from the we're-not-evil-just-misunderstood dept.
FTC sues data broker that tracks locations of 125M phones per month:
The Federal Trade Commission on Monday sued a data broker for allegedly selling location data culled from hundreds of millions of phones that can be used to track the movements of people visiting abortion clinics, domestic abuse shelters, places of worship, and other sensitive places.
In a complaint, the agency said that Idaho-based Kochava has promoted its marketplace as providing "rich geo data spanning billions of devices globally." The data broker has also said it "delivers raw latitude/longitude data with volumes around 94B+ geo transactions per month, 125 million monthly active users, and 35 million daily active users, on average observing more than 90 daily transactions per device."
The FTC said Kochava amassed the data by tracking the Mobile Advertising ID, or MAID, from phones and selling the data through Amazon Web Services or other outlets without first anonymizing the data. Anyone who purchases the data can then use it to track the comings and goings of many phone owners. Many of the allegations are based on the agency's analysis of a data sample the company made available for free to promote sales of its data, which was available online with no restrictions on usage.
"In fact, in just the data Kochava made available in the Kochava Data Sample, it is possible to identify a mobile device that visited a women's reproductive health clinic and trace that mobile device to a single-family residence," the complaint alleged. "The data set also reveals that the same mobile device was at a particular location at least three evenings in the same week, suggesting the mobile device user's routine. The data may also be used to identify medical professionals who perform, or assist in the performance, of abortion services."
The FTC went on to allege: "In addition, because Kochava's data allows its customers to track consumers over time, the data could be used to identify consumers' past conditions, such as homelessness. In fact, the Kochava Data Sample identifies a mobile device that appears to have spent the night at a temporary shelter whose mission is to provide residence for at-risk, pregnant young women or new mothers."
Kochava officials released a statement that read:
This lawsuit shows the unfortunate reality that the FTC has a fundamental misunderstanding of Kochava's data marketplace business and other data businesses. Kochava operates consistently and proactively in compliance with all rules and laws, including those specific to privacy.
Prior to the legal proceedings, Kochava took the proactive step of announcing a new capability to block geo data from sensitive locations via Privacy Block, effectively removing that data from the data marketplace, and is currently in the implementation process of adding that functionality. Absent specificity from the FTC, we are constantly monitoring and proactively adjusting our technology to block geo data from other sensitive locations. Kochava sources 100% of the geo data in our data marketplace from third party data brokers all of whom represent that the data comes from consenting consumers.
For the past several weeks, Kochava has worked to educate the FTC on the role of data, the process by which it is collected and the way it is used in digital advertising. We hoped to have productive conversations that led to effective solutions with the FTC about these complicated and important issues and are open to them in the future. Unfortunately the only outcome the FTC desired was a settlement that had no clear terms or resolutions and redefined the problem into a moving target. Real progress to improve data privacy for consumers will not be reached through flamboyant press releases and frivolous litigation. It's disappointing that the agency continues to circumvent the lawmaking process and perpetuate misinformation surrounding data privacy.
(Score: 2, Insightful) by Runaway1956 on Wednesday August 31 2022, @10:00AM
Places of worship? Someone was listening when I stated in another discussion that ALL DATA should be private? Whether I go to church or not, that information should be equally private with visits to abortion clinics. Ditto for visits to bars, pawn shops, cannabis shops, etc ad nauseum. Corporate America is simply not entitled to citizen's data. It's all sensitive, you idiots!! Whatever demographic you fit into, there are people who dislike you, maybe even hate you, and WILL USE any information they acquire against you.
The police used to tell you that when they arrested you. "Anything you say will be used against you in a court of law, and if you don't say anything, we'll use that against you too!"
“I have become friends with many school shooters” - Tampon Tim Walz
(Score: 2) by drussell on Wednesday August 31 2022, @02:57PM (2 children)
What the heck is a "Mobile Advertising ID" ?!
(Score: 2, Interesting) by Anonymous Coward on Wednesday August 31 2022, @05:31PM
It's somewhat similar to the number that got tatoo'ed on arms in the early 1940's. More recently, it's the same as the ear tag or serial number we give cattle and other commodities that need careful tracking and management in order to be most maximally exploited.
Moooo mooo, my friend!
(Score: 3, Informative) by Runaway1956 on Wednesday August 31 2022, @06:04PM
It's a unique identifier, assigned to each mobile device. https://www.gtricks.com/android/2-ways-to-find-android-device-id-and-change-it/ [gtricks.com] iThings will have similar, but the mechanics may differ.
I don't actually use the cellphone, but I change it randomly, whenever the urge strikes. Since the phone never seems to leave my desk, and it has been degoogled and debloated, I don't suppose that identifier means much. But, I change it anyway.
“I have become friends with many school shooters” - Tampon Tim Walz