back

by 2OEH8eoCRo0·6y ago·view on hn ↗
>Google and most of the other major tech companies don't actually sell user data. They collect it to use internally.

Why do so many people think that these companies sell your data?

4 comments
Because people are profoundly bad at understanding how modern online advertising works and the companies profiting from it have done a notably bad job of consumer education.

The most common behavior people observe that makes them think companies are selling their data is when they visit some site P that sells widget p and then on completely unrelated site Q they start seeing ads for p. The obvious conclusion to draw is that Q now knows they visited P. In reality, ad broker X knows the user visited P, and is satisfying queries from Q (really, from the user agent visiting Q) by vending ads for p to the user agent that is displaying site Q's content alongside that ad. But the ad and Q's content are generally sandboxed from each other the same way that your bank account login state is sandboxed from Q also (1). In reality, Q has no idea the user has visited P, but the content on the page strongly suggests that Q does.

(1) note: It is possible there are holes in the security model that an unscrupulous Q could use to gather information on a user about their history on P; that's generally considered a violation of the ad vendor's policy and will get Q kicked off the ad network.

There is also an element of people (esp. on this forum) who strongly dislike big tech companies, and want to use inflammatory language to strengthen their point.
well politicians certainly can make hay of it, in fact they seem to be the biggest spreaders of misinformation. most don't get called out on it because of either that it sounds good or because people who could aren't in positions to be heard.

throw these companies have lots of money to pay fines, suits, and campaign donations with, and the outcome is decided

Just bc data doesn't leave the platform doesn't mean they are not selling products with it baked in. Maybe it's semantics, but if you buy an audience to target based on data that FB is capturing, you are buying user data.
The distinction people have been using in this thread is "buying eyeballs" vs. "buying user data." And it's a meaningful distinction; I might trust FB to show me an ad microtargeted at employees of my company, but I don't trust every advertiser to know what company I work for.
It's more than a semantic difference. Buying user data means you are purchasing data. That is not what is happening here.

When you purchase data, it can be remixed and resold, can be used outside the original terms of service agreed to between FB/Google and their users. This is difficult to enforce agreed upon protections, and is a troubling issue (e.g. Cambridge Analytica had user data they used in a "clearly wrong" manner -- a problem that AFAIK was from 3 years ago and has since been shut down).

Buying access to the users means an advertiser is purchasing the ability to put a message in front of the user. This data is covered by user agreements, and is much harder for third parties to use in a "clearly wrong" manner. This data must be deleted at the request of the user, and can be (relatively) easily deleted by going to the original source (a key distinction -- it's very hard to delete data that has been sold and resold).

It is important to use the correct description of what is happening. On FB, you're not "buying an audience" so much as "defining an audience to reach". You don't get to hold the user data in a csv; you get to put messages in front of groups of people. You don't possess the data -- you have access to use it through a user interface provided by FB/Google.

I respect that you may feel FB/Google holding these user data is unethical. Other people feel the exchange is perfectly fine. Regardless, using precise language is important to not muddy the waters, especially in such a tendentious debate.

Who is the hypothetical you in the second to last paragraph? You are assuming one scenario, that of a brand or agency planner, who is creating a media plan with audience builder or w/e the name is these days.

Saying or assuming that no tech companies sell user data is disingenuous. Case in point, doesn't Edmunds have an exclusive data contract to share data with Oracle Data Cloud?

An advertiser, in the 2nd to last paragraph. I'm only assuming the facts in evidence -- that FB and Google aren't selling user data. They sell advertisements, which use user data for targeting via generally broad mechanisms or 1st party data.

Re-reading my comment, I don't think I said anything about companies in general.

Maybe it's because it's dangled as a red herring all the time when in fact it is barely relevant whether Google & co sell your data.

The fact that they collect it in the first place is the real problem. And when they inevitably get hacked and lose the data (happened), or leak the data (happened), or their employees inappropriately access the data (happened), or they hand it over to whatever government after putting up a token fight (happened)... it doesn't matter one bit.

The news straight up tells them they do and never corrects itself.
Because that's what their competitors in the ad market, namely the press, want them to believe.