![](\"https:\/\/media.wired.com\/photos\/5aafe8a299365b02dce6ce2a\/master\/pass\/facebook_data_privacy-01.png\"\/)
<\/p>\n<\/p>\n
Credit to Author: Brian Barrett| Date: Mon, 19 Mar 2018 22:02:03 +0000<\/strong><\/p>\n Signing up for <\/span>a Facebook account, or any free online service, comes with an implicit bargain: Use it as much as you want\u2014check your News Feed, like a status, poke a friend\u2014and in return, the company will collect your data, and use it to serve you ads both on Facebook<\/a> and around the web. But what appears to be a simple exchange has become anything but.<\/p>\n This is not a screed about deleting your Facebook account\u2014although if you want to, here's how<\/a>. It\u2019s not a rant about online ads. It is an argument, though, that Facebook has been a poor steward of your data, asking more and more of you without giving you more in return\u2014and often not even bothering to let you know. It has repeatedly failed to keep up its side of the deal, and expressed precious little interest in making good.<\/p>\n By now you\u2019ve likely heard of Cambridge Analytica, a company that provided data services to Donald Trump\u2019s 2016 presidential campaign. More recently, it has entered the spotlight for having pilfered the data of 50 million Facebook<\/a> users. Cambridge obtained that data from a researcher named Aleksandr Kogan, who developed a quiz app in 2013 that collected information from not only the 270,000 people that downloaded the app, but many of their friends, as well. When Kogan passed this information along to Cambridge, it was in violation of the social media company's terms of service.<\/p>\n In 2014, Facebook cut off the third-party developer access that swept tens of millions of people in that particular net. But while the company says it discovered the incident in 2015, it took until this past weekend, after the publication of two deeply reported stories from The Guardian<\/a><\/em> and Observer<\/em>, along with The New York Times<\/a><\/em>, for Facebook both to disclose it and to suspend Cambridge and Kogan from its platform.<\/p>\n 'They\u2019re giving us free stuff, but I deserve to know what the bargain is.'<\/p>\n Nuala O\u2019Connor, CDT<\/p>\n And even then, Facebook lacked transparency. In announcing the suspension, the company seemingly downplayed<\/a> the scope of the issue by citing that 270,000 users that downloaded Kogan\u2019s app had been affected. It added that \u201cfriends who had their privacy settings set to allow it\u201d were also impacted, but failed to note just how significant that impact was. And rather than substantively engage with why Facebook had not offered better safeguards against Cambridge's actions, the social media company's executives partook on a semantic debate on Twitter<\/a> over whether the incident counted as a \u201cbreach.\u201d<\/p>\n In response to an inquiry from WIRED, Facebook pointed to the company's Friday post about suspending Cambridge Analytica. "In 2014, after hearing feedback from the Facebook community, we made an update to ensure that each person decides what information they want to share about themselves, including their friend list," wrote deputy general counsel Paul Grewal. "Before you decide to use an app, you can review the permissions the developer is requesting and choose which information to share. You can manage or revoke those permissions at any time."<\/p>\n But the focus on third-party apps misses the larger issues at play. \u201cFacebook continually pushes the envelope with regards to user privacy,\u201d says Sam Lester, consumer privacy fellow at the Electronic Privacy Information Center. \u201cThey have data on almost every American, and they try to extract maximum value out of that data.\u201d<\/p>\n Supporting evidence isn\u2019t hard to come by; in fact, in 2011 the Federal Trade Commission imposed a legally binding consent decree<\/a> against Facebook over its failure to keep its privacy promises, which critics argue<\/a> has gone largely unenforced.<\/p>\n At the very least Facebook continues to push the boundaries of consent. In 2014, it implemented a controversial test<\/a> in which it attempted to manipulate the emotions of its users through News Feed. In 2016, two years after acquiring WhatsApp, Facebook changed the encrypted chat app\u2019s terms of service<\/a> to reap the phone numbers and various analytics of users with accounts on both services, giving only a 30-day opt-out window. And if you approved its use of face-recognition technology five years ago, Facebook automatically applied that preference<\/a> to a host of new face-recognition features it rolled out in December, only notifying users last month that they might want to check their settings.<\/p>\n Beyond those more public flare-ups, though, a certain opacity permeates Facebook\u2019s offerings, and many of the company's users have no idea the extent to which their information is used. \u201cTransparency is fundamental,\u201d says Nuala O\u2019Connor, president and CEO of the Center for Democracy & Technology, a nonprofit focused on online civil liberties. \u201cI don\u2019t want to know the ones and zeroes of every algorithm. That\u2019s an unreasonable burden on the individual. But I do deserve to know the outcome of this data. They\u2019re giving us free stuff, but I deserve to know what the bargain is."<\/p>\n Facebook didn\u2019t invent data collection, and is far from the only company that partakes. It has to pay the bills somehow. And in a post Monday afternoon, Facebook VP Andrew Bosworth maintained that maintaining your privacy is in the company's best interests. "Yes developers can receive data that helps them provide better experiences to people, but we don't make money from that directly and have set this up in a way so that no one's personal information is sold to businesses," Bosworth wrote<\/a>. "If people aren't having a positive experience connecting with businesses and apps then it all breaks down. This is specifically what I mean when we say our interests are aligned with users when it comes to protecting data."<\/p>\n One minute you\u2019re filling out an app survey; the next, your answers are informing the psychographically targeted ads of a political campaign. No one signed up for that.<\/p>\n \u201cAs with Google, Facebook\u2019s business has been built on data and the \u2018contract\u2019 they\u2019ve struck with their users for access to all of their data in exchange for offering free services,\u201d says Jason Kint, CEO of Digital Content Next, a media trade association that focuses in part on improving online ads. \u201cThis model has clearly eroded consumer and publisher trust as both have become more wise to the dangers of leaving it to Facebook to use the data how they see fit.\u201d<\/p>\n For many, Facebook and its products\u2014Messenger, WhatsApp, Instagram\u2014serve as a utility. (In some countries, Facebook's Free Basics program effectively means it is<\/em> the internet.) But it\u2019s worth asking: What has it given you in return?<\/p>\n 'They have data on almost every American, and they try to extract maximum value out of that data.'<\/p>\n Sam Lester, EPIC<\/p>\n Your mileage here will vary. But as Facebook collects more and more data, and offers advertisers more and more tools to monetize it, the benefit to you seems not to have grown in kind. You get an ever-shifting algorithm designed to keep you scrolling, which the company\u2019s own research<\/a> suggests can leave you \u201cfeeling worse afterward.\u201d You get dozens of Russian propagandists flooding millions of News Feeds<\/a> with high-emotion content designed to undermine US democracy, with slow and incomplete disclosures<\/a> about the impact. And you get ads for the same pair of shoes\u2014that you already bought\u2014trailing you for months.<\/p>\n In fairness, Facebook does regularly remind users to check their privacy settings. (If you haven\u2019t done so in a while, take the time to now<\/a>!) And you don\u2019t like it, you can always just delete your account. But privacy advocates say it\u2019s unfair to put the onus on the user.<\/p>\n \u201cAs consumers, social media is the way we interact with public life,\u201d says EPIC\u2019s Lester. It\u2019s frankly not a reasonable bargain to say that users either need to withdraw from the internet or spend half of their life scouring through privacy policies that nobody understands, that are hidden in ways that are almost impossible to find.\u201d<\/p>\n Asking what Facebook user can do to protect themselves, Lester says, as akin to asking what drivers could do to protect themselves in a car before seat belts became standard.<\/p>\n The good news is, some version of a data privacy seat belt may be in the offing. The European Union\u2019s General Data Protection Regulation will require transparency from companies<\/a> about what kind of data they collect, and how it will be used. And while no such law seems imminent stateside, the Attorney General of Massachusetts announced an investigation into Facebook and Cambridge Analytica that could at least shed more light on what took place. Senator Ron Wyden Monday followed up with a detailed series of questions<\/a> for Facebook to answer.<\/p>\n In the meantime, Facebook users need to ask themselves very seriously exactly what kind of bargain they\u2019ve struck\u2014and how long they\u2019re willing to put up with Facebook changing the terms.<\/p>\n