Thursday, January 28, 2021

WhatsApp's New Privacy Policy: Collecting Metadata and Its Implications

This article is by

Share this article

Article Contributor(s)

Vaishnavi Krishna Mohan

Article Title

WhatsApp's New Privacy Policy: Collecting Metadata and Its Implications

Publisher

Global Views 360

Publication Date

January 28, 2021

URL

Representative Image WhatsApp

Representative Image WhatsApp | Source: Rachit Tank via Unsplash

According to WhatsApp’s new privacy policy, the app is set to collect “only” user’s Metadata. Metadata can reveal a lot more than merely the app usage of a person. Former NSA General Counsel Stewart Baker stated, “Metadata absolutely tells you everything about somebody’s life. If you have enough metadata you don’t really need content.”

This article explores the ways in which WhatsApp is underselling the true estimation of the significance of Metadata.

Facebook owned WhatsApp recently announced the update of its privacy policy terms. 8th of February, 2021 was initially set as the deadline for users to either accept the new privacy policy or delete their account. By this time, most of us have already witnessed or been a part of the backlash that WhatsApp is experiencing. LocalCircles conducted a survey and the results indicated that 15% of India’s users are likely to move away entirely from the app while 36% will drastically reduce the usage and 67% of users are likely to discontinue chats with WhatsApp business accounts.

To reinstall trust in its users, WhatsApp released a clarification stating that the new policy update doesn’t compromise privacy of messages with friends and family. Furthermore, it explains that the update includes changes related to WhatsApp business accounts are optional too.

However, owing to severe backlash, WhatsApp has pushed the deadline to May 15 while they further clarify their policy updates.

It is true that WhatsApp cannot read our messages as it is end-to-end encrypted which implies that only a message’s sender and receiver can read it. The updated privacy policy intends to alert users that some businesses would soon be using Facebook-servers to store messages with their customers. By accepting the new privacy policy, users will be allowing WhatsApp to reserve all rights to collect your data and share it with the expansive Facebook and Instagram networks ‘regardless of whether you have profiles on those apps.’

A person using WhatsApp | Source: Andrés Rodríguez via Pixabay

By using WhatsApp, you may now be sharing your usage data, your phone’s unique identifier, your location when the location service is enabled, among several other types of metadata. A culmination of all your metadata is linked to your identity.

The value of metadata has been underestimated since the term isn’t clearly understood. Metadata is data about our data. For instance, in a cell phone conversation, the conversation itself isn’t metadata but everything except that is metadata. Data regarding who you called, how long you spoke for, where you were when you placed the call, where the other person on the line was and the time you placed the call. Consider a situation when every time you made a call to someone, you had to inform a particular person about who you called, how long you spoke for, when and where and all other details except the content spoken. This applies for every single call and everyone else’s metadata is also being recorded. The person owning the metadata can analyze and tell a lot about your personal life. Who you work with, who you spend time with, who you are close to, where you are at particular times and so on…

Kurt Opsahl, in his post in the Electronic Frontier Foundation, gives an example of how companies and governments collect intimate details about your life with the disguised use of the word called metadata. The following examples are an excerpt of his article:

“They know you rang a phone sex service at 2:24 am and spoke for 18 minutes. They know that you called suicide prevention hotline from the Golden Gate Bridge.

They know you spoke with an HIV testing service, then your doctor, then your health insurance company in the same hour.

They know you called a gynaecologist, spoke for a half hour, and then called the local Planned Parenthood's number later that day. But nobody knows what you spoke about.”

Metadata provides more than required context to know some of the most intimate and personal details of your lives.  When this data is correlated with the records of other phone calls, one can easily obtain a lot more data and track our daily routines. This is merely about phone calls. WhatsApp includes a lot more features and will collect metadata of chats, businesses and money transactions.

In WhatsApp’s words:

“We collect service-related, diagnostic, and performance information. This includes information about your activity (such as how you use our Services, how you interact with others using our Services, and the like), log files, and diagnostic, crash, website, and performance logs and reports.”

In addition to this, WhatsApp also collects information about IP address, OS, browser information and phone number.

Stanford’s computer scientists conducted an analysis to understand the extent of intrusion of privacy using metadata. The scientists built an app for smartphones. The app was developed to retrieve metadata of calls and text messages from more than 800 volunteers’ phone logs. The researchers received records of more than 250,000 calls and 1.2 million texts. Their inexpensive analysis revealed personal details of several people like their health records. Researchers were also able to learn that one of their participants owned an AR semi-automatic rifle with only metadata.

Gen. Michael Hayden | Source: Wikimedia

Gen. Michael Hayden, the former head of the National Security Agency once stated that “the U.S. government kill[s] people based on metadata.”

In 2016, Facebook was involved in the infamous data privacy scandal which centered around collection of personal data of over 87 million people by Cambridge Analytica, a political consulting and strategic analyst firm. The organization harvested user data for targeted advertising, particularly political advertising during the 2016 U.S. election. While the central offender was Cambridge Analytica, the apparent indifference for data privacy to Facebook facilitated Cambridge Analytical and several other organizations.

In June 2018, Facebook confirmed that it was sharing data with at least 4 Chinese companies, Huawei, Oppo, Lenovo and TCL. Facebook was under scrutiny from the U.S. intelligence agencies on security issues as they claimed that the data with the Chinese telecommunication companies would provide an opportunity for a foreign espionage.

In September 2019, there were reports that the Indian government contemplated making it mandatory for companies like Google, Facebook, and Amazon, to share the public data of users.

The Ministry of Electronics and IT (MeitY) was planning on issuing new guidelines under the Information Technology Act which according to which tech giants would have been required to share freely available data or the public information that they collate in the course of their operations, including traffic, buying and illness patterns.

Europe is exempted from WhatsApp’s new privacy policy as EU antitrust authorities fined Facebook 110 million euros for misleading the regulators during the takeover of WhatsApp in 2014. EU’s strict privacy laws empowers regulators to fine up to 4% of global annual revenue of the companies that breach the bloc’s rules.

Your Metadata is extremely personal. By giving WhatsApp the authority to access it, you are giving access to several other organizations, businesses and it also makes you more vulnerable to third-party hackers and trackers. WhatsApp has given multiple assurances about its updated privacy policy being noninvasive. However, most of these assurances are cleverly worded and misleading statements. It is important to read through the fine print of the new policy before accepting it.

Support us to bring the world closer

To keep our content accessible we don't charge anything from our readers and rely on donations to continue working. Your support is critical in keeping Global Views 360 independent and helps us to present a well-rounded world view on different international issues for you. Every contribution, however big or small, is valuable for us to keep on delivering in future as well.

Support Us

Share this article

Read More

July 17, 2021 6:39 PM

How facebook helps the Authoritarian Regime in Vietnam

The ability of coercing American tech giants like Facebook into compliance is definitely a talking point to brag for the Vietnamese leaders. In October 2019, Facebook’s CEO Mark Zuckerberg stated that “Facebook stands for free expression. In a democracy, a private company shouldn’t have the power to censor politicians or the news.” However, Facebook’s double standard is no novelty. In August 2019, the Minister of Information and Communications, Nguyen Manh Hung took the parliamentary floor and stated that Facebook was restricting access to “increasing amounts” of content in Vietnam. Further, Hung stated that Facebook was complying with 70-75% of the Vietnamese government’s requests for post restrictions. In October 2020, this number went up to 95% for Facebook. Facebook acknowledged that the amount of content on which restrictions were imposed jumped by over 500% in the second half of 2018 alone.

Unlike China, Vietnam has adopted a relatively open attitude to western social media. Vietnamese politicians consider social media beneficial, perhaps it helps the promotion of their missions, personal agendas and even propagandas. In fact, Vietnam happens to have a military unit—called Force 47—with the purpose to correct “wrong views” on the internet. Whereas, there is no set set definition of the “wrong views,” people—if found guilty—can be jailed upto 20 years.

Furthermore, blocking western social media might not be in the self-interest of Vietnam, as doing so can hamper relations with the U.S.—with whom Vietnam desires to strengthen ties. The top communist strata of Vietnam for decades, have been single-minded on what they identify as “toxic information”. The definition of “toxic information” has only broadened over the years and has enabled the authorities to bend the term as per their whims. Vietnamese leaders have misused the threat of “toxic information” by branding content unfavorable to their regime with the term.

Facebook removed over 620 supposed fake accounts, over 2,200 links and several thousand posts which are deemed to be ‘anti-state’ from Vietnam in 2020. In a country without independent media, Vietnamese people are reliant on platforms like Facebook to read and discuss vital and controversial issues such as the dispute in Dong Tam. Dong tam is a village outside Vietnam’s capital, Hanoi, where residents were fighting the authorities’ plans to seize their farmlands in order to build a factory. 40-year-old Bui Van Thuan, a chemistry teacher and blogger, showed his solidarity to the fight and condemned the country’s leaders in one of his Facebook posts which stated “Your crimes will be engraved on my mind. I know you, the land robbers, will do everything, however cruel it is, to grab the people’s land.” On government’s insistence, Facebook blocked his account the very next day preventing over 60-million Vietnamese users from seeing his posts. A day later, Dong tam village was stormed by police with grenades and tear gas. A village leader and three officers were killed just as Thuan had anticipated. Thuan’s account remained suspended for three months after which Facebook informed him that the ban would be permanent. “We have confirmed that you are not eligible to use Facebook,” the message read in Vietnamese. Towards the end of murder trial held over the clash, a Facebook spokesperson said Thuan’s account was blocked due to an error and the timing of the lifting of restrictions was coincidental. The spokesperson denied censoring profiles as per the demands of the government. Thuan’s blacklisting illustrates how willingly Facebook submits to the authoritarian government’s censorship demands.

In April 2018, 16 activist groups and media organizations and 34 well-known Facebook users wrote an open letter to the CEO Mark Zuckerberg, accusing Facebook of assisting Vietnam to suppress dissenting voices. Force 47 or E47, a 10,000-member cyber unit was singled out in the letter. The letter called the unit “state-sponsored trolls” that spread misinformation about the Vietnamese pro-democracy activists.

Force 47 was deployed in 2016 by the state to maintain a “healthy” internet environment. The cyber unit took advantage of the very apparent loophole in Facebook’s community guidelines which automatically removes content if enough people lodge a complaint or report the post/account. The letter alleged that the government used Force 47 to target and suspend accounts or content.

According to a report by The Intercept, the modus operandi of E47 is that a member shares a target who is often a pro-democratic political dissident writer or activist. The information of the target who is nominated for censorship is accompanied with an image of the target with a red “X” marked over it. Anyone interested in victimizing the target needs to just report the account or post for violating Facebook’s pliant community standards regardless of whether the rules were actually broken. The E47 users are asked to rate the targeted page one out of five stars, falsely flag the post and report the page itself.  

Do Nguyen Mai Khoi, a singer and a pro-democracy activist, popularly known as “the Lady Gaga of Vietnam” has been tirelessly trying for over two years to get Facebook to care about the censorship in Vietnam. She has tried to get Facebook’s attention to the fact that groups like Force 47, a pro-government Facebook group of police, military, and other Communist party loyalists have actively been collaborating to suppress the voice of dissidents both offline and online. Her evidence has been substantial and her arguments carry ample clarity. Despite several interactions with Alex Warofka, a Facebook product policy manager for human rights, Mai khoi’s efforts have not been sincerely addressed. Instead, what they claimed was more infuriating. They said “We were not able to identify a sufficient level of community standards violations in order to remove that particular group (E47) or those particular actors.” Since E47 actors are under real names, photos and authentic identities, Facebook dismissed Mai Khoi’s evidence. “At a high level, we require both widespread coordination, as well as the use of inauthentic accounts and identity,” Warofka told Khoi.

Dipayan Ghosh, a former public policy advisor at Facebook and the co-director of the Digital Platforms & Democracy Project at Harvard’s Kennedy School stated:

“I think for Zuckerberg the calculus with Vietnam is clear: It’s to maintain service in a country that has a huge population and in which Facebook dominates the consumer internet market, or else a competitor may step in. The thought process for the company is not about maintaining service for free speech. It’s about maintaining service for the revenue.”

It wouldn’t be surprising to note that the inconsistency of Facebook’s ostensible community guidelines and policies extend beyond Vietnam. In 2016, during the time of political unrest in Turkey, access to Facebook and other social media were repeatedly restricted and further complied to the Turkish government’s request to restrict 1,823 pieces of content which the government deemed unlawful. In 2018, Facebook owned Instagram complied with demands of the Russian government to remove content related to opposition activist Alexei Navalny’s anti-corruption investigation therefore making it inaccessible for over 5 million users who watched and followed Navalny’s investigation. Facebook also routinely restricts posts that governments deem sensitive or off-limits in countries including Cuba, India, Israel, Morocco and Pakistan.

While the CEO of Facebook, Mark Zuckerberg, claims that the platform protects free expression, Facebook has been an active facilitator and flag-bearer of autocratic regimes. The social media giant’s apparent indifference and ignorance has failed its users terribly.

Read More