New York City to Consider Banning Sale of Cellphone Location Data
nytimes.com
nytimes.com
Most of them stopped according to the article.
https://www.wired.com/story/carriers-sell-location-data-thir...
> Amid the ensuing customer outrage and mounting congressional scrutiny, the major US carriers promised to stop selling user location data to outside brokers. Which is part of what makes the Motherboard story so troubling: Seven months later, it remains easy and cheap for anyone to buy data about a phone's location without a warrant or any justification at all. All you need is a phone number to target. In Motherboard's case it was a T-Mobile customer, but data brokers claim to be able to provide location information from all the major carriers.
Pledging to stop is pretty standard operating procedure whenever bad privacy practices cause a PR stink, but it's quite common to see the same company with the same PR stink a year or two later. Pledges to stop often have more to do with the media cycle than any actual intention to stop.
We'll see...
[0] https://arstechnica.com/tech-policy/2019/01/after-broken-pro...
SUPL seems to be for getting AGPS data. No location data is actually sent to the cell towers.
"SUPL 2.0 features the use of geographical ‘triggers’, which enable the UE to report its position if it enters, leaves, or is within a particular area. Triggering may be enabled either by the network or by the SET, with the two entities agreeing on trigger criteria. Area Event triggers enable key mobile applications such as Check-in services, shopping deals and offers, location based advertising, and child location."
- accelerometer data
- Local and historical WiFi networks
- Application logs
- Cookies
- etc
Is this correct?
For example, this is what I can see by searching "Location" in settings and choosing one of the first results: https://i.imgur.com/jDF9vq6.png. It was shocking what this list looked like when I first upgraded to Q.
I appreciate the move in the right direction, but I suspect that Google is reading the tea leaves to see that they've likely got antitrust on the horizon and they need to start laying the groundwork to fight that.
Also, I don't understand what Google being in trouble for anti-trust has to do with a bunch of third-party apps and third-party SDKs accessing and selling my information.
If I play fantasy futurologist for a second, it would even make for some interesting economics. Underrepresented groups for a particular analysis could pay more, because those groups' data is rarer. A straight, white, male techie is probably a saturated market, so I wouldn't generate much, but a Hispanic woman's could be more valuable.
I don't mind it so much when it's Facebook because it's clear they have to make money somehow. When it's the phone company that I pay money to, it's more surprising, and it feels like I'm being taken advantage of.
I don't have the same expectation of FB. I don't know anyone who does.
This is a problem with running in mostly technical circles. I don't think your expectations are well aligned with "average citizen".
Today, I suspect the benefit of having said data is probably unknown. This data is probably only valuable in aggregate to determine trends.
Showing you a random advertisement vs an advertisement based on the page info vs an advertisement with your data included. I suspect an advertisement based on the page info is 90+% of the value.
That being said, they can't truly pay you meaningful amounts for your data and answer to their shareholders. That's why it's not really done yet.
Plus, they dont' need to in many cases. The whole internet is designed to collect all this data from you, without your consent being necessary.
One of the biggest purchasers of this data is private bounty hunters. It’s definitely useful to them, both in real time and “recent time”.
https://www.vice.com/en_us/article/43z3dn/hundreds-bounty-hu...
Aafaik, when the data is available on the free market that means anyone can buy it. Anyone includes your favorite three-letter intelligence agencies.
Imagine that. Your personal data without a wiretap or other legal authorization.
No thanks.
> This data is probably only valuable in aggregate to determine trends.
I disagree with this data point only because their current profits are being generated because they do not have to pay their data producers. And while I agree with the sentiment that the data is only valuable in aggregate, this doesn't mean my data is worth $0.00. Its still worth pennies, so maybe instead of $20, I earn $5, or less. The point is I'm paid for it. An analogy I had while I was driving over this comment is the equivalent to, say, an orange tree. A single orange is not as valuable as an "aggregate" of oranges.
In the current data economy, companies have maintenance expenses for their "orange harvesters", but not for the oranges themselves. Again, this has often brought up points of "you are using their service, its their data", but I'd say a) this bill clearly shows that some people do not agree with that sentiment, and b) (to continue with the farm analogy) this is where something like share farming [1] would be a usable model.
[1] https://dairy.ahdb.org.uk/technical-information/business-man...
Edit: typo
I'm not whether sure I agree or not, but the book was interesting
Today, no-one is interested in paying the poorest people in the world for their data.
You'll get like $5 just once. It's valued at nowhere near $20/month.
https://www.cnet.com/news/facebook-pays-people-to-access-the...
https://www.cnet.com/news/location-data-from-a-gas-station-a...
2. > Underrepresented groups for a particular analysis could pay more, because those groups' data is rarer. A straight, white, male techie is probably a saturated market, so I wouldn't generate much, but a Hispanic woman's could be more valuable.
Audience size doesn't equate well to cost of data. Buying power is most correlated thing to data cost. In this fantasy, rich white techy males earn more money form their data, and a hispanic woman earns very little.
Individual users are not going to opt out of anything, even though in aggregate, they state that they want the defaults to change.
Are Terms of Service considered explicit?
Between the apps for work and the apps I use for fun, it would take me weeks to fully read through all of the TOS for every piece of software I use if I was insane enough to do it.
Why not? Presumably the goal is that consumers understand the agreements they're in. If nobody reads ToS and everyone knows that nobody reads ToS, then they aren't useful communication.
I guess not.
Users that already pay for these services for this exact reason shouldn't be impacted, but it will impact other services that people consider "free", I would imagine.
Assuming ad tech makes advertising more effective, banning it would make challenging a market incumbent more difficult. You'd need to burn more cash to teach more consumers about your product, a larger fraction of whom would be outside your target market.
Granted, ad tech does not always add value. And there is a legitimate question as to the trade-off between privacy and consumer prices. But the tradeoff exists. Reducing the threat of new entrants means incumbents will raise prices.
An intermediary doesn't need to know me so they can profit from selling my existence and desires to a 3rd party at the drop of a hat.
No, it doesn't. If you have three pipelines between points A and B, removing one of them will raise downstream prices. It doesn't matter that there are two others. Removing an option will increase the cost of the others, even assuming equal effectiveness.
This assumes "ad tech" == "internet wide surveillance". That is certainly the most profitable subset, but it is still just a subset. Something needs to serve those ads and make sure they are relevant to the content they are shown with, even if it exclusively uses the context of the specific page being loaded. Something needs to manage campaign tracking to know which specific sites or which specific ad copy is driving users in, even if no information about the users themselves is captured. Something needs to manage the connections between the ad copy and the site being advertised, both to ensure users go to the place they are supposed to and to combat malicious or hijacked ads.
All of this is "ad tech". Even if you think we should return exclusively to the days of random, untracked banner ads some amount of ad tech is necessary.
I don’t buy many of the “costs will be passed on to consumers” arguments against regulation. If you assume companies already price things efficiently to maximize profit, then they cannot raise prices any further and make more money.
By your argument, taxing a transaction in a market would not ever raise the price charged to the demand side. It's pretty easy to see by reading a chapter about tax incidence (which is different from where the tax is legally placed) and elasticities of supply/demand curves that this is definitely false (not just in theory, but also in practice)
A similar argument could apply to cut the entire advertising industry down to mail-order catalogs and trade shows, which is something I'd like to see happening.
--
[0] - Except the Sentinelese, I guess.
That doesn't seem obvious to me. Why would it not make it more difficult for the incumbents relative to the upstarts?
That cost is being passed down to consumers. So by getting rid of all advertising everybody would see bigger margins and can cut prices.
Efficiency in advertising, measured from the POV of profit made by advertisers, is not a good thing for people at large.
Efficiency from advertiser's point of view is showing ads to people who would buy the things advertised, as in the case above but also including when customers don't need them, can't afford them, when they are actively harmful (say gambling ads for gambling addicts), shown at the most psychologically effective times (when you are vulnerable, desperate, not thinking clearly, etc).
There is a small overlap in those two cases, but the money is on the harmful end.
I agree psychological tricks can be used by advertising ("one weird trick to...") but it's not a major practice to advertise when they are vulnerable.
> don't need 90% of what we buy are not necessities. So this is not just a problem for advertising but for 90% of what we produce. It's okay for people to buy (and advertise) things that they want, not need. In the modern era, we have wealth way beyond covering necessities.
> can't afford them is this a problem with advertising or people's finical responsibility?
> they are actively harmful Is advertising the problem here? If a product or service is actively harmful, why is it legal? Or you prefer a system where there are legal harmful products, but we just can't talk about them?
It seems there are businesses that are bad (or you don't agree with), but you are projecting advertising as the root of the problem. Maybe consider it's the core business you don't like?
That might be a current technical limitation, I'm sure facebook is working on that as we speak. A breakthrough or two in psychology, some improvements in data gathering and crunching, and no user would have a chance against professionals whose job it is to find what exactly to show and when to induce that sale. Humans generally can't exactly install firewalls in their heads and keep it up to date, not against a motivated onslaught.
> can't afford them is this a problem with advertising or people's finical responsibility?
With truly effective persuasion techniques, lines of 'responsibility' will become gray. If you drive through and intersection and somebody shone a bright light and blinded you temporarily, are you responsible for the accident? If you go about your day and somebody distracted you while their partner pick-pocketed your wallet, are you responsible for not guarding your valuables? If herbalife salesman cornered you in a coffee shop and (using half-truths, exaggerations, outrageous promises, pushing on your greed and confusion, social proofs and other sales-fu) sold you a garage-full of product, are you responsible of that mistake?
Um, I was going to create a series of less and less clear-cut examples, but run out of imagination, hopefully idea is legible.
> It seems there are businesses that are bad (or you don't agree with), but you are projecting advertising as the root of the problem.
I'm sure I was imagining worst examples when writing that, but incentives mostly push towards selling more of the stuff you make, regardless of its effect, even for benign businesses. There are exceptions I'm sure, but I expect they are driven by external forces -- regulations, owner's direction that is not profit related, etc.
In presence of truly effective ad tech and barring any friction (like regulation, social blowback, etc), actors who use it will eat those who don't. Markets are red in tooth and nail.
Release the hypnodrones!
'UnFleshedOne described what I meant in a parallel comment.
Why? Sorry this statement is not self evident. If I have the perfect ad system, that only targets people who will buy my product at 100% rate and no one else, why is that not a good thing for people at large?
https://hn.algolia.com/?query=%22announcement%20of%20an%20an...
You have a fundamental misunderstanding of how government works if you think there "is no consideration."
We don't like to think of businesses as behaving this way, and certainly many don't, but this is feature of capitalism, not a bug.
Barring that, Civil Law 101
I hate bad and onerous regulations as much as the next person, but I'm always amazed by how ingrained the `regulations == bad` sentiment has become in society.
Regulations are the rules that make systems stable. Without them we'd just cycle between abuse and violent revolution...
There's a balance to be struck here, and we're always working on finding it. The US seems to tend to come down on the side of "legal until proven it shouldn't be" and the EU seems to lean a little more towards "prevent bad things" than the US.
Personally, I prefer the US version, and I'm glad I live in the US.
I'd love to understand why you think allowing people to do bad things is necessary for innovation and progress.
That's nonsense. Please explain, for example, how you think making it illegal to sell people's telco data in the 80s when we already knew this was happening would have prevented some good thing.
Preventing selling data would have only prevented a few rich sociopaths from getting a bit richer. They knew it was wrong, we knew it was wrong, the only reason it happened (and is still happening) was because people like you refuse to ever allow regulation, and people will likely prevent any regulation that does happen from having any teeth or a broad enough scope, so it will just keep happening. The "innovation" your ideology is incentivizing is just finding new loopholes to crawl through and screw people over.
I get it, the concept that regulation might have side effects makes sense if you talk about it only in general terms. But whenever I find myself arguing against this ideology, it's in a specific situation where your ideology is just being used to let sociopaths profit off of amoral behavior. Your ideology makes sense in theory, but over and over again it simply doesn't play out in practice.
I think home video is overall a net good.
EDIT:
Just to make it clear, I think I more agree with your point overall than the previous poster, I just felt the need to provide a counterexample.
Depends on how much will and political support there is for contorting the Commerce Clause to cover it.
This is the same place that has E-ZPass trackers and automated license plate readers all over the city tracking vehicle movement, that has an untold number of CCTV cameras, and corrupt cops that get away with murder.
I'm not saying we shouldn't commend them for this, just that there are many other major related issues that should be equally concerning.
Edit: Why is this down-voted so heavily? Too cynical?