While the 老澳门开奖结果 of Northern California and Facebook both agree that location information is very sensitive, we that Places gives users adequate control of how and when to share this information. (Next time I visit my hometown, I鈥檇 like to be able to hang out with some of the Facebook crew at the Nut House without being asked again and again and again if I want that shared with everyone nearby!).
We understand and appreciate the various privacy protections and options that are currently available to Places users. But there were some straightforward steps that we highlighted to Facebook that they could have taken to improve the privacy features before launch. Not having these common sense privacy protections has unfortunately overshadowed some of the safeguards that the Places team worked so hard to build into the product.
The 老澳门开奖结果 of Northern California鈥檚 original and our note several good privacy protections in Places:
- Limiting the default visibility of check-ins on your feed to 鈥淔riends Only.鈥
- Allowing you to customize your check-in privacy.
- Providing notice to you each time you are checked in by a friend.
We even said that we were 鈥渉appy to see Facebook take steps to protect this information and keep it under your control.鈥 However, we have a responsibility to thoroughly analyze the privacy implications of new products and these were our initial concerns:
- 鈥淣o鈥 is not an easy option when asked whether your friends can check you in.
If your friend tries to check-in for you, you have two choices: 鈥淎llow Check-Ins鈥 and 鈥淣ot Now.鈥 Until you hit 鈥淎llow Check-Ins,鈥 you cannot be checked into a Place by a friend. But you are not given an option, like 鈥淣o鈥 or 鈥淒on鈥檛 Allow,鈥 that would opt you out of Places. Instead, all you can do immediately is hit 鈥淣ot Now,鈥 which just means 鈥渁sk me again later.鈥
In addition, if you use Places yourself, you are simply told that you are allowing friends to check-in for you by using the service; you are not informed that you have the option of using Places yourself without allowing friends to check-in for you.
Yes, you can disallow check-ins permanently using your privacy settings 鈥 but Facebook doesn鈥檛 make that clear to new Places users.
We hope that Facebook will take the steps to easily remedy this by (a) providing a clear 鈥淒on鈥檛 Allow Check-Ins鈥 option when your friend first checks-in for you and (b) providing this same notice even if you already use Places yourself.
- If you want to use 鈥淗ere Now鈥 you can鈥檛 limit your visibility to only friends (unless you are a minor) and 鈥淗ere Now鈥 is turned on by default if you have previously selected that 鈥淓veryone鈥 can see some of your Facebook information.
Facebook says to protect your privacy, just turn off 鈥淗ere Now鈥 off and set your Check-In privacy setting so the right people can find you. However, this defeats the purpose of Here Now: to make it easy for your friends to know if you鈥檙e around just by looking at the Here Now list. You should be able to use Here Now and decide exactly who can easily find you. (Facebook does something like this for minors: they can turn on Here Now but only their friends can see them. So Facebook also seems to think that Here Now is valuable even if you鈥檙e not sharing it with everyone!)
Facebook already has a setting to turn Here Now on and off. It should go a step further and turn this into a fully-configurable option so users can choose who can see that they are Here Now, and by making sure that users who share very limited information with 鈥淓veryone鈥 are not defaulted into sharing their real location more broadly than they would like.
- Apps that you or your friends run can view your Places information by default 鈥 you need to go into your privacy settings and opt out if you don't want to share location data with apps.
Facebook does offer a setting to disable Places data sharing with your friends鈥 apps. However, you are not clearly informed of the fact that your check-ins may be shared with your friends apps. In addition, as we understand it, this setting will be turned on by default if you have kept any of those settings checked to allow sharing on that page. So, if you changed your settings to allow your friends鈥 apps to see your birthday but absolutely no other voluntary data, you will now share your most recent Places check-in with these apps until you go in and change these settings again.
Users should be clearly informed that, by joining Places, they most likely are also giving their friends鈥 apps access to their Places information. Users should also be given direct access to the control that allows them to choose whether or not to do so when they first join.
Having 鈥渘o鈥 as an easy option for friend check-ins, having visibility options for Here Now and not setting these to 鈥淓veryone鈥 by default, and not silently giving apps default access to Places location information would have made this product a lot more privacy-friendly and help live up to Facebook鈥檚 principle of putting users in control of their information. We hope Facebook will take the simple steps outlined above to make sure that Places protect privacy. (And Facebook crew, if you want to chat more about it at the Nut House, the first round is on me.)
NOTE: With all of the news about location-based services this week, we will be analyzing the privacy safeguards for multiple companies very soon. We will also publish a white paper on location-based services in the weeks ahead to help users understand how to best safeguard their privacy. Stay tuned!