3 ms·

That’s why every app has a privacy policy. Technology can only limit access and use cases so much, beyond that you need to rely on regular old legal agreements

That’s why every app has a privacy policy. Technology can only limit access and use cases so much, beyond that you need to rely on regular old legal agreements to provide further guarantees. This works fine for HIPAA, FERPA, etc., and it works fine for email. No need for anything new, beyond more OAuth scopes. Edit: I created tickets for more Gmail API scopes. If this is something you care about, star the tickets or whatever: https://issuetracker.google.com/issues/111096405 https://issuetracker.google.com/issues/111096405 https://issuetracker.google.com/issues/111084656 https://issuetracker.google.com/issues/111084656

wpietri 8y ago
HIPPA is a standard negotiated by a lot of interested parties and approved by Congress with compliance monitored by regulators. Privacy policies are made up by one side, with compliance up to the same side. If both of those things work "fine", I'd consider it a miracle. Facebook has a privacy policy, for example, and I don't think that worked out quite as well as HIPPA does at your average hospital.
- deleted 8y ago
  [deleted]
forapurpose 8y ago
> That’s why every app has a privacy policy Privacy policies are not effective. Users don't have time to read all the privacy policies or to shop for apps that provide real privacy, if one exists. Users don't have the expertise to understand the systems, the policies, or the implications of surrendering their information. The evidence seems strong that it is beyond most users. Usually in those situations there is regulation, as there is now in the EU. For example, banks can't charge variable interest rates that escalate to 50% and say 'it was in the agreement'. Airlines can't sell you a ticket to Oslo and then fly you to Rome, and say 'change of flight plan was in the agreement'. > Technology can only limit access and use cases so much If it was in Google's interests, I bet they could find a way.

wpietri 8y ago

HIPPA is a standard negotiated by a lot of interested parties and approved by Congress with compliance monitored by regulators. Privacy policies are made up by one side, with compliance up to the same side. If both of those things work "fine", I'd consider it a miracle. Facebook has a privacy policy, for example, and I don't think that worked out quite as well as HIPPA does at your average hospital.

deleted 8y ago
[deleted]

forapurpose 8y ago

> That’s why every app has a privacy policy Privacy policies are not effective. Users don't have time to read all the privacy policies or to shop for apps that provide real privacy, if one exists. Users don't have the expertise to understand the systems, the policies, or the implications of surrendering their information. The evidence seems strong that it is beyond most users. Usually in those situations there is regulation, as there is now in the EU. For example, banks can't charge variable interest rates that escalate to 50% and say 'it was in the agreement'. Airlines can't sell you a ticket to Oslo and then fly you to Rome, and say 'change of flight plan was in the agreement'. > Technology can only limit access and use cases so much If it was in Google's interests, I bet they could find a way.