2 ms·

The opt-out that Citi provides is extremely similar if not the same to the one that I receive annually from basically all financial companies I have an account

The opt-out that Citi provides is extremely similar if not the same to the one that I receive annually from basically all financial companies I have an account with. They allow you to limit the sharing only as mandated by federal law. Regarding (e) I can only say that I'm quite happy using Privacy's website to manage my account. Of course I disallow location sharing there, so the best location they have is via IP address which is a granularity I'm comfortable with (and which could be further obscured with VPN if you're really worried about it). Overall it's a nice service. I completely agree with you on (d) being less than optimal and wish they would issue some stronger language on that point. Nothing is perfect I suppose.

mehrdadn 8y ago
The forms are all the same for opting out, but what exactly they let you put out of is different. In Citi's case it seems to include sharing information with their affiliated for direct marketing, which is what we're concerned about. (I'm not sure what the law is regarding sharing for other purposes though.)
boling11 8y ago
Hey there! I'm one of the founders. Just wanted to hop in here and clarify our current practices. We do not sell any data to third parties (anonymized or not). We’re never going to do it for direct marketing purposes or anything like that. The intent behind the non-personally identified information sharing clause is to potentially provide breach notification warnings to merchants: Example: if a large number of locked cards were used at merchant X, and then subsequently stolen from merchant X, and used at other merchants, we could notify merchant X and our customers that shopped at merchant X (likely before anyone else in the ecosystem knew). This is not a service we're planning to provide in the near term. Any other information we collect is solely for the purposes of fraud prevention, not marketing. I definitely hear you on the language in the policy though, and it is something we intend to tighten up

mehrdadn 8y ago

The forms are all the same for opting out, but what exactly they let you put out of is different. In Citi's case it seems to include sharing information with their affiliated for direct marketing, which is what we're concerned about. (I'm not sure what the law is regarding sharing for other purposes though.)

boling11 8y ago

Hey there! I'm one of the founders. Just wanted to hop in here and clarify our current practices. We do not sell any data to third parties (anonymized or not). We’re never going to do it for direct marketing purposes or anything like that. The intent behind the non-personally identified information sharing clause is to potentially provide breach notification warnings to merchants: Example: if a large number of locked cards were used at merchant X, and then subsequently stolen from merchant X, and used at other merchants, we could notify merchant X and our customers that shopped at merchant X (likely before anyone else in the ecosystem knew). This is not a service we're planning to provide in the near term. Any other information we collect is solely for the purposes of fraud prevention, not marketing. I definitely hear you on the language in the policy though, and it is something we intend to tighten up