Hacker News Reader

Comment by screamingninja | Hacker News Reader

> As the only bank-led media platform of its kind, Chase Media Solutions combines the scale and audience of a retail media network with the exclusive advantages of Chase’s first-party financial data, institutional credibility and precise targeting capabilities.

This seems to be a first, though a lot of transaction data is already leaked to wallet providers (Google, Apple, Samsung) when you add your cards to those digital wallets in exchange for added convenience or offers. Note that these wallets get access to ALL card transactions, including physical card swipes, and not just those conducted via their platform.

View on HN

> Note that these wallets get access to ALL card transactions, including physical card swipes, and not just those conducted via their platform.

Do you have a citation for this? I see no evidence of this in the user-facing parts of the Google Wallet app, nor do I see something like that in the terms.

With apple wallet, you get a notification when there's a transaction on the card, even if it's not related to the applepay at all.

I’ve never seen that. I do see alerts from the bank’s app itself, which makes sense since that’s how I configured it.

Are you sure you’re getting alerts through Apple Wallet and not just the bank app?

It’s real but depends on the issuer. I see it with Amex but not Citibank for example.

I get alerts via Apple wallet regarding my Fidelity cash management card. Those do not come from Fidelity's app. (Fidelity has amazing banking products btw, but they underinvest in app development.)

> Do you have a citation for this? I see no evidence of this in the user-facing parts of the Google Wallet app, nor do I see something like that in the terms.

No, this is from my personal understanding. Please feel free to correct me if you think this is incorrect.

Do you have a source for your claim that wallet providers get access to all card transactions? Looking at the wallet, my linked cards only have the data that came though the mobile payment.

It’s not a first at all. Lots of financial institutions have similar platforms. There is a whole ecosystem of data providers that can get your transaction data for everything from fraud prevention to loyalty programs

> a lot of transaction data is already leaked to wallet providers (Google, Apple, Samsung) […] Note that these wallets get access to ALL card transactions, including physical card swipes, and not just those conducted via their platform.

That’s not true at all for Apple Pay: “Apple Pay doesn’t collect any transaction information that can be tied back to the user. Payment transactions are between the user, the merchant and the card issuer.”[1]

The system is designed such that transactional information goes directly from the bank’s server to your device, and doesn’t pass through Apple’s servers (unless you’re using Apple Card)

[1]: https://support.apple.com/en-gb/guide/security/sec82e7bc3f8/...

Good to know that Apple does not collect and store this data. The original issue, however, is that the banks continue to share this data with wallet providers. I have seen notifications on my phone wallet when using the physical card, which I found suspicious.

From the brief research I did trying to validate your claim, it looks like there's a second feature you can opt into that tracks transactions similar to a budget app. But as far as I can tell that's a distinct thing from the payments part.

That is not what they said. If they meant that, they would say: "Apply Pay doesn't collect any transaction information." They explicitly added the clause: "that can be tied back to the user". That means they do collect transaction information.

As they are only bound to providing a interpretation of "that can be tied back to the user" that is "technically correct", like how a monkey paw only needs to technically grant your wish, all they have to do is not link the transaction to your name and they have technically fulfilled their end of the bargain. That their highly paid legal team deliberately did not disclose higher standards means we should not engage in wishful thinking. They can tighten up their legally binding language if they want some trust.

Reply on news.ycombinator.com