Privacy Watchdog Asks FTC To Look Into Google's Offline Shopping Tracker (arstechnica.com)

An anonymous reader quotes a report from Ars Technica: A privacy advocacy group has filed a formal legal complaint with the Federal Trade Commission, asking the agency to begin an investigation "into Google's in-store tracking algorithm to determine whether it adequately protects the privacy of millions of American consumers." In the Monday filing, the Electronic Privacy Information Center (EPIC) said it is concerned with Google's new Store Sales Management program, which debuted in May. The system allows the company to extend its online tracking capabilities into the physical world. The idea is to combine credit card and other financial data acquired from data brokers to create a singular profile as a way to illustrate to companies what goods and services are being searched for online, which result in actual in-person sales. Because the algorithm that Google uses is secret, EPIC says, there is no way to determine how well Google's claimed anonymization feature -- to mask names, credit card numbers, location, and other potentially private data -- actually works. While Google has been cagey about exactly how it does this, the company has previously revealed that the technique is based on CryptDB.

Comments

google , do no evil

[RotateLeftByte]

Really? Pull the other one. This is evil pure and simple.
And to the people who sell on our data like it was seed corn, stop it unless we give explicit permission.

Re:google , do no evil

[Anonymous Coward]

You can opt out. Put aside the credit cards and toss the various rebate cards. Shop with cash only.

Perhaps inconvenient in the beginning; but if many go this road, there will be a market for a credit card company that doesn't sell any info about customers. Starting such a company is also an option - some people would happily leave visa etc. for a credit card with an anonymity contract.

Working politically, as this group do, is also an option.

Re:google , do no evil

[OldMugwump]

Care to explain *why* you think it's evil? It's not obvious to many of us.

Re:google , do no evil

[Anonymous Coward]

Absolutely. I shop online with cash all the time, since every single website is so accommodating to COD's.

Re:google , do no evil

[Anonymous Coward]

Then use cryptocoin, gift cards, or one time reload visa cards.

Re:google , do no evil

[geekmux]

You can opt out. Put aside the credit cards and toss the various rebate cards. Shop with cash only.

Perhaps inconvenient in the beginning; but if many go this road, there will be a market for a credit card company that doesn't sell any info about customers. Starting such a company is also an option - some people would happily leave visa etc. for a credit card with an anonymity contract.

If "many" go this road?? Only 5% of the consumer market even gives a shit enough about privacy anymore to even want an anonymity clause. THAT is the problem. 95% of consumers will happily trade their digital soul in exchange for no fees, 5% off every purchase, and a free donut in their birthday.

Also remember how many services are "free" today. Digital souls are highly profitable, and often subsidize the costs of running a business. Would you be willing to pay a $200 annual fee in exchange for anonymity? 95% of consumers sure as hell wouldn't. They get pissed if you have the unmitigated gall to charge $2 for a fucking cell phone app.

Re:google , do no evil

[Anonymous Coward]

Hiding services and opportunities, your market worth profile might be used by companies to not offer you specifically products and services based on your social status, political affiliation, race, sex, etc... specifically health-care providers, insurance comapnies, and banks.

Re:google , do no evil

[ravrazor]

Exactly - I consider myself pretty technology-literate. A couple of weeks ago, about 15 minutes after leaving a Burger King, a message popped up in my email thanking me for my "recent visit" and asking me to fill out a survey about how satisfied I was. I had NOT paid for anything (paid by friend), or used any sort of personal identifier except for walking in IRL. It's happened with another store or two since.

The only thing I could narrow it down to was Google Maps, as usual not actually exiting when it was quit and running quietly in the background. Whether that means it is sending records of my physical location to Google constantly, or somehow listening all the time to be triggered by some signal when I enter a store is irrelevant.

It is done by something Google is doing on my phone (and millions of others), is a complete breach of privacy, and not based on anything as specific as a credit card as I never made purchases in most places it asked about and they don't have any of my card info.

Re:google , do no evil

[Anonymous Coward]

Your phone will rat you. If you have wifi enabled
http://www.cisco.com/c/en/us/products/wireless/2700-series-wireless-location-appliance/index.html
http://www.extremenetworks.com/product/extreme-airdefense/

You do not have to pay or use loyalty card.
Have you ever provided your phone number to BurgerKing?
When walking , you are #DeviceXYZ , connected to "target profile" with code name ravrazor.

was it GSM phone or ?
with GSM you can swap your sim card to another device and test if you will be recognized.
I think, that with different device link between wifi hw id and phone number will be broken.

Re:google , do no evil

[Anonymous Coward]

Let's hear it from official Google Asshole Sean Willden to tell us what a Great Thing this is.

Re:google , do no evil

[Anonymous Coward]

You are actually pretty technology-illiterate given what you said in this post. You explicitly opted into this feature. You asked Google to take your location data to make your experience better. Your failure to understand technology doesn't make Google evil.

Already pervasive across all credit cards

[NineNine]

Multiple credit card companies are already doing this. Our merchant services company offered us this same data. Of course Google is tracking everything you do. But they can only do it with the willing help of Visa/Mastercard.

Re:Already pervasive across all credit cards

[guruevi]

Exactly. There are a number of companies now offering not just your credit card data but which ads subgroups of people look online, what they buy in the real world and together with location data shared from cell phone apps and ad beacons, together with gaze tracking, even what real world ads they view and paths they take in places like malls.

Re:Already pervasive across all credit cards

[Gilgaron]

Is this sort of sales data a bubble? I can't imagine paying the people to code that all up will result in sales margin that cover the cost. It'd seem more worth the money to payola your way to the top of the search results in Amazon et al.

Re:Already pervasive across all credit cards

[guruevi]

According to the sales people, it is, the costs to get into these things are huge though, not for your average business. The data feeds alone are hundreds of thousands per year and require nearly a datacenter but they can get you whatever sales info you want but they nicely tie together Social Media and Credit Card Transactions with Location Data.

Re:Already pervasive across all credit cards

[viperidaenz]

If it increases Wallmart's revenue by 0.25%, that's an extra billion dollars.

You say privacy violation.

[rmdingler]

We say business model.

I imagine the folks at the Federal Trade Commission are pretty shook up about this.

Wrong

[Anonymous Coward]

"..there is no way to determine how well Google's claimed anonymization feature -- to mask names, credit card numbers, location, and other potentially private data -- actually works."

Its right there in the title "Google's claimed anonymization feature" ....so it doesn't work at all.

Make all google tracking opt-in

[Anonymous Coward]

Make all google tracking opt-in and let us choose specifically the 500 different things by having each controlled.

If google provides an "allow all" option, then they must provide a "disallow all" option too.

Same for facebook, twitter, inst-whatever, every website.

I'm tired of my privacy being invaded without any say in the matter just because I use a browser in the way it was intended.

Best ad/script/tracker blocker bar-none

[Anonymous Coward]

See subject: Better in efficiency & abilities vs. browser addons APK Hosts File Engine 9.0++ SR-7 32/64-bit https://www.google.com/search?hl=en&source=hp&biw=&bih=&q=%22APK+Hosts+File+Engine%22+and+%22start64%22&btnG=Google+Search&gbv=1/

Ads/script & malware rob speed/security/privacy

Hosts add speed (via hardcodes/adblocks), security (vs. bad sites/malware/poisoned dns), reliability (vs. dns down), & anonymity (vs. dns requestlogs/trackers).

Less power/cpu/ram + IO use vs. DNS/routers/addons/antivirus + less security bugs/complexity & faster vs. addons/routers/remote dns!

Avoids DNSChangers in routers/IP settings & dns redirects (99.999% of ISP DNS != patched vs. it) + lightens DNS load & resolves faster from local system RAM!

* Via what u NATIVELY have in the FASTER kernelmode IP stack!

APK

P.S. - Safe https://www.virustotal.com/en/file/e01211ca36aa02e923f20adee0a3c4f5d5187dc65bdf1c997b3da3c2b0745425/analysis/1433430542/

Wow!

[nospam007]

Why not just also forbid the fidelity cards etc, which do exactly the same thing.

Bought some shelves at yesterday.

[Kaenneth]

I spent a while in the shelving department at a store; did no related searches, took no pictures.. (was there to look at PS4 vs Xbone game selections, so was looking for shelves to put it on, maybe) ended up buying a unit with cash.

Today I got multiple ads for shelving units on sale at that same store.

I keep location services turned off...

Re:Bought some shelves at yesterday.

[DogDude]

Your cell phone provider sells all of your location information, too.

Abusive companies, IMO: Google, Microsoft, Adobe

[Anonymous Coward]

In my experience, Google is rapidly becoming EXTREMELY ABUSIVE. Is Google competing with Microsoft and Adobe Systems?

Google also seems to be badly managed in other ways, also. The recent modification of Google News is one area; there is now less information.

Google allows Android phone manufacturers to abuse customers.

Many, many web sites use Google services. That allows Google to track users.

A Google manager told me that Google has more money than it knows how to manage, and that Google is poor at communicating what is happening in the company.