Who Has More of Your Personal Data Than Facebook? Try Google

Christopher Mims:

As justifiable as the focus on Facebook has been, though, it isn’t the full picture. If the concern is that companies may be collecting some personal data without our knowledge or explicit consent, Alphabet Inc.’s GOOGL -1.11% Google is a far bigger threat by many measures: the volume of information it gathers, the reach of its tracking and the time people spend on its sites and apps.

New regulations, particularly in Europe, are driving Google and others to disclose more and seek more permissions from users. And given the choice, many people might even be fine with the trade-off of personal data for services. Still, to date few of us realize the extent to which our data is being collected and used.

“There is a systemic problem and it’s not limited to Facebook,” says Arvind Narayanan, a computer scientist and assistant professor at Princeton University. The larger problem, he argues, is that the very business model of these companies is geared to privacy violation. We need to understand Google’s role in this.

——

Google also is the biggest enabler of data harvesting, through the world’s two billion active Android mobile devices.

Since Google’s Android OS helps companies gather data on us, then Google is also partly to blame when huge troves of that data are later used improperly, says Woodrow Hartzog, a professor of law and computer science at Northeastern University.

A good example of this is the way Facebook has continuously harvested Android users’ call and text history. Facebook never got this level of access from Apple ’s iPhone, whose operating system is designed to permit less under-the-hood data collection. Android OS often allows apps to request rich data from users without accompanying warnings about how the data might be used.

To be listed in Google’s Android app store, developers must agree to request only the information they need. But that doesn’t stop them from using “needed” data for additional purposes.

Designers call the ways marketers and developers cajole and mislead us into giving up our data “dark patterns,” tactics that exploit flaws and limits in our cognition.