5 ms·
> Google buys your credit card data for advertising purposes How do they connect my credit card data to my Google activity? My Google account isn't connected t
by avocado4 7y ago
> Google buys your credit card data for advertising purposes
How do they connect my credit card data to my Google activity? My Google account isn't connected to my personally identifiable information in any way. I.e. they don't have my phone number, nor do I use Google Pay.
- prawn 7y agoIf you bought things online, couldn't they make guesses based on internet activity and things showing on a statement? e.g., maybe thousands bought x on a specific day, but how many bought x on that day, y on another, and z on a third day, all with corresponding research/signals when browsing?
- nordsieck 7y ago> How do they connect my credit card data to my Google activity? Most people have a phone number with google for gmail (you didn't need one in the beginning, but do now). There's also their wallet, app store, voice, broadband, phone plan, etc. Some people will dodge all of that, but most won't.
- dehrmann 7y agoDon't forget location data.
- avocado4 7y agoEven if they do (for Android users only), how would they connect location data to my credit card history? Are you claiming that Google reverse engineers PII by correlating Android location data with credit card purchase location history?
- dehrmann 7y agoThis doesn't quite say they do exactly that, but they do tie location data to offline purchases. > Since 2014, Google has flagged for advertisers when someone who clicked an ad visits a physical store, using the Location History feature in Google Maps. Still, the advertiser didn’t know if the shopper made a purchase. So Google added more. A tool, introduced the following year, let advertisers upload email addresses of customers they’ve collected into Google’s ad-buying system, which then encrypted them. Additionally, Google layered on inputs from third-party data brokers, such as Experian Plc and Acxiom Corp., which draw in demographic and financial information for marketers.
- tracker1 7y agoDoes the credit card company or store have your email or phone number in addition to your CC being used?
- dillonmckay 7y agoIf you use a loyalty card, then definitely.
- dillonmckay 7y agoThey know your approximate location when you conduct an offline credit card transaction, and the approximate time and location of the store where the transaction occurred.
- CarlRJ 7y agoAnd while one such data point pair isn't conclusive, getting, say, a dozen matching pairs might identify a user with high enough correlation to be useful.
- avocado4 7y ago> Most people have a phone number with google for gmail (you didn't need one in the beginning, but do now) I just created a new Google account without a phone number 10 seconds ago. Phone number was optional and of course I didn't provide it.
- dvfjsdhgfv 7y agoGoogle has the phone numbers of almost everyone, because practically everyone is in the address book of someone who uses an Android phone. Google makes sure that if you don't hand over your data to them, someone else will.
- avocado4 7y agoHow do they connect phone numbers in Android users' phone book to their respective Gmail accounts?
- AndrewDucker 7y agoBecause my friend Bob is in my contacts as Bob@Gmail.com and also as 0123456789.
- EGreg 7y agoSo can’t I put Bill Gates in the same contact as my own phone number? I guess I would need enough people to do a sybil attack on Google. I bet this is how Places data and other stuff is hacked. How does one prevent a coordinated attack like this? Machine learning ensuring voting rings can only be used once or twice?
- petre 7y agoThey associate the phone number used for 2FA with the account or the contact details has an e-mail address entry and it's filled up with a gmail address.
- pgeorgi 7y agoUsing the phone number given for 2FA (and nowhere else) for any other purpose would be in disagreement with the purposes listed at https://support.google.com/accounts/answer/183723?hl=en https://support.google.com/accounts/answer/183723?hl=en
- Angostura 7y agoSame with WhatsApp/Facebook.
- kakkun 7y agoI feel like it would be pretty easy to link together an online purchase with the confirmation email to my Gmail account using purchase location / time of purchase / price.
- jobigoud 7y agoThat's for sure, you can even go to https://myaccount.google.com/purchases https://myaccount.google.com/purchases to see it. Linking offline purchases is harder but still doable if they buy CC data in bulk.
- vrih 7y agoThere are lots of suggestions here of how it's done but it's essentially really really simple. There are 2 pieces of information that need to be joined.Google have your cookie and email and MasterCard have your address and probably email. If both sides have your email then job done. If not then they can use your physical address via a data broker. All it needs is some e-commerce sites that allow cookie syncing and have a privacy policy that allow them to sell that part of your data.
- tumanian 7y agoThis is correct. Experian keeps CC number and email. Google has email address, that ties to cookies. They join on email.
- nabla9 7y agoConsider N shopping locations with time stamp and N phone locations with time stamp. The N required to uniquely identify a person with high probability can be just 2-5.
- Ensorceled 7y agoHave you used Google from home wifi? Use google maps to get travel directions from home to other locations consistently on the same device? Used that same device/home wifi to access your credit card's website?
- DINKDINK 7y ago>My Google account isn't connected to my personally identifiable information in any way. Which personally identifiable information? The time of day you use your devices? Which languages you use? Which websites you visit? The type of medical conditions you search for? Information being PII or non PII isn't binary. It's relative shades of how shannon entropic it is. You need about 33 bits to identify someone, you likely have leaked 33 bits of entropy. EFF's Panopticlick help show this: https://panopticlick.eff.org/ https://panopticlick.eff.org/
- avocado4 7y ago> Information being PII or non PII isn't binary. It is binary in Google's data structures (marked as annotations on protobufs), and in law. Things you listed aren't considered PII.
- dwild 7y agoOn Google Opinion Rewards most of my survey are about whether I did go to a specific shop, which would make sense if theses shops pay Google to know that information, but then ask how I paid. I'm pretty sure they use that to feed their models.
- jhayward 7y agoI'll hazard a guess that it takes less than 4 other data points, gathered without your knowledge or consent (but very commonly gathered nonetheless), to associate your credit card with your google activity. And 4 data points would be a lot more than usually required.