Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×
Encryption Facebook

WhatsApp Clarifies It's Not Giving All Your Data To Facebook (theverge.com) 92

An anonymous reader quotes a report from The Verge: WhatsApp has published a new FAQ page to its website outlining its stances on user privacy in response to widespread backlash over an upcoming privacy policy update. The core issue relates to WhatsApp's data-sharing procedures with Facebook, with many users concerned an updated privacy policy going into effect on February 8th will mandate sharing of sensitive profile information with WhatsApp's parent company. That isn't true -- the update has nothing to do with consumer chats or profile data, and instead the change is designed to outline how businesses who use WhatsApp for customer service may store logs of its chats on Facebook servers. That's something the company feels it is required to disclose in its privacy policy, which it's now doing after previewing the upcoming changes to business chats back in October.

But a wave of misinformation on social media, not helped by Facebook's abysmal track record on privacy and its reputation for obfuscating changes to its various terms of service agreements, has resulted in a full-blown WhatsApp backlash that has users fleeing to competitors like Signal and Telegram. [...] WhatsApp executives, as well as Instagram chief Adam Mosseri and Facebook AR / VR head Andrew "Boz" Bosworth, are now trying to set the record straight, perhaps to little avail at this point.

"We want to be clear that the policy update does not affect the privacy of your messages with friends or family in any way. Instead, this update includes changes related to messaging a business on WhatsApp, which is optional, and provides further transparency about how we collect and use data," the company writes on the new FAQ page. It also stresses in the FAQ that neither Facebook nor WhatsApp read users' message logs or listen to their calls, and that WhatsApp doesn't store user location data or share contact information with Facebook. (It's also worth noting that data sharing with Facebook is extremely limited for European users due to stronger user privacy protections in the EU.) WhatsApp chief Will Cathcart also took to Twitter a few days ago to post a thread (later shared by Bosworth in the tweet above) trying to cut through the confusion and explain what's actually going on. "With end-to-end encryption, we cannot see your private chats or calls and neither can Facebook. We're committed to this technology and committed to defending it globally," Cathcart wrote. "It's important for us to be clear this update describes business communication and does not change WhatsApp's data sharing practices with Facebook. It does not impact how people communicate privately with friends or family wherever they are in the world."

This discussion has been archived. No new comments can be posted.

WhatsApp Clarifies It's Not Giving All Your Data To Facebook

Comments Filter:
  • I Don't Give A Fuck (Score:5, Interesting)

    by quetzyg ( 1335689 ) on Wednesday January 13, 2021 @09:04AM (#60937442)
    Even if they're not gonna give out all the data from your phone, I'm gonna keep telling that story so that I can make most of my contacts move to Signal.

    Lets make disinformation work in our benefit for a change.
    • Thought about this, very tempting but not a good idea.

      Maybe it's better to point out what information is still being sent to Facebook - contact metadata is very valuable and revealing, and if they start delivering ads based on message content, that could indirectly send some information about the contents of a conversation to Facebook and/or advertisers. Also, my phone's Privacy Guard once caught WhatsApp accessing my phone's fingerprint reader, WTF was that?

    • by idji ( 984038 ) on Wednesday January 13, 2021 @09:42AM (#60937588)
      They are still obfuscating. They are distracting by talking about end-to-end encryption, but I know that. My concern is that they give my contacts to Facebook and "marketing partners". They have not convinced me that this will NOT happen. I will never contact a business on WhatsApp - that's more distraction and obfuscation.
      • by AmiMoJo ( 196126 )

        In GDPR countries I'm not sure they can give your contacts to anyone else, or even collect them for themselves. The contact data belongs to other people who have not consented to it being shared.

        We need a test case to get this confirmed. Next time I see an app asking for it I'll make a complaint to the regulator. Problem is as I've had by EU citizenship ripped away against my will it will only count in the UK now, rather than the whole EU, and there is no higher authority than the regulator to appeal to.

        • by jabuzz ( 182671 )

          They can't the changes don't apply in the EU or the UK (as GDPR rules still basically apply).

          Why shows the claim the change is needed is not true.

      • by Rob Y. ( 110975 )

        Why did Facebook buy WhatsApp in the first place? Maybe they thought they could monetize it at some point. But more likely they viewed it as some kind of social'y platform that could one day threaten their dominance of all things social. I.e. monopolistic nastiness. Is that 'threat' still there? Could an independent WhatsApp (or anybody else) seriously dent Facebook's position in social networking today?

        I guess the same could be said of gmail or google docs. I think Google built Office'y apps, because

    • by AmiMoJo ( 196126 )

      As much as I would love that to work I've found it extremely difficult to get people to move to Signal.

      In the end I just sandboxed WhatsApp so it can't access any of my real data, using Shelter from the F-Droid app store.

      • Curiously, I found it quite easy this time. In fact, all my major WhatsApp contacts have already moved to Signal, half of the time by their own. I have always advocated for free and open messaging systems (XMPP, Wire, etc) whereas everybody (and therefore myself) was on other proprietary networks such as MSN messenger, GTalk, Hangouts, Whatsapp, etc.
        So it is clear that the general users of instant messengers do not usually care about open source. However it now seems that they care very much about data min
    • by XXongo ( 3986865 ) on Wednesday January 13, 2021 @10:31AM (#60937754) Homepage

      Lets make disinformation work in our benefit for a change.

      You are a perfect example of what is wrong with the world.

      You just said that spreading lies in order to disseminate disinformation is a good thing if it's supporting your side.

      You're not the solution: you're the problem.

    • by GuB-42 ( 2483988 ) on Wednesday January 13, 2021 @11:25AM (#60938010)

      Using deception for people own good is a morally dubious stance.

      We had a very public example with the downplaying of the importance of masks in the early stage of the pandemic. Most likely the intention was to prevent hoarding and panic buying, and when we see what happened with toilet paper, it may have been a good thing. But as expected, now that the shortage is no more and public stance has reversed, people are not happy... These things are debatable but the general consensus here seems to be that it is better to tell people the truth.

      Using deception to push your own preferences or agenda is pure evil.

      What your post exemplifies is that we are all a bit manipulative. We like to blame politicians for lying when we do the same thing to push our favorite software. We like to blame billionaire for tax evasion as we do, or pay for undeclared work. We blame leadership for favoritism when we go towards our friend and family business instead even if they are not the best fit. We are just like the people we hate so much, just on a smaller scale.

  • by Anonymous Coward on Wednesday January 13, 2021 @09:12AM (#60937474)
    Dear Internet,

    On behalf of our shareholders we would like to apologize that we got caught and regret the temporary interruption in raping your privacy. We will resume shortly, after the news cycle moves on.

    Insencerely,
    Digital Warlord Peeping Zook
    • by nazsco ( 695026 ) on Wednesday January 13, 2021 @10:08AM (#60937682) Journal

      Exactly! They never say your private messages are not being parsed for Advertisement profiling you.

      They clearly say it "won't affect" whatever is already in place. Which you assume is privacy, but c'mon, it's FaceBook. Do you think whatsapps servers grow on trees?

      Also, a good time to remind everyone that *whatsapp group messages are visible to the server*

    • Insincerely,
      -Digital-Warlord- Caesar of the Internet Peeping Zook

      Dude's got a seriously unhealthy obsession with Roman aristocracy

      Also, it's $CURRENT_YEAR and slashdot still doesn't support <strike> or <del>

  • PR nightmare (Score:5, Insightful)

    by kubajz ( 964091 ) on Wednesday January 13, 2021 @09:14AM (#60937486)
    This must be a PR nightmare for Facebook. I was definitely one of the people who were misled by the media, and it seems like on this (rare?) occasion, they did not compromise users' privacy. Rather than a reason to rant about Facebook, this seems like a good time to rant about the lightning fast spread of misunderstood information. I wonder what would happen to my company should something similar go down for us. It would be interesting to see what systems these large companies have in place to prevent storms like this and how it's possible that this particular change in the privacy policy was not handled by PR from the very start and that Facebook woke up so late to finally clarify things
    • Re: PR nightmare (Score:5, Insightful)

      by RamenMan ( 7301402 ) on Wednesday January 13, 2021 @09:25AM (#60937532)

      The problem is, Facebook as a company is on the wrong side of public opinion. Any PR they try to throw at this will backfire.

      Facebook is too big, people have no sympathy for them. I am one of those people. I deleted my account (as much as they let you) about 7 years ago, and I'm very happy about it. But they do keep sending me emails, 7 years later.

      Facebook is a huge entity, they benefit from their size, and occasionally suffer because of it.

      If your company isn't so large, then you can weather this type of storm in a completely different way. Show your concern, put your face out there.

      The last thing in the world facebook should do is put Zuckerberg's face out there. People hate him. (largely due to his success...)

    • it seems like on this (rare?) occasion, they did not compromise users' privacy.

      I disagree. The fact that they are owned by Facebook means that eventually your information will be accessed by Facebook. They may jump through legal hoops to do it but it will happen, if not now, in the future. You need to realize that if it benefits Facebook then they will do it. Corporate entities are sociopathic in nature, so even a good faith promise by one employee will be run roughshod ignored by another. This is how businesses work.

    • by HiThere ( 15173 )

      Why do you believe the new "clarification"? Also, as others have pointed out, they don't claim they aren't sharing your private data with Facebook, just that whatever they're doing won't change. So even if they're technically telling the truth, it's not exactly reassuring.

    • I don't think it was specified from the beginning that this targeted WhatsApp for business. The way this policy update rolled out is, they gave you a choice to accept it or reject it, and they gave you time to decide before the new policy is implemented. Why? Because they themselves were not confident in the new policy and wanted to gauge the public reaction. This targeting of WhatsApps businesses wasn't clear from day 1. They had to shoehorn it after the outrage. There is already a separate app for WhatsAp
    • Slashdot hating facebook is so misplaced its almost funny. You know who is mostly on facebook? Middle aged people and boomers. Young people haven't used it for years. The people crying about facebook are the modern day equivalent of Old Man Yells At Cloud.

    • PR nightmare, I don't think so. Their stock is still pretty damn high.
  • Glad to say I don't care anymore. I exercised my freedom of choice and deactivated my Facebook account. Moved on to other socials that are less nanny-like.
  • Policy vs Code (Score:5, Insightful)

    by chill ( 34294 ) on Wednesday January 13, 2021 @09:17AM (#60937498) Journal

    So this CODE change may not do that, but once you agree to the Privacy POLICY change, what's to stop them from changing the code in another update? After all, you've been notified and agreed to that sort of thing.

    First hit is free.

    • by piojo ( 995934 )

      The privacy policy did not say they are sharing your data with anyone. Having actually read it (I skipped some bits, but I don't think I missed some hidden "we will sell your chats to advertisers"), I was surprised by the popular opinion about it. I wondered if I misunderstood something, or missed some obvious implication. But no, it seems as though some journalists have simply not been being honest.

      • Re:Policy vs Code (Score:5, Informative)

        by Entrope ( 68843 ) on Wednesday January 13, 2021 @09:54AM (#60937638) Homepage

        The privacy policy [whatsapp.com] rather explicitly does say they share your information with third parties, both directly and (one assumes) indirectly through other Facebook companies. For example:

        We work with third-party providers to help us operate, provide, improve, understand, customize, support, and market our Services. [....] When we share information with third-party providers, we require them to use your information in accordance with our instructions and terms or with express permission from you.

        Or this:

        As part of the Facebook family of companies, WhatsApp receives information from, and shares information with, this family of companies. We may use the information we receive from them, and they may use the information we share with them, to help operate, provide, improve, understand, customize, support, and market our Services and their offerings.

        The ONLY exception to that second one is that they don't share your messages with the rest of the Borg. Your personal information, your contacts, any metadata are fair game.

        • by piojo ( 995934 )

          I don't see that as contravening the rest of the document. In particular, the first paragraph is not a statement about sharing data; it is a statement about safety measures. This is clear because the identical sentence shows up with more information about sharing data (and it is fairly innocuous):

          We work with third-party providers to help us operate, provide, improve, understand, customize, support, and market our Services. For example, we work with companies to distribute our apps, provide our infrastructure, delivery, and other systems, supply map and places information, process payments, help us understand how people use our Services, and market our Services. These providers may provide us information about you in certain circumstances; for example, app stores may provide us reports to help us diagnose and fix service issues.

          Regarding the second excerpt, that does seem worse. An interesting fact is that you can opt out entirely, but new users will not be able to opt out. So your information would be private but you would still be contr

          • by Entrope ( 68843 )

            You think the first sentence is a statement about safety measures, but nothing in the policy confines it to those purposes. "For example" can be taken as a subset of what they share information for -- it is a lower bound, not an upper bound. So a clearer way to read that section is to take out those clauses:

            We work with third-party providers to help us operate, provide, improve, understand, customize, support, and market our Services. These providers may provide us information about you in certain circum

            • by piojo ( 995934 )

              You think the first sentence is a statement about safety measures, but nothing in the policy confines it to those purposes. "For example" can be taken as a subset of what they share information for -- it is a lower bound, not an upper bound.

              On the face of it, I agree with you. But given that the context is contract law rather than conversation, I'm not sure that's right. I'm not sure whether painting a rosy picture (to mislead) is valid, or whether a "reasonable man would assume" line of argument is used for interpretation.

      • It’s Facebook for crying out loud, people should be worried about their privacy no matter what product they’re using. Look at Oculus.

  • The issue is...what direction are they heading?

    One or two privacy policy updates per year will all head in the same direction. Eventually they will tell us that it is too expensive to support two separate platforms...

    I honestly do not know, but does WhatsApp make money?

    If they are not making big money (billions) then it's just a drain on the company, and Facebook will start the merger.

    I'd rather trust the Russians, who don't care about my personal exploits, than trust Facebook, who wants to make money by p

    • WhatsApp does not make money as far as I know. They used to charge $1/user but Facebook got rid of that. Imagine the infrastructure behind supporting two billion users.

      The founder of WhatsApp left facebook because of disagreements about how they want to use user data. That should tell you something. As always, if you aren't paying for it with cash then you're paying for it some other way. There's really no reason to use WhatsApp anymore with Signal available.
  • I liken Facebook's action to like a company that says...

    We take users' privacy very seriously..."

  • We are only getting this response today, which is a full week after the initial fallout. It almost feels like Facebook thought it would be a non-issue, but with so many people jumping to Signal and Telegram they decided to react.

    At the same time many people will not make the jump beyond FB and WhatsApp, because they work and feel the value proposition is high enough to stick around, even if there is massive data collection.

  • by h33t l4x0r ( 4107715 ) on Wednesday January 13, 2021 @09:22AM (#60937520)
    It's selling it to them. Thanks for coming, remember to tip your server.
    • by Entrope ( 68843 )

      Their FAQ would like to blow smoke up your ass about what they are doing this week. Their privacy policy would like you to agree that they can send every detail they get from you, except your message content, to Facebook.

  • by DeplorableCodeMonkey ( 4828467 ) on Wednesday January 13, 2021 @09:33AM (#60937560)

    (Small print) "We found a few debug log statements on your phone we didn't upload to Facebook."

  • by JoeyRox ( 2711699 ) on Wednesday January 13, 2021 @09:35AM (#60937566)
    Remember when Facebook said phone numbers registered for 2FA wouldn't be used for marketing purposes? They later said it was a bug [techcrunch.com]. You have to be six degrees of stupid to believe anything Facebook says.
    • Facebook at this stage has had so many "bugs" that have led to data disclosures that "just happened" to make it money, that trusting them is foolish to say the least. Cambridge Analytica is another that springs to mind.

      The only way people are going to trust WhatsApp again is if Facebook sells it. And since that's never gonna happen, the only recourse is antitrust law to forcibly break it up.

  • by bluegutang ( 2814641 ) on Wednesday January 13, 2021 @09:44AM (#60937600)

    We can’t see your private messages or hear your calls, and neither can Facebook:

    That is expected, messages and calls are encrypted.

    We don’t keep logs of who everyone is messaging or calling: While traditionally mobile carriers and operators store this information, we believe that keeping these records for two billion users would be both a privacy and security risk and we don’t do it.

    Notice this doesn't say "We don’t keep logs of who YOU are messaging or calling" like all the other subheadings on the page. Instead it says "We don’t keep logs of who EVERYONE is messaging or calling". Implying that they do keep logs of who SOME people are calling, or maybe some of the people they are calling. And why don't they keep full records for everyone? Because with "two billion users" that would be too much data for them to manage. But evidently, a subset of the data is manageable.

    So in short, they they DO reserve themselves the right to scrape your call logs and use that as they please.

  • by dbu ( 256902 ) on Wednesday January 13, 2021 @09:49AM (#60937606)

    Because I can already see a detailed breakdown of all the data collected by these applications on the App Store itself. And the vague promise from FB not to share them now or in the future is worth the FAQ paper it's written on.

    Signal
      None. (The only personal data Signal stores is your phone number, and it makes no attempt to link that to your identity.)

    WhatsApp
      Device ID
      User ID
      Advertising Data
      Purchase History
      Coarse Location
      Phone Number
      Email Address
      Contacts
      Product Interaction
      Crash Data
      Performance Data
      Other Diagnostic Data
      Payment Info
      Customer Support
      Product Interaction
      Other User Content

  • Comment removed based on user account deletion
  • I'm asking honestly, what's the alternative ? I hear Signal and Telegram. But why do we trust these more than What'sApp+FB ? I'm asking honestly. My teenagers are asking me.
  • by sheramil ( 921315 ) on Wednesday January 13, 2021 @10:27AM (#60937736)

    "WhatsApp managers apologise for giving all of your data to Facebook."

  • Lets see... (Score:5, Informative)

    by RealNeoMorpheus ( 6713808 ) on Wednesday January 13, 2021 @10:29AM (#60937740)

    Lets see:

    1- They dont charge to use.
    2- They have billions of people hammering those servers all the time.
    3- They paid a boatload of money for it.
    4- They also paid a boatload of money for servers and employees to maintain those servers.
    5- Wheres the profit?

    Yeah, they are harvesting data somewhere.

    Signal it is.

    • Signal
      1- They don't charge to use.
      2- They have billions of people hammering those servers all the time.
      3- They paid a boatload of money to develop it
      4- They also paid a boatload of money for servers and employees to maintain those servers.
      5- They are a non-profit but they have costs ...

      • They are running on donation, like NPR. These servers and stuff are not as expensive as people think. If NPR can run on donations, Signal can too.

        I plan to donate 100$ a year to Signal. How much of eyeball time is needed to generate 100$ of advertisement revenue? After subtracting cost of selling ad space, billing and accounting? 100$ goes a long way. At some point users might be ok with a small fee.

        Its time people who say they value privacy to put some money behind the words. Donate what you can. At le

      • They got a war chest of 50 million from Brian Acton. They have a few 100 million users at most.

        But now is the time to start donating. Remember, it's for a good cause. Telegram will soon also start to try to recoup the investment, or did everyone think that Russian billionaire got his billions by being a philanthropist? He actually already said that Telegram should soon take in several 100 million per year...

  • by erp_consultant ( 2614861 ) on Wednesday January 13, 2021 @10:59AM (#60937886)

    Rule #2 - never believe anything that is uttered by Facebook execs.

  • Metadata (Score:5, Interesting)

    by stikves ( 127823 ) on Wednesday January 13, 2021 @11:36AM (#60938068) Homepage

    Metadata is the problem, not the contents of the chats.

    Once governments know Facebook has this data, they will want access. That has caused arrests in China in the past: https://www.latimes.com/archiv... [latimes.com], but also wrongful arrests here in US as well: https://www.criminallegalnews.... [criminallegalnews.org]

    Yes, Facebook needs to recoup their investments, and needs to make money. But that does not mean we should agree to give up our basic privacy.

  • Why, I'd be shocked, shocked to find out, a company would violate their own policy — thus missing an opportunity to make the world a better place.

    Google would never intervene with search-resultst [wsj.com], Twitter promptly and diligently takes down any doxxing [twitter.com] per policy [twitter.com], and Facebook would never allow inherently violent ideologies to use [facebook.com] its services.

  • by 140Mandak262Jamuna ( 970587 ) on Wednesday January 13, 2021 @11:58AM (#60938210) Journal
    WhatsApp spokesperson You'rani Diot said,

    WA will not share ALL the data. It is planning to share a very small limited set of data not even 1 Kb or so.

    The data will be, your name, social security number, date of birth, place of birth, mother's maiden name, the name of the street you lived in, your high school football team mascot, the name of the bully who wiped the gym floor with your ass, name of the girl laughed hysterically when you asked her to be your prom date

  • by JustAnotherOldGuy ( 4145623 ) on Wednesday January 13, 2021 @11:59AM (#60938228) Journal

    Yeah, they're not giving your data to Facebook, they're selling it, which is completely different!

    • by thomn8r ( 635504 )

      Yeah, they're not giving your data to Facebook, they're selling it, which is completely different!

      More commonly, when they say they're not "giving" or "selling" they're actually renting, allowing them to extract value many times over.

  • https://www.youtube.com/watch?... [youtube.com]

    The Creepy Line reveals the stunning degree to which society is manipulated by Google and Facebook and blows the lid off the remarkably subtle – hence powerful – manner in which they do it. Offering first-hand accounts, scientific experiments and detailed analysis, the film examines what is at risk when these tech titans have free reign to utilize the public’s most private and personal data.

  • Lying bastards are lying bastards.

    Don't trust them. Backpedaling won't work. Especially not as sleazy and psychopathic as this.

  • Nothing they say or do can be trustworthy, whem they won't even show me the damn soure code!

    Seriously, in this day and age, you expect me to just *trust* Facebook on this?? Are you insane?

  • We would never collect your data.. we give it to google who then parses it for us.

    if anyone cared to read the antitrust complaints.

  • Why wouldn't I trust an arrogant lying, perverted weasel with delusions of gradeur?

  • They can unilaterally change them and there's fuck-all you can do about it: accept it or GTFO. The "Oh, we would never do that" defense is hollow. They could require your first-born in the next update and users would simply click "OK".

Two can Live as Cheaply as One for Half as Long. -- Howard Kandel

Working...