4 ms·

How does it take 90 days? If that's true then Google is absolutely aware of this and will make sure to take ownership of it prior to then.

judge2020 7y ago
Google fully deletes their user data when requested, I'm not sure why malice over data retention is being assumed here.
- criddell 7y ago
  Do they? Or do they just anonymize it? Companies don't like to destroy assets. I don't think anybody is assuming malice, just incompetence. There are precedents after all.
  - judge2020 7y ago
    I wouldn't blame anyone for not trusting them, but here's their page on it: https://policies.google.com/technologies/retention?hl=en https://policies.google.com/technologies/retention?hl=en
  - kccqzy 7y ago
    I don't think merely anonymizing data when the user requested deletion is GDPR compliant.
    - whynaut 7y ago
      Does GDPR cover generated insights about that data?
  - ithinkiknowthis 7y ago
    Disclaimer: I work at Google. And even on the smaller service I work on, we go through privacy review. Generally user-data is coupled to user account identifiers and deleted when accounts are deleted. This is the easiest, as your retention plan is automatically approved this way :) All data stores are mapped to retention plans. So you don't accidentally forget something. For anonymization there is some logic which ensures the smallest slice is small enough that users can't be identified. Now, all of this is generally and of course there are exceptions -- but these are a lot of work to get. You need to have good reasons to get exceptions, it takes a long time. So if you want to ship on time, you delete data when it's no longer needed, etc. Exceptions are usually when it would hurt another user to delete something shared, for example.. Sure, incompetence can happen. But Google doesn't have a lengthy record of security holes, data leaks or privacy issues. (I'm sure you can find a few, but my point is that this isn't Yahoo)
    - criddell 7y ago
      > you delete data when it's no longer needed The data is deleted, but probably not the products developed from the data. For example, Google may pick up from my email that I have a Subaru and if I delete that email, they may lose track of what exact car I have, but I bet they still know I have a car.

judge2020 7y ago

Google fully deletes their user data when requested, I'm not sure why malice over data retention is being assumed here.

criddell 7y ago
Do they? Or do they just anonymize it? Companies don't like to destroy assets. I don't think anybody is assuming malice, just incompetence. There are precedents after all.
- judge2020 7y ago
  I wouldn't blame anyone for not trusting them, but here's their page on it: https://policies.google.com/technologies/retention?hl=en https://policies.google.com/technologies/retention?hl=en
- kccqzy 7y ago
  I don't think merely anonymizing data when the user requested deletion is GDPR compliant.
  - whynaut 7y ago
    Does GDPR cover generated insights about that data?
- ithinkiknowthis 7y ago
  Disclaimer: I work at Google. And even on the smaller service I work on, we go through privacy review. Generally user-data is coupled to user account identifiers and deleted when accounts are deleted. This is the easiest, as your retention plan is automatically approved this way :) All data stores are mapped to retention plans. So you don't accidentally forget something. For anonymization there is some logic which ensures the smallest slice is small enough that users can't be identified. Now, all of this is generally and of course there are exceptions -- but these are a lot of work to get. You need to have good reasons to get exceptions, it takes a long time. So if you want to ship on time, you delete data when it's no longer needed, etc. Exceptions are usually when it would hurt another user to delete something shared, for example.. Sure, incompetence can happen. But Google doesn't have a lengthy record of security holes, data leaks or privacy issues. (I'm sure you can find a few, but my point is that this isn't Yahoo)
  - criddell 7y ago
    > you delete data when it's no longer needed The data is deleted, but probably not the products developed from the data. For example, Google may pick up from my email that I have a Subaru and if I delete that email, they may lose track of what exact car I have, but I bet they still know I have a car.