Waze: Google’s New Spying Tool
zdziarski.com
zdziarski.com
It is possible to both anonymize and aggregate GPS-data to a degree where it is neigh impossible to reverse engineer.
The "we provide data to governments when we have a good faith belief that legal standards are met" is boilerplate. From Facebook, to Atlassian to Wordpress.com, all privacy policies have that wording.
I found this article to be unfounded and harsh of tone. Google doesn't even need Waze to spy on you. If anything: Google-NSA spying has decreased since the Snowden-revelations. They now actively secure most communications, lobby to be more transparent to their users, and fix security bugs like Heartbleed. All the while keeping their profitable marketing profiles on you (call that spying and the word loses its meaning).
> Your GPS location and driving routes. Of course, some of this is needed to deliver the services described, however it does not need to be stored indefinitely. Waze’s privacy policy states that this information will be used to “create a detailed location history of all the journeys you have made”. The question, of course, is “for whom, exactly?”.
It's for you, and for the Waze community at large. When you drive, your most recent routes are saved and you are allowed to edit some area around your route for some amount of time after. This allows you to update the map both for yourselves an others (new road closure near your house? Mark it on the map), which will affect Waze's routing when giving you directions. Tracking where you've been ensures you only edit areas you're legitimately familiar with.
> To spam you with marketing and advertising materials when using Waze; specifically location-specific advertisements using your GPS history.
These are pretty unobtrusive, and I don't really disagree with them in principal. There are already location-specific ads along my route in the form of billboards and signs.
> To email you marketing and advertising materials
I've never gotten an email from Waze, but I could easily block it if I did. I would only be concerned if they were giving out my email to other third-party advertisers that would be difficult to block.
> To conduct surveys and questionnaires (possibly for others, using your data)
I've seen these a couple of times, they're easy to ignore and dismiss. They only show up when you're stopped somewhere. And they're pretty benign, like "Have you seen one of these brands on the map recently?" (referring to little fast food icons which I find rather helpful)
But the biggest thing to note here is that you can turn off Waze at any time, and if you don't trust it to not use GPS when sleeping, then you can enforce that at the OS level.
That part makes sense - you're driving on public roads - but the article mentions a very long list of additional information that is collected on you. Most of which is not clearly necessary for providing the advertised features. That's the worrying part.
Of course you can give that privacy up voluntarily, but I don't think being tracked on your daily commute would sit well with most people over here.
I considered trying to figure out if people could voluntarily submit their trip/GPS data (also anonymized) to agencies instead of the traditional survey but have little idea how to do that kind of stuff.
But the start and end points are critical information. Google now knows where you live and who/where you visit. That's pretty private information and I think most people would like a good assurance that Google won't abuse this knowledge.
Unfortunately the EULA gives them free reign to do what they like with this data and they can choose to give it to others who may also do nasty things with it.
I propose "Privacy Policies" be renamed to "Tracking Policies", because that's what they really are these days. They are all about the ways in which you allow the company to track you, keep and use your data.