Jessica Guynn|USA TODAY
We’ve all done it. We're updating the operating system on our mobile phone or installing anapp, and we lazily skimthrough the privacy policy or we don't bother to read itat all before blindly clicking "I agree."
Never mind that we are handing out our sensitive personal information to anyone who asks. A Deloitte survey of 2,000 U.S. consumers in 2017 found that 91% of people consent to terms of service without reading them. For younger people, ages 18-34, that rate was even higher: 97% didso.
ProPrivacy.com says the figure is even higher.The digital privacy group recently asked internet users to take a survey as part of a market research study for a $1 reward. The survey asked participants to agree to the terms and conditions,then tracked how many users clicked through to read them.
Those who clicked through were metwith a lengthy user agreement. Buried in that agreement were mischievous clauses such as one that gives your mom permission to review your internet browsing history and another that hands over naming rights to your firstborn child.
California Consumer Privacy Act of 2020: What the new privacy law means to you
Using a period tracker app?This is what happens to your personal information
Out of 100 people, 19 clicked through to the terms and conditions page, but only one person read it thoroughly enough to realize they’d be agreeing to grant drones access to the airspace over their home.
This isn't the first time researchers have used trickery to drive the point homethat few people readall the terms of service, privacy policies and other agreements that regularly pop up on their screens.
In 2016, two communicationprofessors–Jonathan Obar of York University in Toronto and Anne Oeldorf-Hirsch of the University of Connecticut – asked unsuspecting college students to join nonexistent social network NameDrop and agree to theterms of service. Those who did unwittinglygaveNameDrop their firstborn children and agreed to have anything they shared on the service passed on to the National Security Agency.
Some companies rewardcustomers who scourthe small print. Last year, Georgia high school teacher Donelan Andrews won $10,000 for poring through the terms of the travel insurance policy she purchased for a trip to England. The Florida insurer, Squaremouth, offered theprizeto the first person who emailed the company.
Other companies ding consumers to draw attention to the risks.In 2017, 22,000 people signingup for free public Wi-Fi agreed to perform 1,000 hours of community service – cleaning toilets, scraping gum off the sidewalk and "relieving sewer blockages"– to highlight"the lack of consumer awareness of what they are signing up to when they access free wifi."The company, Purple, offered a prize for anyone who read the terms and conditions and found the clause. One person claimed it.
What you don't know can hurt you
The problem? We needlessly put ourselves at risk bysigning away all kinds of rights overwhat personal data an app or website collects, how they use it, with whom they share it and how long they keep it, says ProPrivacy.com, which decided to draw attention to the problem Tuesday when the world observes Data Privacy Day.
Shady individuals and outfits and snooping corporations constantly extract and exploit our personal information for financial gain, spying on us with the kind of sophisticated monitoring tools that would make James Bond drool.
It's not just ad targeting. Some of that information can end up in the hands of health insurers, life insurance companies, even employers, all of which make critical decisions about our lives.
Yet we mostly just shrug our shoulders when asked. At first, more than two-thirds of the ProPrivacy.com survey participants claimed they read the agreement and 33 claimed to have read it top to bottom.When the jig was up, they offered up the same old excuses:It took too much time to read through it all. They trusted the organization had their best interests at heart. Or they simply didn't care.
That "que seráserá" attitudeis understandable. There are few laws or regulations protecting online privacy, so shielding our personal information from prying eyescan seem like an exercise in futility. But we can all take steps to thwart 24/7 corporate surveillance. That starts with reading the smallprint.
What are you signing?
The terms of service is a legal document that protects the company and explains to consumers what the rules are when using the service, saysRay Walsh, data privacyadvocate atProPrivacy.com. A privacy policy, on the other hand, is a legal document that explains to users how their data will be collected and used by the company and any third parties or affiliates. Remember, when you click "I agree" on these documents, your approval is legally binding.
Much of what's included in these documents is boilerplate or relatively innocuous. But there are some areas to pay attention to, such as granting a company the right to sell your personal information to third parties, trace your movements using GPS and other tracking capabilities, harvestyour device identifiers or track your device's IP address and other digital identifiers, Walsh says. Beware of companies that demanda "perpetual license" to your "likeness" or to your personal data.
"These kinds of invasive stipulations can be extremely harmful, and consumers must ensure that they never agree to them or other privacy agreements that denote not how the user will gain privacybut rather how they will have it stripped from them," Walsh says.
Search for keywords
Who has the time to wade through page after page of dense legal jargon to spot the worrisome bits?
Alex Hern, a journalist with The Guardian, spent one weekin 2015 reading the terms and conditions the rest of us don't. The result: It took him eight hours to skim 146,000 words in 33 documents.A study by two law professors in 2019 found that 99% of the 500 most popular U.S. websites had terms of service written as complexly as academic journals, making them inaccessibleto most people.
If your eyes are glazing over, there are some shortcuts. Search for keywords or phrases in the document that will tell you what information theapp or website collects, how long it keeps it and with whom it shares it. Watch out for sections that say youmust “accept,” “agree” or “authorize” something, Walsh says.
"Third parties” isa keyphrase, as are“advertising partners” and “affiliates.” “Retain” or “retention” canindicate how long the company keeps your personal information. “Opt out” may indicate how to turn off the sale or collection of your personal information.
"The do’s and don’ts can alter radically from one service to another, and it is essential for consumers to understand how they can use each individual service they sign up for," Walsh says.
Don’t have time? Here's a shortcut
The motto of theToS;DRuser rights initiative (short for “Terms of Service; Didn't Read,” inspired by internet acronym TL;DR "Too Long; Didn't Read"): “I have read and agree to the terms” is “the biggest lie on the web.”
The project offers a free browser extension that labels and rates these agreements from very good (Class A) to very bad (Class E) on the websites you visit. When installed in your browser, itscans terms of service to unearththe worrisome stuff.
