This is nothing unusual? It’s extremely common for a private company to request identify verification
This is nothing unusual? It’s extremely common for a private company to request identify verification
The same is the case with social media. They don't need your government ID, and they're not authorized to demand it like the health care industry is.
A casual reading of the terms and conditions might lead a person to object, that it says they don't sell your data. A close reading notes that it says they don't sell to "third parties". But they leave out the fact that any other company the store does business with is not a third party. They technically don't sell your data to them, they provide your data to other companies during the normal course of transacting business with them. Thus, your data flows through the system, unchecked.
This is how Scientology tracked me for almost three decades even after I changed addresses a dozen times. I bought something from them once on Visa, and they constantly got updates on my personal info.
How are you OK with VISA and not OK with ID on a social media site when the former is far worse than the latter?
We've already given up privacy.
Please help me understand if I'm wrong. I'd like to not be so cynical.
In contrast to social media, where there is not any substantial regulation yet, it's the wild west with your information right now... They can sell your phone number, anything saved on your phone, everything you post, and even possibly run a keylogger from their mobile app on your device...
Mobile (installed) apps can collect precise location data on you once you install their app... Credit card companies can potentially track you and gather personal data as well if you install their (native) mobile app. As phones evolve, it will eventually become normal to be tracked and to not be able to opt out if regulation (laws) aren't made and enforced to protect individuals from privacy invasion.
This is why I use web sites instead of installing single-use apps, but also why certain companies want to end support for browser based sites, and why some services can only accessed via installed apps.
This is a good point. Even though they are ignored, there at least is something to use in litigation.
> and even possibly run a keylogger from their mobile app on your device...
Like the Emoji apps that were doing this years ago.
> instead of installing single-use apps,
I keep my app use extreeeemmely limited.
We need serious regulation on social media sites that collect this much personal information, meaning stuff people post that is intended for a very limited, controlled audience, and not wall posts that are public to everyone. (Like HN.)
I think the problem is what someone pointed out to me yesterday: tying DMs to a "real" identity. Purchases are already tied to who we are, and so are every form we sign that has significance. Phone companies know whos in our address books. Email is 100% insecure, always has been. The last thing to protect is the DMs.... which is probably too late.
There is no governing body that determines who is and who is not "authorized" to request ID in the United States.
Edit: I thought of two more: airlines and banks. But I assume both of those industries are required to by regulation.
I always chose to never use my real name on any social media accounts, if it was required I'd probably elect to not sign up, but their EULAs frequently are revised to serve whatever purpose they want because there is no meaningful regulation in place to limit their data mining practices on pretty much anyone because others post info about you in some way over time, even if you don't have an account.
Sometimes it's a legal obligation (under KYC), sometimes it's pressure from credit card companies, and sometimes it's just websites making shit up to enforce their own rules.
Twitter requires ID and personal information (i.e. your phone number) for verification even from users that are not involved in any sort of purchasing or income scenarios.
Reddit started out not caring about who anyone was, but over time IP based tracking and other things started to creep in...
Private companies that aren't regulated nor involved in conducting regulated business should not be asking for any government issued ID nor personal user data if you ask me.
There is no good argument for making it a *requirement*. If the platform has issues moderating its content, then there are solutions other than requiring their users to identify themselves. Plus, as we saw, asking for ID does not help fight against problematic content and its spread. The root of the problem may lie elsewhere, e.g. in the system which boosts user-generated content which draws clicks (clickbait) and likes (outrage and fake news). Asking for ID is only good for the targetted advertisement business, telling otherwise is a decoy.