{"id":24318,"date":"2019-02-15T15:54:35","date_gmt":"2019-02-15T20:54:35","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=24318"},"modified":"2019-02-15T15:54:35","modified_gmt":"2019-02-15T20:54:35","slug":"your-apps-know-where-you-were-last-night","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2019\/02\/15\/your-apps-know-where-you-were-last-night\/","title":{"rendered":"Your Apps Know Where You Were Last Night"},"content":{"rendered":"

The New York Times<\/a> (tweet<\/a>, Hacker News<\/a>):<\/p>\n

At least 75 companies receive anonymous, precise location data from apps whose users enable location services to get local news and weather or other information, The Times found. Several of those businesses claim to track up to 200 million mobile devices in the United States — about half those in use last year. The database reviewed by The Times — a sample of information gathered in 2017 and held by one company — reveals people’s travels in startling detail, accurate to within a few yards and in some cases updated more than 14,000 times a day.<\/p>\n

These companies sell, use or analyze the data to cater to advertisers, retail outlets and even hedge funds seeking insights into consumer behavior. It’s a hot market, with sales of location-targeted advertising reaching an estimated $21 billion this year.<\/p>\n

[…]<\/p>\n

Many location companies say that when phone users enable location services, their data is fair game. But, The Times found, the explanations people see when prompted to give permission are often incomplete or misleading. An app may tell users that granting access to their location will help them get traffic information, but not mention that the data will be shared and sold. That disclosure is often buried in a vague privacy policy.<\/p><\/blockquote>\n\n

Jason Koebler<\/a>:<\/p>\n

\n

Along with the investigation, the New York Times<\/i> published a guide to managing and restricting location data<\/a> on specific apps. This is easier on iOS than it is Android, and is something everyone should be periodically doing. But the main takeaway, I think, is not just that we need to be more scrupulous about our location data settings. It’s that we need to be much, much more restrictive about the apps that we install on our phones.<\/p>\n

[…]<\/p>\n

What this means is that the dominant business model on our smartphones is one that’s predicated on monetizing you<\/em>, and only through paying obsessive attention to your app permissions and seeking paid alternatives can you hope to minimize these impacts on yourself.<\/p>\n<\/blockquote>\n\n

Jason Koebler<\/a>:<\/p>\n

Don’t think Apple or Google get enough shit for incentivizing an app economy that relies on free apps that make money by monetizing the data collected by your phone. Allowing the “app is free but we sell your data” as a business model for flashlights and games was disastrous<\/p>

This is another reason why I think Apple’s Walled Garden is so terrible. For years, it was completely fine to make sketchy apps that monetized data. Why wasn’t Apple protecting its users from that business model?<\/p>

I suspect Apple would argue this is why you need<\/em> a walled garden, but Apple has not done a great job of policing it, anyway, so it seems more like protectionism and an obsession with control than anything.<\/p><\/blockquote>\n\n

Will Strafach<\/a>:<\/p>\n

\n

I see some are speaking about this as if apps keep their own location databases, but that is not the case. it is so much worse. the location data is sent directly from your phone to big centralized tracking databases owned by one or more of the 75 tracking firms.<\/p>\n<\/blockquote>\n\n

Nick Heer<\/a>:<\/p>\n

\n

App developers should, at the very least, be required to be completely forthright in their permissions request dialogs. If a developer is scooping and selling user data, they should be able to defend that practice to users in language that they can understand; if they cannot, then perhaps that’s a practice they should cease.<\/p>\n<\/blockquote>\n\n

Previously:<\/p>\n