4 ms·
"How can you stop data thieves, data brokers, and police from snooping on your purchase history? Pay in cash." What's Apple Pay's privacy and security story?
by specialist 6y ago
"How can you stop data thieves, data brokers, and police from snooping on your purchase history? Pay in cash."
What's Apple Pay's privacy and security story?
I know that I should know this. Apologies.
I had understood that Apple Pay does some kind of token exchange, instead of sending PII and account details over the wire. So this stops all the "edge" attacks, like card skimmers.
Are there any solutions (currently) that keeps Home Depot, for instance, from leaking or reselling my PII when I pay digitally?
- sirn 6y agoNetwork Tokenization (Apple Pay/Google Pay) exchange a token unique to {card, device, merchant}. This token is sent from device, to merchant, to acquirer, to card network, and to issuer without the need to resolve token to PAN in the middle (unlike PCI tokenization most payment gateway provides). AFAIK, three parties that are aware of a purchase history of tokenized cards are: Token Service Provider who provides the token, Token Requester who offer the tokenized service (Apple/Google in this case) and a card issuer. Apple Pay for example, uses First Data as its Token Service Provider. (I'm pretty sure Google Pay does as well)