Thursday, January 28, 2021

WhatsApp's New Privacy Policy: Collecting Metadata and Its Implications

This article is by

Share this article

Article Contributor(s)

Vaishnavi Krishna Mohan

Article Title

WhatsApp's New Privacy Policy: Collecting Metadata and Its Implications

Publisher

Global Views 360

Publication Date

January 28, 2021

URL

Representative Image WhatsApp

Representative Image WhatsApp | Source: Rachit Tank via Unsplash

According to WhatsApp’s new privacy policy, the app is set to collect “only” user’s Metadata. Metadata can reveal a lot more than merely the app usage of a person. Former NSA General Counsel Stewart Baker stated, “Metadata absolutely tells you everything about somebody’s life. If you have enough metadata you don’t really need content.”

This article explores the ways in which WhatsApp is underselling the true estimation of the significance of Metadata.

Facebook owned WhatsApp recently announced the update of its privacy policy terms. 8th of February, 2021 was initially set as the deadline for users to either accept the new privacy policy or delete their account. By this time, most of us have already witnessed or been a part of the backlash that WhatsApp is experiencing. LocalCircles conducted a survey and the results indicated that 15% of India’s users are likely to move away entirely from the app while 36% will drastically reduce the usage and 67% of users are likely to discontinue chats with WhatsApp business accounts.

To reinstall trust in its users, WhatsApp released a clarification stating that the new policy update doesn’t compromise privacy of messages with friends and family. Furthermore, it explains that the update includes changes related to WhatsApp business accounts are optional too.

However, owing to severe backlash, WhatsApp has pushed the deadline to May 15 while they further clarify their policy updates.

It is true that WhatsApp cannot read our messages as it is end-to-end encrypted which implies that only a message’s sender and receiver can read it. The updated privacy policy intends to alert users that some businesses would soon be using Facebook-servers to store messages with their customers. By accepting the new privacy policy, users will be allowing WhatsApp to reserve all rights to collect your data and share it with the expansive Facebook and Instagram networks ‘regardless of whether you have profiles on those apps.’

A person using WhatsApp | Source: Andrés Rodríguez via Pixabay

By using WhatsApp, you may now be sharing your usage data, your phone’s unique identifier, your location when the location service is enabled, among several other types of metadata. A culmination of all your metadata is linked to your identity.

The value of metadata has been underestimated since the term isn’t clearly understood. Metadata is data about our data. For instance, in a cell phone conversation, the conversation itself isn’t metadata but everything except that is metadata. Data regarding who you called, how long you spoke for, where you were when you placed the call, where the other person on the line was and the time you placed the call. Consider a situation when every time you made a call to someone, you had to inform a particular person about who you called, how long you spoke for, when and where and all other details except the content spoken. This applies for every single call and everyone else’s metadata is also being recorded. The person owning the metadata can analyze and tell a lot about your personal life. Who you work with, who you spend time with, who you are close to, where you are at particular times and so on…

Kurt Opsahl, in his post in the Electronic Frontier Foundation, gives an example of how companies and governments collect intimate details about your life with the disguised use of the word called metadata. The following examples are an excerpt of his article:

“They know you rang a phone sex service at 2:24 am and spoke for 18 minutes. They know that you called suicide prevention hotline from the Golden Gate Bridge.

They know you spoke with an HIV testing service, then your doctor, then your health insurance company in the same hour.

They know you called a gynaecologist, spoke for a half hour, and then called the local Planned Parenthood's number later that day. But nobody knows what you spoke about.”

Metadata provides more than required context to know some of the most intimate and personal details of your lives.  When this data is correlated with the records of other phone calls, one can easily obtain a lot more data and track our daily routines. This is merely about phone calls. WhatsApp includes a lot more features and will collect metadata of chats, businesses and money transactions.

In WhatsApp’s words:

“We collect service-related, diagnostic, and performance information. This includes information about your activity (such as how you use our Services, how you interact with others using our Services, and the like), log files, and diagnostic, crash, website, and performance logs and reports.”

In addition to this, WhatsApp also collects information about IP address, OS, browser information and phone number.

Stanford’s computer scientists conducted an analysis to understand the extent of intrusion of privacy using metadata. The scientists built an app for smartphones. The app was developed to retrieve metadata of calls and text messages from more than 800 volunteers’ phone logs. The researchers received records of more than 250,000 calls and 1.2 million texts. Their inexpensive analysis revealed personal details of several people like their health records. Researchers were also able to learn that one of their participants owned an AR semi-automatic rifle with only metadata.

Gen. Michael Hayden | Source: Wikimedia

Gen. Michael Hayden, the former head of the National Security Agency once stated that “the U.S. government kill[s] people based on metadata.”

In 2016, Facebook was involved in the infamous data privacy scandal which centered around collection of personal data of over 87 million people by Cambridge Analytica, a political consulting and strategic analyst firm. The organization harvested user data for targeted advertising, particularly political advertising during the 2016 U.S. election. While the central offender was Cambridge Analytica, the apparent indifference for data privacy to Facebook facilitated Cambridge Analytical and several other organizations.

In June 2018, Facebook confirmed that it was sharing data with at least 4 Chinese companies, Huawei, Oppo, Lenovo and TCL. Facebook was under scrutiny from the U.S. intelligence agencies on security issues as they claimed that the data with the Chinese telecommunication companies would provide an opportunity for a foreign espionage.

In September 2019, there were reports that the Indian government contemplated making it mandatory for companies like Google, Facebook, and Amazon, to share the public data of users.

The Ministry of Electronics and IT (MeitY) was planning on issuing new guidelines under the Information Technology Act which according to which tech giants would have been required to share freely available data or the public information that they collate in the course of their operations, including traffic, buying and illness patterns.

Europe is exempted from WhatsApp’s new privacy policy as EU antitrust authorities fined Facebook 110 million euros for misleading the regulators during the takeover of WhatsApp in 2014. EU’s strict privacy laws empowers regulators to fine up to 4% of global annual revenue of the companies that breach the bloc’s rules.

Your Metadata is extremely personal. By giving WhatsApp the authority to access it, you are giving access to several other organizations, businesses and it also makes you more vulnerable to third-party hackers and trackers. WhatsApp has given multiple assurances about its updated privacy policy being noninvasive. However, most of these assurances are cleverly worded and misleading statements. It is important to read through the fine print of the new policy before accepting it.

Support us to bring the world closer

To keep our content accessible we don't charge anything from our readers and rely on donations to continue working. Your support is critical in keeping Global Views 360 independent and helps us to present a well-rounded world view on different international issues for you. Every contribution, however big or small, is valuable for us to keep on delivering in future as well.

Support Us

Share this article

Read More

April 13, 2021 7:47 AM

Are India's Antitrust laws effective at controlling monopolies?

On 15th of July 2020, Reliance Industries Ltd (RIL) held its annual general meeting of the shareholders. The chairman and managing director Mukesh Ambani, announced that global tech giant Google would be investing $4.5 billion in Jio Platforms. Facebook also has acquired a 9.99% stake in Jio Platforms. This is the first time in the world that both the global tech giants have invested in the same entity. These investments have boosted the confidence for Jio Platforms and also for India’s growth but there have been questions and speculations about the potential anti-competitive makeup of these deals.

The objective of this article is to explore the interpretation and the effectuality of Antitrust laws in India.

Anti-competitive practices are those business practices which firms engage in to emerge as the or one of the few dominant firms, who will then be able to restrict inter firm competition in the industry in a bid to preserve their dominant status. The Collins English dictionary defines antitrust laws as those laws that are intended to stop large firms taking over their competitors by fixing prices with their competitors, or interfering with free competition in any way. These laws focus on protecting consumer interests and promoting a competitive market. The word ‘Antitrust’ is derived from the word ‘trust’. A trust was an agreement by which stakeholders in several companies transferred their shares to a single set of trustees.

In present-day India, talking about market dominance Reliance Industries Ltd (RIL), resembles American company—John D Rockefeller's Standard Oil Company—of the early 20th century. Mukesh Ambani holds the highest ability to influence markets and policy in every sector in which RIL is present—petrochemicals, oil, telecom, and retail. Many industry experts and critics suggest that Ambani has used his political clout to twist the regulatory framework in his favor.

Gautam Adani, founder of Adani Group | Source: Twitter

Furthermore, economic power in aviation infrastructure is clustering into a few hands as well. In 2019, the Adani Group bagged the 50-year concession to operate all the six Airports Authority of India-operated airports—Lucknow, Jaipur, Guwahati, Ahmedabad, Trivandrum, and Mangaluru—which were put up for auction. The company also obtained a controlling stake in ‘The Chhatrapati Shivaji Maharaj International Airport, Mumbai’ from GVK Airports. Moreover, Adani Group is now set to construct the Navi Mumbai International Airport. The group is now eyeing Indian Railways while they have already established an alarming monopoly in green energy and sea ports. While Airports are natural monopolies, one private company controlling more than 8 important airports is not good news to airlines.

India has established antitrust laws to promote competition. For 40 years, India followed the Monopolies and Restrictive Trade Practices Act 1969 (MRTP). This act was based on principles of import substitution and a command-and-control economy. However, over time several amendments had to be made to the act. In 2002, the Indian approved a new comprehensive competition legislation. This is called the Competition Act 2002. The act focused on regulating business practices in order to prevent practices having an appreciable adverse effect on competition (AAEC) in India. The act primarily regulates three types of conduct: anti-competitive agreements (vertical and horizontal agreements), abuse of a dominant position, and combinations such as mergers and acquisitions. The act lists out the cartel agreements that it intends to prevent. This list includes price-fixing agreements, agreements between competitors seeking to limit or control production, market-sharing agreements between competitors and bid-rigging agreements. These agreements are called “cartel” arrangements.

The competition Act is enacted by the Competition Commission of India (CCI), which is exclusively responsible for the administration and enforcement of the Act. It comprises a team of 2 to 6 people appointed by the government of India. The CCI has previously handled high-profile cases. In 2018, CCI imposed a fine of Rs135.86 crore on Google on the grounds that Google misused its dominant position and powers to create a search bias. In another important case, the CCI, ordered a probe into Idea, Vodafone and Airtel when Reliance Jio owner Mukesh Ambani lodged a complaint against the three for forming a cartel and denying Jio the POI required for network connection, causing multiple call failures. The Cellular Operator Association of India was also probed for encouraging the same.

In some cases, the Competition Commission has been successful in tackling activities that are against the free competitive market. However, critics and economists believe that the act is now unable to adapt to the changing business environment in e-commerce, telecom, technology and the government’s role in distorting competition. Demonetization and GST drove the formalization of the economy. One consequence of them was that bigger, better organized players gained at the cost of smaller ones with lesser resources. The Insolvency and Bankruptcy Code (IBC) was designed to solve the problem of non-performing assets (NPAs) of banks. But consequentially, it has also led to a consolidation in many sectors.  

However, CCI has expressed inability to consistently adjudicate punitive measures due to obligation in several cases. This points to the loopholes in the very provisions of the Competition Act 2002. In an Economic and Political Weekly (EPW) article, Aditya Bhattacharjea—an Economist—argues that even though the 2002 Act represents an improvement from the MRTP Act which was extremely restrictive, the present act also remains riddled with loopholes and ambiguities. According to Bhattacharjea, this creates unnecessary legal uncertainty, which acts in advantage of lawyers and law firms. For instance, the act allows the CCI to leave some scope of flexibility for “relative advantage, by way of contribution to the economic development.” Bhattacharjea argues that this may allow large firms to justify their anti-competitive practices in the name of development.

Mark Zuckerberg and Mukesh Ambani having online interaction after Facebook invested in Jio Platforms | Source: NDTV

Data portability plays a significant role in determining market power of certain firms. In 2017, the CCI closed cases against both WhatsApp and Jio involving allegations of predatory pricing and privacy violations. In both these decisions, the regulator did not consider the restrictions around data portability as a competitive advantage. The possible data leveraging advantage for the attempted monopolization could be the ‘portfolio effect’. Portfolio effect refers to increasing the range of brands, by bundling of telecom or messaging service and other service offerings or illegal vertical restraints, even predatory pricing. This in turn may lead to greater ability of further leveraging, deterring innovation and results in degradation of quality. Another possible advantage is explained as the theory of leveraging. The best example of leveraging is when Microsoft entered the media-player market by extending its quasi-monopoly on the operating systems market by taking advantage of the indirect network effects. In case of Facebook acquiring 10% of Jio’s shares, it is a concern that both entities could potentially use WhatsApp’s market dominance in telecom and social networking services and establish dominance in e-commerce market through anticompetitive acts.

There was a consensus among Indian policymakers at the time of the 1991 economic reforms that economic liberalization would eliminate the nexus between the business elites and the policymakers. On the contrary, the relationship between these two groups got further strengthened.

On the other hand, few critics and industrialists argue that extreme restrictions on growing companies hampers the progressive growth of the national economy. While RIL’s Jio looks like a cause for concern, the company has also saved Rs. 60,000 crores for annual savings in India. In addition to that, the entry of Jio to the telecom industry has led to a rise in data consumption and improved accessibility and affordability of the internet across the nation.

However, the concern still lingers as the question of whether this growth is a result of actual innovation or crony capitalism remains unsolved.

However, the fact that telecom, organized retail, ports and airports have two or three players controlling the bulk of the sector needs to be addressed. A healthy competition is quintessential for long-term growth and innovation. Harmful trade practices and cartelization does not only affect small manufacturers but also the general public.

The government, CCI and other lawmakers must closely examine the present laws and provisions and need to see if they are required to amend the act.

Read More