Skip to main content

Congress demands answers over Gmail fiasco, data collection on phones

Congress is now demanding answers from Apple and Google regarding data collection on iOS and Android devices. Both Apple CEO Tim Cook and Alphabet CEO Larry Page received letters from the Energy and Commerce Committee seeking explanations about how these devices collect and use recorded audio, location information, how third-party partners and developers access data, and more.

The probe arrives just after reports surfaced that third-party developers have full access to messages in Gmail along with the recipient’s address and time stamps. The access also includes data stemming from the use of the Gmail plugin for price comparison, travel planning, and so on. So far there is no evidence that these third parties misused personal data.

Related Videos

As an example, Google partner Return Path reportedly scans more than 100 million emails a day sent and received by Gmail users accessing its network. The company claims that its algorithms can detect and discard personal emails from its system, but the algorithm initially miscategorized personal emails, forcing data analysts to spend several days reading 8,000 emails so they could train the system to properly label emails.

According to Google, it vets all third-party developers before granting access to Gmail messages and requires user permission. The problem is that permission requests often don’t state whether users are granting email access to a human or a computer.

The letter to Page addresses the Gmail scandal, pointing out that in June 2017, Google said content scanning in Gmail to provide personalized advertisements would halt to “keep privacy and security paramount.” But despite the promise, third-party developers still have access to Gmail content even if they’re not creating personalized advertisements.

“Google still permitted third parties to access the contents of users’ emails, including message text, email signatures, and receipt data, to personalize content. In the context of free services offered by third parties, these practices raise questions about how representations made by a platform are carried out in practice,” the letter states.

But the probe doesn’t stop there. The letter to Page points out that Android devices can/do collect “non-triggered” audio data from conversations conducted near the device to detect a “trigger” phrase. There are also suggestions that third-party apps on Android have access to and use “non-triggered” audio data without informing the device owner.

Meanwhile, Cook is feeling the heat as well. Congress points to apps still served up on the App Store that Apple deems “contradictory” to the company’s values, such as the apps provided by Google and Facebook. Apple claims it recently changed its App Store policy to limit the amount of data collected by third parties, yet they’re reading Gmail messages.

The two letters also address data collection used by cellular towers when location services, Wi-Fi, and Bluetooth are disabled, there are no installed apps, and the device doesn’t have a SIM card. Data is stored locally on the device and provided to Google once network capabilities are re-established. Congress wants to know if Apple’s products have the same data-retaining capabilities.

Updated on July 10: Added news about the two information requests.

Editors' Recommendations

Google removes its own data-collection app after it got past Apple
Trusted Contacts

Only a few days after Apple shut down the Facebook Research app on iOS, Google has taken the initiative of shutting down its own audience-research app, Screenwise Meter, from Apple's enterprise program for internal iOS app testing. Of course, it only took the initiative after being reached out to by TechCrunch, which first reported on the app.

The Facebook Research app essentially tracked data on users between the ages of 13 and 35 who had the app installed, seeing what they did on their phone and so on. The app was permissions-based and Facebook reportedly paid participants. Google's Screenwise Meter app took a similar approach to "research," though Google only worked with users 18 and over.

Read more
It’s now easier to tell Google exactly what data it can use to advertise to you
google revamped ad settings tool android

Online privacy could be on the rise in 2018. After the Cambridge Analytica scandal prompted Facebook to tweak how users can control their ad experience on the social media website, it looks like Google is also stepping up to give you a little more control. The company has announced a revamp of the slightly old and outdated Ad Settings, which Google says "makes it easier to understand and control how ads are tailored to you."

By the looks of it, the new Ad Settings website will make it a whole lot easier to see the kinds of data that Google is using to advertise to you. The interface is organized based on topics -- so you'll be able to see a list of topics that Google thinks you're interested in.

Read more
How much of your data is Apple collecting? Not much, and here’s how to see it
Apple releases tools for checking the data it collects, starting with Europe

Not so long ago, a New York Times journalist took a look at just how much Facebook knew about him, and was horrified by the answer. Of course, this little experiment begged the question -- how much do the other popular tech companies know about their users? To answer that, Jefferson Graham of USA Today looked into how much data Apple had collected from him, and was quite surprised by the answer -- not that much.
Now, if you want to see exactly what Apple knows about you, that process has been made a little bit easier -- though it's rolling out first in the European Union. Apple's new Data and Privacy website lets you download everything that Apple associates with your account, including your Apple ID, App Store activity, AppleCare history, and iCloud data.

For folks in the rest of the world, don't worry -- we'll get this option in the coming months, too. Apple has also made it easier for you to update your information, deactivate your account, or permanently delete it.

Read more