5 ms·
FWIW after enabling non-phone 2FA, you can delete the phone number from your Google account - this doesn't remove 2FA.
by flotzam 6y ago
FWIW after enabling non-phone 2FA, you can delete the phone number from your Google account - this doesn't remove 2FA.
- fantyoon 6y agoBut that would require you to trust them to actually delete it, if you don't trust them to not abuse your number that's kinda a non starter I would say.
- flotzam 6y agoThus "FWIW" :) By all means, use a throwaway number for signup / 2FA setup.
- londons_explore 6y agoIn Europe at least, laws are very clear about "if I click the delete button, you have to delete it". All big companies stick pretty closely to those laws because the fines are huge. There are also laws against using data for some other purpose than it was collected for, but they're less well enforced, and it's pretty frequent that a sneaky T&C clause let's them use data for something else.
- kevin_thibedeau 6y agoif(IsEUCitizen()) { ...
- jusssi 6y agoI believe it's enough to be EU resident to get GDPR protections. So just change your address for a bit.
- ffpip 6y agoPhone number is associated to a non-EU country.
- jraph 6y agoYou are being downvoted because nobody in their right mind would start the name of such a function by a capital. It would immediately get associated to the Windows API. ;-)
- gsich 6y agoNo. There are things you can (and sometimes must) save.
- tjoff 6y agoWell from the article you have two examples from twitter and facebook that surely didn't care about laws. And since they don't believe they will get caught (probably due to their track record with getting away with everything) there is no reason to care either. And they don't have to be as blatantly stupid to send ads to the numbers, they could do as facebook, use it for a shadow profile.
- Chirael 6y agoA privacy podcast I listen to recently said that, for now anyway, it's possible to use a temporary/burner phone to do the initial SMS-based signup, then switch to app-based 2FA on a different phone, and then delete the phone # associated with the temporary/burner phone (as you said).
- 1vuio0pswjnm7 6y agoIf the phone number is not a actually used for non-phone 2FA, then why is it "required"? Does the phone number serve another purpose besides security? If it does, then any assurances during sugn up that the information provided will only be used for the purposes it is disclosed would be false. Knowingly false statements made to induce someone to sign up could be considered misrepresentation.