Tag Archives: Privacy

A $24 Billion Secret

If you use any sort of connected device – a computer, a tablet, or a cell phone – you’re probably (hopefully, anyway) aware that someone is watching.  Maybe that’s a bit of an overstatement, but it’s accurate.  Everything you do, and everywhere you go if it’s a mobile device, is logged, along with some sort of device identifier.  It’s not hard to link a device with a person and that person with behaviors.  That’s really what the targeted advertising business is about.  

In that context, this article from Ad Age shouldn’t come as a real shock, but it’s always a little disconcerting to get a glimpse inside the factory where they make the sausage:

Under the radar, Verizon, Sprint, Telefonica and other carriers have partnered with firms including SAP, IBM, HP and AirSage to manage, package and sell various levels of data to marketers and other clients. It’s all part of a push by the world’s largest phone operators to counteract diminishing subscriber growth through new business ventures that tap into the data that showers from consumers’ mobile web surfing, text messaging and phone calls.

That’s why Verizon bought AOL and some ad tech companies, paying over $4.5 Billion for them.  Think that’s a wise investment?  Well, the global market for telco data as a service is potentially worth $24.1 billion this year, so it seems like it might be to me.  What’s less wise is that most consumers have no clue that all of this information about them – their surfing habits, their travel habits, potentially numbers they’re constantly texting, etc – are being packaged and sold without their consent.  Oh sure – when you sign the contract to use any of the carriers there is a lengthy terms of service agreement you probably clicked right through, and it contained language that said your data may be anonymized and aggregated and sold.  I’m not sure most people understand what that means in real terms.  Try getting phone service without agreeing.

Unlike most apps, which are opt-in, you really have no choice about this.  Are there benefits to the consumer?  Maybe.  In theory, you don’t see ads for things in which you have no interest, and you don’t get information about companies and services that aren’t in your area.   There is a huge downside, however, aside from the creepy factor.  Hackers can steal information that might allow them to know when your home is vacant on a daily basis, for example.  In fact, this sort of thing doesn’t go on in the E.U. countries because of the strict data protections those countries enforce.

The “tell” I see is that the phone companies don’t want to discuss this data business and the revenues they make from selling off our data.  If there wasn’t something nefarious going on, why isn’t it more out in the open?  Maybe if we all knew what was being gathered (300 cellphone events per day per subscriber by some counts), we’d be more curious?  Maybe we’d take steps, as some of us do with tracking blockers on the web, to maintain control of our own data?  What do you think?

Leave a comment

Filed under Huh?

Idiotic Injecting

No one that I know enjoys going to the doctor and getting an injection. Whether it’s as simple as a flu shot or something more complex such as a regimen of allergy shots, it’s not a particularly enjoyable experience. 

Today’s topic is an injection of another sort, but the experience isn’t enjoyable either. It turns out that AT&T has jumped on the “no free lunch” bandwagon with respect to offering wireless hotspots to its customers. A Stanford computer scientist and lawyer was travelling and discovered that the AT&T hotspot to which he had connected was serving ads over web pages he was accessing. When he went to Stanford’s home page, for instance (a page that has zero ads on it), he saw a pop-up ad for jewelry and AT&T itself, and the ads persisted for several seconds until he could close them.

He discovered that the ISP was tampering with HTTP traffic – that’s what serves web pages. It is using a service from a third party to inject the ads and to monetize the traffic. AT&T is far from the first “free” service to do this – Comcast and Marriott are just two others. But as the professor wrote:

AT&T has an (understandable) incentive to seek consumer-side income from its free wifi service, but this model of advertising injection is particularly unsavory. Among other drawbacks: It exposes much of the user’s browsing activity to an undisclosed and untrusted business. It clutters the user’s web browsing experience. It tarnishes carefully crafted online brands and content, especially because the ads are not clearly marked as part of the hotspot service. And it introduces security and breakage risks, since website developers generally don’t plan for extra scripts and layout elements.

In other words, while you might have accepted that as your ISP the folks at AT&T will see and record everything that you’re doing, you might be concerned about an outside company doing so.  Moreover, as a publisher, your beautiful content environment is now sullied by ads from which you derive zero revenue.

If you’re on an AT&T hotspot, you’re already an AT&T customer.  I don’t believe you can log on if you’re not and you’re probably paying them handsomely each month (I know I am).  This sort of nickel and diming might help revenues (I wonder how much in the scheme of things) but it doesn’t help with customer satisfaction. That’s a point from which any business can learn.  Idiotic injection from my perspective.  Yours?

Leave a comment

Filed under digital media, Huh?

The Real DNT Question

The good folks at the Electronic Frontier Foundation released their own definition of “do not track” the other day.  You might wonder why there needs to be more than one definition of such an easy to understand concept.  After all, what could be more clear than “do not track?”  As it turns out, marketers and others seem to misunderstand the term, at least then they are wearing their business hats.  They’re also hiding behind those hats in order not to address the real issue.

Here is where the EFF is coming from:

We think using the Web—including viewing online advertisements—shouldn’t come at the cost of privacy.  Whether their business is analytics, advertising, or social networking, companies dealing with data must be persuaded to respect a universal opt-out from tracking and collecting personal data without consent.

Pretty clear, I think.  You can read the policy they’re promoting here.  DNT Means Do Not Collect…And Do Not Retain…Except Where Required…Necessary to Complete a Transaction… Or With the Clear Consent of the User.  That seems very clear and yet even though this discussion has been going on for years, there is still no effective implementation.  As MediaPost said:

One reason why do-not-track never gained broad support is that the ad industry and privacy advocates couldn’t agree on how the signals should be interpreted. Some privacy advocates argued that people who say they don’t want to be “tracked” don’t want any information about their Web-surfing history compiled. But ad industry representatives said they were willing to stop serving targeted ads to people who turned on do-not-track, but wanted to continue to be able to collect data for purposes like market research and product development.

In other words, we’ll tell you what you mean.  Opting-out is never as good in my mind as opting in.  While advertisers and publishers aren’t exactly holding people against their will in their ad universe, they are forcing users to ask to leave as opposed to inviting them in.  Opting out has been made hard on purpose.  But we’re avoiding the real issue.  We are very focused on finding a good and technologically persistent way to respect users’ privacy and to opt them out.  What we really ought to be focused on is how can we  keep users engaged and opted in while maintaining their trust in how we’re using their information.

How do you see it?

Leave a comment

Filed under Huh?, What's Going On