Submit Your Work
Internet
Privacy and Surveillance
Thursday, January 28, 2021

WhatsApp's New Privacy Policy: Collecting Metadata and Its Implications

This article is by
Vaishnavi Krishna Mohan
Vaishnavi Krishna Mohan
Global

Share this article
Download as PDF
Cite this Article

Article Contributor(s)

Vaishnavi Krishna Mohan

Article Title

WhatsApp's New Privacy Policy: Collecting Metadata and Its Implications

Publisher

Global Views 360

Publication Date

January 28, 2021

URL

Representative Image WhatsApp

Representative Image WhatsApp | Source: Rachit Tank via Unsplash

According to WhatsApp’s new privacy policy, the app is set to collect “only” user’s Metadata. Metadata can reveal a lot more than merely the app usage of a person. Former NSA General Counsel Stewart Baker stated, “Metadata absolutely tells you everything about somebody’s life. If you have enough metadata you don’t really need content.”

This article explores the ways in which WhatsApp is underselling the true estimation of the significance of Metadata.

Facebook owned WhatsApp recently announced the update of its privacy policy terms. 8th of February, 2021 was initially set as the deadline for users to either accept the new privacy policy or delete their account. By this time, most of us have already witnessed or been a part of the backlash that WhatsApp is experiencing. LocalCircles conducted a survey and the results indicated that 15% of India’s users are likely to move away entirely from the app while 36% will drastically reduce the usage and 67% of users are likely to discontinue chats with WhatsApp business accounts.

To reinstall trust in its users, WhatsApp released a clarification stating that the new policy update doesn’t compromise privacy of messages with friends and family. Furthermore, it explains that the update includes changes related to WhatsApp business accounts are optional too.

However, owing to severe backlash, WhatsApp has pushed the deadline to May 15 while they further clarify their policy updates.

It is true that WhatsApp cannot read our messages as it is end-to-end encrypted which implies that only a message’s sender and receiver can read it. The updated privacy policy intends to alert users that some businesses would soon be using Facebook-servers to store messages with their customers. By accepting the new privacy policy, users will be allowing WhatsApp to reserve all rights to collect your data and share it with the expansive Facebook and Instagram networks ‘regardless of whether you have profiles on those apps.’

A person using WhatsApp | Source: Andrés Rodríguez via Pixabay

By using WhatsApp, you may now be sharing your usage data, your phone’s unique identifier, your location when the location service is enabled, among several other types of metadata. A culmination of all your metadata is linked to your identity.

The value of metadata has been underestimated since the term isn’t clearly understood. Metadata is data about our data. For instance, in a cell phone conversation, the conversation itself isn’t metadata but everything except that is metadata. Data regarding who you called, how long you spoke for, where you were when you placed the call, where the other person on the line was and the time you placed the call. Consider a situation when every time you made a call to someone, you had to inform a particular person about who you called, how long you spoke for, when and where and all other details except the content spoken. This applies for every single call and everyone else’s metadata is also being recorded. The person owning the metadata can analyze and tell a lot about your personal life. Who you work with, who you spend time with, who you are close to, where you are at particular times and so on…

Kurt Opsahl, in his post in the Electronic Frontier Foundation, gives an example of how companies and governments collect intimate details about your life with the disguised use of the word called metadata. The following examples are an excerpt of his article:

“They know you rang a phone sex service at 2:24 am and spoke for 18 minutes. They know that you called suicide prevention hotline from the Golden Gate Bridge.

They know you spoke with an HIV testing service, then your doctor, then your health insurance company in the same hour.

They know you called a gynaecologist, spoke for a half hour, and then called the local Planned Parenthood's number later that day. But nobody knows what you spoke about.”

Metadata provides more than required context to know some of the most intimate and personal details of your lives.  When this data is correlated with the records of other phone calls, one can easily obtain a lot more data and track our daily routines. This is merely about phone calls. WhatsApp includes a lot more features and will collect metadata of chats, businesses and money transactions.

In WhatsApp’s words:

“We collect service-related, diagnostic, and performance information. This includes information about your activity (such as how you use our Services, how you interact with others using our Services, and the like), log files, and diagnostic, crash, website, and performance logs and reports.”

In addition to this, WhatsApp also collects information about IP address, OS, browser information and phone number.

Stanford’s computer scientists conducted an analysis to understand the extent of intrusion of privacy using metadata. The scientists built an app for smartphones. The app was developed to retrieve metadata of calls and text messages from more than 800 volunteers’ phone logs. The researchers received records of more than 250,000 calls and 1.2 million texts. Their inexpensive analysis revealed personal details of several people like their health records. Researchers were also able to learn that one of their participants owned an AR semi-automatic rifle with only metadata.

Gen. Michael Hayden | Source: Wikimedia

Gen. Michael Hayden, the former head of the National Security Agency once stated that “the U.S. government kill[s] people based on metadata.”

In 2016, Facebook was involved in the infamous data privacy scandal which centered around collection of personal data of over 87 million people by Cambridge Analytica, a political consulting and strategic analyst firm. The organization harvested user data for targeted advertising, particularly political advertising during the 2016 U.S. election. While the central offender was Cambridge Analytica, the apparent indifference for data privacy to Facebook facilitated Cambridge Analytical and several other organizations.

In June 2018, Facebook confirmed that it was sharing data with at least 4 Chinese companies, Huawei, Oppo, Lenovo and TCL. Facebook was under scrutiny from the U.S. intelligence agencies on security issues as they claimed that the data with the Chinese telecommunication companies would provide an opportunity for a foreign espionage.

In September 2019, there were reports that the Indian government contemplated making it mandatory for companies like Google, Facebook, and Amazon, to share the public data of users.

The Ministry of Electronics and IT (MeitY) was planning on issuing new guidelines under the Information Technology Act which according to which tech giants would have been required to share freely available data or the public information that they collate in the course of their operations, including traffic, buying and illness patterns.

Europe is exempted from WhatsApp’s new privacy policy as EU antitrust authorities fined Facebook 110 million euros for misleading the regulators during the takeover of WhatsApp in 2014. EU’s strict privacy laws empowers regulators to fine up to 4% of global annual revenue of the companies that breach the bloc’s rules.

Your Metadata is extremely personal. By giving WhatsApp the authority to access it, you are giving access to several other organizations, businesses and it also makes you more vulnerable to third-party hackers and trackers. WhatsApp has given multiple assurances about its updated privacy policy being noninvasive. However, most of these assurances are cleverly worded and misleading statements. It is important to read through the fine print of the new policy before accepting it.

Support us to bring the world closer

To keep our content accessible we don't charge anything from our readers and rely on donations to continue working. Your support is critical in keeping Global Views 360 independent and helps us to present a well-rounded world view on different international issues for you. Every contribution, however big or small, is valuable for us to keep on delivering in future as well.

Support Us

Share this article

Read More

February 4, 2021 4:45 PM

How the failure of political leadership resulted in the explosion of pandemic in Brazil

With over 1.2 million active cases and over 51 thousand deaths as on 30th June 2020, Brazil is one of the worst coronavirus affected countries. Latin America became the epicentre of the coronavirus pandemic in the latter half of May, largely due to Brazil’s incompetency in dealing with the pandemic. Due to the underreporting and low testing rates, the actual number of active cases and deaths are unknown.

The Brazilian Ministry started making changes to the number of cases reported, making it even harder to control the situation the pandemic has caused. The country’s response has been widely criticized in Brazil and outside. The President of Brazil, Jair Bolsonaro, dismissed the threat of the virus and the pandemic. OnMarch 26, 2020, he said that Brazilians are immune to the virus and even if they are drunk in a sewer they “don’t catch a thing.” He defied the guidelines set by his own health ministry and visited a busy commercial district in Brasilia, the capital of Brazil, where he told all the elderly Brazilians to get back to work. He also went on TV many times and called it little flu and accused the media of hysteria. Even as the coronavirus crisis has worsened recently, some major cities have eased their preventive measures, like Sao Paulo opening up shopping malls in Mid-June and beaches getting crowded again. With all of this happening, hospitals are close to running out of intensive care beds.

In early March, Brazil declared a public health emergency, a few days after the World Health Organization. The Ministry of Health in Brazil urged the officials to cancel all the public events and reinforce the measures of social distancing as prescribed by the World Health Organization. Some experts thought that Brazil could handle the pandemic based on its records during past public health emergencies. Brazil’s health care system is underfunded, but it does not fail to provide robust coverage across the country. The efforts of the state government went awry when the President called the virus a “cold” and provided anti-malaria tablets as a solution to the virus. President Bolsonaro’s clash with the governors and officials led to two health ministers leaving- one was fired and the other one quit. This left the military general, with no public health training, in charge of the virus. The clash amongst the government left the citizens of Brazil uncertain about the importance of following the preventive measures kept in place to prevent the spread of the virus. This led to the defying of the measures, which in turn led to the pandemic’s rate being one of the highest in the world.

The Ministry of Health has not presented a comprehensive plan to beat the virus yet. One of the main initiatives by the Ministry of Health is to boost the production of hydroxychloroquine and has encouraged the doctors in the public healthcare system to prescribe the same. The country has struggled to import lifesaving instruments, like coronavirus tests and ventilators. The lack of tests, in turn, has made it difficult to track the spread of the virus. This might result in the undercount of cases of the virus in the country.  Between Jan. 1 and June 6, 23,171 people who were not diagnosed with the coronavirus died from acute respiratory infections, according to data released by Fiocruz, one of Brazil’s state-run health research institutes. Experts believe most of them died from coronavirus.

At a time when Brazil needs to be putting all its efforts into fighting the virus, the president has been wrapped up in his own political battles. The Supreme Court is investigating allegations of disinformation and intimidation by the President’s supporters. Investigations also state that he has interfered in federal police investigations to protect his family. Due to this, the tensions between President Bolsonaro and the judiciary are high.

During the past few months, politics have become bigger than the pandemic. Even though the health crisis is extremely important, the magnitude of the political scandals has had a huge impact on how the country reacts to the pandemic. There is anger over how President Bolsonaro is handling the crisis and at the same time, there is a fear as to where the country is headed after the pandemic passes.

Read More