic does not and has no plans to sell Pokemon Go user data -- aggregated, de-identified or otherwise -- to any third party," Power wrote. The company also adds that data is shared with mobile app analytics companies and with marketing and analysis companies, but these companies agreed to keep user data secure. The data shared with third parties does not include the data of users under 13, the company said, and no user data will be shared with investors. In response to the response, Sen. Franken said in a statement: "The launch of Pokemon Go earlier this summer represented a new era in gaming, but shortly after the app's release, there were strong concerns about how it treats its users' digital data. I appreciate Niantic's response, but I intend to work further with the company in the future to ensure that we're doing everything possible to protect the privacy of Americans -- particularly American children -- who play Pokemon Go."

38 of 73 comments (clear)

Min score:

Reason:

Sort:

So in other words by geek · 2016-09-01 11:32 · Score: 1, Funny

They're good enough, smart enough and gosh darn it people like them?
1. Re:So in other words by msauve · 2016-09-01 12:51 · Score: 2
  
  It's the Pokeman Go decade.
  
  But seriously,
  
  "Niantic does not and has no plans to sell Pokemon Go user data -- aggregated, de-identified or otherwise -- to any third party," Power wrote. The company also adds that data is shared with mobile app analytics companies and with marketing and analysis companies,
  So, they do in fact provide user data to third parties. It's laughable to think they don't "sell" (i.e. derive financial benefit) it to them and simply provide it free.
  
  --
  "National Security is the chief cause of national insecurity." - Celine's First Law
2. Re:So in other words by Harlequin80 · 2016-09-01 15:32 · Score: 2
  
  Or they are using 3rd party service providers to analyse their data in ways that they are neither capable or experienced in for internal use. In exactly the same way that you provide you banks statements and receipts to your accountant.
3. Re: So in other words by Anonymous Coward · 2016-09-01 19:56 · Score: 1
  
  Using the services of these companies under a NDA is different from selling users data to them.
4. Re:So in other words by Oswald+McWeany · 2016-09-01 23:40 · Score: 3, Insightful
  
  "Niantic does not and has no plans to sell Pokemon Go user data -- aggregated, de-identified or otherwise -- to any third party
  And then in small-print. These terms are subject to change as soon as we get a good enough offer.
  
  --
  "That's the way to do it" - Punch
5. Re:So in other words by coofercat · 2016-09-02 02:04 · Score: 1
  
  They can't exactly say "we have no plans now, but hey, if someone offers us a truck load of money...". However, if they really wanted to engender some trust, they could (probably) say "we have no plans to sell any data, and we will never sell any data from 2016".
  But sadly, expecting any commitment is like expecting a unicorn to shit out your next gourmet dinner ;-)
6. Re:So in other words by Anonymous+Cow+Ward · 2016-09-02 07:38 · Score: 1
  
  It is providing it to third parties. It is not selling it to third parties, which is what they claimed.
  
  --
  Examine even your most deeply held beliefs. Nobody is always right.
mo' money by turkeydance · 2016-09-01 11:35 · Score: 1

PGo better 'pony up' some re-election funds. this was just a shot over the bow.
1. Re:mo' money by Pseudonym · 2016-09-01 12:00 · Score: 1
  
  Nah, just put some control fields over DC.
  
  --
  sub f{($f)=@_;print"$f(q{$f});";}f(q{sub f{($f)=@_;print"$f(q{$f});";}f});
2. Re:mo' money by Plus1Entropy · 2016-09-01 14:33 · Score: 2
  
  All they have to do is make the Capitol the only place you can catch a Mew, and they would bring the country to its knees.
  
  --
  Only crack the nuts that crack. You don't put the ones that don't crack in the sack.
Politicians looking to cash in on Go's popularity by bobbied · 2016-09-01 11:55 · Score: 2, Insightful

It's all about getting your face on the nightly news. That's why they "Never let a crisis go to waste" and ALWAYS try to associate themselves some way to something that's popular.
This is just a shameless "Hey, look at me!" ploy by a politician looking for attention during an election season. Go away Al, you are not up this time...

--
"File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
Dude, what's that satellite dish for? by MrSavage · 2016-09-01 11:56 · Score: 2

This coming from a senator who used to wear a satellite dish on his head. I'd like to know if he was collecting data from aliens with that thing.
1. Re:Dude, what's that satellite dish for? by PopeRatzo · 2016-09-01 14:29 · Score: 1
  
  This coming from a senator who used to wear a satellite dish on his head. I'd like to know if he was collecting data from aliens with that thing.
  I think that whatever a politician has worn on his head in the past has now been surpassed by the headwear of one of the current presidential candidates.
  All pre-2016 jokes about a politician wearing something ridiculous on their head have now been rendered null and void by reality.
  
  --
  You are welcome on my lawn.
2. Re:Dude, what's that satellite dish for? by Maritz · 2016-09-01 21:31 · Score: 1
  
  Does looking like a freakish oompa-loompa count as something ridiculous on the head? I think it ought to.
  
  --
  I do not want your cheap brainburning drugs. They are useless for work. And I am a working man today.
Umm... by Anonymous Coward · 2016-09-01 11:59 · Score: 3, Insightful

>"Niantic does not and has no plans to sell Pokemon Go user data -- aggregated, de-identified or otherwise -- to any third party," Power wrote. The company also adds that data is shared with mobile app analytics companies and with marketing and analysis companies
We're not selling your personal info, we're selling ad space on your phone to marketers who have chosen to advertise to you based on your personal info which we gave them for free.
Totally different.
1. Re:Umm... by CCarrot · 2016-09-01 12:47 · Score: 1
  
  >"Niantic does not and has no plans to sell Pokemon Go user data -- aggregated, de-identified or otherwise -- to any third party," Power wrote. The company also adds that data is shared with mobile app analytics companies and with marketing and analysis companies
  We're not selling your personal info, we're selling ad space on your phone to marketers who have chosen to advertise to you based on your personal info which we gave them for free.
  Totally different.
  Ah, there we go. I was wondering why they'd give away the milk instead of selling it...well spotted!
  
  --
  "I love animals! Some are cute, others are tasty, what's not to like?" - Betsy Schroeder, Jeopardy contestant
2. Re:Umm... by barc0001 · 2016-09-02 05:24 · Score: 1
  
  > We're not selling your personal info, we're selling ad space on your phone to marketers who have chosen to advertise to you based on your personal info which we gave them for free.
  Actually it is. There's MILES of difference between saying :
  "Hey, you want to sell to a particular group of people who we know of, give us some money and we'll give you a list of people to talk to"
  and
  "Hey, you want to sell to a particular group of people who we know of, give us some money and an ad you want them to see and we'll show them the ad"
3. Re:Umm... by Anonymous+Cow+Ward · 2016-09-02 07:47 · Score: 1
  
  That's not necessarily true. They could be asking those companies to analyze the data for Niantic's own internal use - trying to understand what demographics they're appealing to, etc.
  
  --
  Examine even your most deeply held beliefs. Nobody is always right.
Data is shared, not sold. by BlackSupra · 2016-09-01 12:18 · Score: 4, Insightful

"Niantic does not ... sell Pokemon Go user data...to any third party,"....

...data is shared with mobile app analytics companies[,] marketing [companies,] and analysis companies....
Data is shared, not sold.
1. Re:Data is shared, not sold. by Harlequin80 · 2016-09-01 15:38 · Score: 1
  
  I believe Niantic have about 30 employees. Those employees will predominately be developers of their various games and skilled in that type of work. What they are probably not very good at is detailed data analytics.
  So what do you do if you're a business and you need a skillset and toolset that you don't have and you need? You hire another business that provides the skillset and toolset that you need. Just like hiring a plumber.
  So I don't read this as them giving the data away at all. I read this as "we need to know something but don't know how to get that from our data, so lets get XYZ company in to help"
2. Re: Data is shared, not sold. by kubajz · 2016-09-01 17:35 · Score: 1
  
  Good point. I would add another bit of lawyer speak - Niantic 'does not have plans' to sell personal info in the future which does not mean 'we will not sell' but means 'we could make plans to sell'
3. Re: Data is shared, not sold. by Maritz · 2016-09-01 23:35 · Score: 1
  
  Yeah. Saying "I have no plans to" roughly translates to "I'm fucking going to".
  
  --
  I do not want your cheap brainburning drugs. They are useless for work. And I am a working man today.
Full access and control... by MobyDisk · 2016-09-01 12:30 · Score: 2

full access and control over their Google accounts.
FYI: That only applies to the iPhone version of the app. I run the android app, and it never asked for any such permission. I don't even login to the game with my Google account. If I go to the "Apps connected to your Google account" it currently displays "You haven't granted any apps or websites access to your Google Account."
Does the OS X version require a Google account? Can't you login with a Pokemon Trainer account like you can on Android?
1. Re:Full access and control... by Anonymous Coward · 2016-09-01 12:53 · Score: 2, Informative
  
  It was a "bug" at launch on iOS. After it was announced in a lot of "omg the world is ending" news articles it was promptly fixed.
I like Senator Al by CityZen · 2016-09-01 12:46 · Score: 1

We need more comedians in political offices. They help offset the drama.
Re:They don't give a sh*t about private property by youngone · 2016-09-01 12:49 · Score: 4, Funny

So your niece is stupid. Since when is that Niantic's problem?
Any 21 year old with no self control is just a poorly raised child.
He wrote a letter by PopeRatzo · 2016-09-01 13:00 · Score: 5, Informative

Interesting that the headline says Franken "questioned" Niantic (which sounds like the name of a drug for erectile dysfunction, by the way). In fact, what he did was send them a letter, with these (quite reasonable) questions. In fact, these are issues that are brought up daily by users here on Slashdot:

1. Pokemon GO has stated that it collects a broad array of users' personal information,
including but not limited to a user's profile and account information, their precise
location data, and information obtained through Cookies and Web Beacons. Can you
explain exactly which information collected by Pokemon GO is necessary for the
provision or improvement of services? Are there any other purposes for which Pokemon
GO collects all of this information?
2. According to reports, Pokemon GO also requests permission to access a number of
mobile capabilities, including but not limited to the ability to control vibration on a
phone, prevent the phone from sleeping, and find contact accounts on the device. Can
you explain exactly which features and capabilities are necessary for Pokemon GO to
access for the provision or improvement of services? Are there any other purposes for
which Pokemon GO has access to all of these features and capabilities?
3. If, in fact, some of the information collected and/or permissions requested by Pokemon
GO are unnecessary for the provision of services, would Niantic consider making this
collection/access opf-in, as opposed to requiring a user to opt-out of the
collection/access?
4. Pokemon GO has stated that users' information can be shared with The Pokemon
Company and "third party service providers". Can you provide a list of current service
providers? Does Pokemon GO also share users' information with investors in Pokemon
GO?
5. Pokemon GO has further indicated that it shares de-identified and aggregate data with
other third parties for a multitude of purposes. Can you more exhaustively describe the
purposes for which Pokemon GO would share or sell such data?
6. Can you describe how Niantic ensures parents provide meaningful consent for their
child's use ofPokemon GO and thus the collection of their child's personal information?
Apart from publicly available privacy policies, how does Niantic inform parents about
how their child's information is collected and used?
7. According to reports, signing into Pokemon GO on iOS through a user's Google account
gives Niantic full access to an individual's Google account without the user's knowledge.
Niantic has since recognized that it erroneously asked for more permissions than it
intended. Can you provide an update on any fix Niantic is seeking to correct this mistake?
Also, please confirm that Niantic never collected or stored any information it gained
access to as a result of this mistake.
Considering the happy horseshit the US Congress has been doing for the past 6 years, I'm not sure this isn't a case of an elected official actually doing his job. Maybe that's why it seems so unusual.
Oh, and here's the full text of Franken's letter:
http://www.franken.senate.gov/...

--
You are welcome on my lawn.
1. Re:He wrote a letter by nomadic · 2016-09-01 15:20 · Score: 3, Insightful
  
  "In fact, these are issues that are brought up daily by users here on Slashdot:"
  
  Eh, Slashdotters hate politicians, especially Democratic politicians. If they don't do X they're useless, if they do do X they're only doing it for the wrong reasons, etc. etc..
2. Re:He wrote a letter by arth1 · 2016-09-01 18:31 · Score: 1, Informative
  
  Niantic (which sounds like the name of a drug for erectile dysfunction, by the way)
  It's the name of a town in Connecticut, as well as the Native American people for which it was named.
3. Re:He wrote a letter by Oswald+McWeany · 2016-09-01 23:42 · Score: 3, Interesting
  
  Niantic (which sounds like the name of a drug for erectile dysfunction, by the way)
  It's the name of a town in Connecticut, as well as the Native American people for which it was named.
  If they named an erectile dysfunction drug after them you'd expect them to be a more populous tribe.
  
  --
  "That's the way to do it" - Punch
4. Re:He wrote a letter by bobbied · 2016-09-02 06:14 · Score: 1
  
  "Doing his job" ? Perhaps, but that's what he's paid for. Getting public exposure in the process? Excellent... Getting paid, doing your job AND getting in the public eye? Priceless come the next election.
  
  --
  "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
Re:They don't give a sh*t about private property by whoever57 · 2016-09-01 13:48 · Score: 1

"they are sending players onto private property", No they are not. The Pokemon are spawning in "public areas" not private. I have many hundreds of spwan points mapped and none are on private property. They spawn on sidewalks, not back yards. Plus you can catch them from 5 meters away so, you are wrong on every assumption you have made.

Where to start with this one? Usually, I don't respond to ACs, but I will in this case.
1. Just because you don't know of any Pokestops on private property does not mean that these do not exist. You fail at logic.
2. The private property is sufficiently large that the precise locations are far more than 5 meters from any public location.
You are the one with false assumptions. Go crawl back into your Mom's basement.

--
The real "Libtards" are the Libertarians!
no plans? by codeAlDente · 2016-09-01 21:47 · Score: 1

Senator Franken probably had no plans to create the most extensive surveillance network of innocent people in human history, but he's doing everything in his power to keep it going. ALL YOUR DATA ARE BELONG TO US.

--
He once inserted random mutations into his code, just so he could have the experience of debugging.
Re:Insightful! by Maritz · 2016-09-01 21:59 · Score: 1

You don't have any politicians who care about privacy. That's why you have almost no protection in law. Customer data practices in the US are fucking shocking.

--
I do not want your cheap brainburning drugs. They are useless for work. And I am a working man today.
Re:They don't give a sh*t about private property by Maritz · 2016-09-01 22:41 · Score: 2

Surprised I didn't her about that from the neighbors.
Maybe they aren't dickheads.

--
I do not want your cheap brainburning drugs. They are useless for work. And I am a working man today.
Re:They don't give a sh*t about private property by CrimsonAvenger · 2016-09-01 22:43 · Score: 1

2. The private property is sufficiently large that the precise locations are far more than 5 meters from any public location.

Five meters my left hind leg! I can tag a pokestop from across a five-lane road. And the pokestop in question is set back from the far side of the road by 20 meters or so....

--

"I do not agree with what you say, but I will defend to the death your right to say it"
Re:They don't give a sh*t about private property by johncandale · 2016-09-02 15:01 · Score: 1

A sending players onto private propertys
shut the fuck up. Have you even played the game? it doesn't send players anywhere. It doesn't even have a homing feature that works. If the spawn isn't on your screen you won't even know it's there. So you wouldn't even have any incentive to trespass. And even if it did, that is a players problem, not the games. Thats like saying a map of wi-fi rounters is at fault for me tresspassing for free wi-fi. NO. No NO. IT'S MY FAULT FOR TRESPASSING.
Re:Why Niantic? by johncandale · 2016-09-02 15:02 · Score: 1

You, I like you. People just like to hate on them because it's seen as a 'kids' game