The new privacy document states:
Starting April 26, 2021, T‑Mobile will begin a new program that uses some data we have about you, including information we learn from your web and device usage data (like the apps installed on your device) and interactions with our products and services for our own and 3rd party advertising, unless you tell us not to.
The section on location data is also different. Under the old T-Mobile policy, location tracking was specifically opt-in and disabled by default unless the end user went to some lengths to enable it. Compare the opening lines of each:
Old policy: “You may provide permission for T-Mobile to use your Network Usage Data and Network Location Data histories to better understand your interests and provide a richer, more personal experience by using the data to deliver online advertising and provide analytics to online advertisers. These settings are “off” by default.”
New policy: “We request your permission before collecting and using precise location data associated with your identifying information for certain non-essential activities.”
(Emphasis added in both cases).
The word “certain” is doing a lot of heavy lifting here. Which non-essential activities do and don’t request permission? There is no longer any mention of tracking being disabled by default. The new policy specifically notes that its new ad tracking will be a big change for Sprint customers. Under Sprint, “data was previously used only if you indicated it was OK with you first.” That’s not the case any longer.
T-Mobile claims that it isn’t directly tracking individuals because, instead of associating your data with your name, it associates this data with “your mobile advertising identifier or another unique identifier.” End users should be aware that it can be trivial to reconstruct personally identifiable information (PII) from so-called anonymous data. Data can be anonymous if it’s aggregated and impossible to correlate with the activity of any given individual, but if the company is associating data with unique identifiers, those identifiers can probably be leveraged across multiple platforms to create a data and activity record.
Currently, at least according to the Wall Street Journal, T-Mobile’s new practices will mean it’s selling more personal data than either AT&T or Verizon. AT&T is described as enrolling users in a basic program that groups them anonymously according to inferred interests and shares more personal information only on an opt-in basis. Verizon’s program supposedly works similarly, though this would be a change from its practices years ago. T-Mobile, in contrast, will share individual user data and claims it can prevent abuse through the use of unique advertising identifiers. This is not an improvement over the current status quo.
Congratulations to T-Mobile. It may have taken the company years, but it’s finally shaken the reputation it cultivated as a dynamic, responsive “uncarrier,” and taken its rightful place alongside Verizon and AT&T.
Protect Your Online Privacy With the 5 Best VPNs
Investing in a VPN is a smart choice right now, but the options are vast. To help narrow things down a bit, we've rounded up five of our very favorite consumer services.
Job Ads for AI Could Soon Look Like This. Are You Ready?
Our recent past has shown us that we can develop the type of machines that would soon open up a whole new field of lucrative and fulfilling work.
Beyond Zoom: Virtual Gathering Spaces for the Holidays and Beyond
Software is not yet available for a complete metaverse experience, but there are some promising new communication platforms that might provide an intermediate step between Zoom and a full-blown metaverse.