6 ms·

By using your conversation metadata, to sell you better ads or sell the data to other advertisers. >b-b-but it's encrypted! Doesn't matter. They know who you

By using your conversation metadata, to sell you better ads or sell the data to other advertisers. >b-b-but it's encrypted! Doesn't matter. They know who you are, because your account is linked to your FB account (either directly or just by matching your phone number). Then you send them your full contact list when you install the app (have you tried using WhatsApp without the Contacts permission?). Then they can see metadata about who you talk to and how often. Pulling up those advertising profiles, they can add to your profile: for example, if a good portion of the contacts you talk to daily have "interested in cars"/"republican"/"male 25-29" in their profile, there's a good chance you fall into those categories too.

Barrin92 6y ago
At least in Europe that is not true, from their official page "We do not share data for improving Facebook products on Facebook and providing more relevant Facebook ad experiences.Today, Facebook does not use your WhatsApp account information to improve your Facebook product experiences or provide you more relevant Facebook ad experiences on Facebook. This is a result of discussions with the Irish Data Protection Commissioner and other Data Protection Authorities in Europe[...] Importantly, WhatsApp does not share your WhatsApp contacts with Facebook or any other members of the Facebook Companies, and there are no plans to do so." https://faq.whatsapp.com/general/security-and-privacy/how-we-work-with-the-facebook-companies https://faq.whatsapp.com/general/security-and-privacy/how-we...
- sliq 6y ago
  What they say in official text is not automatically what they actually do. Example: maybe they dont sell data to Facebook, but to a middle-man company. And this company sells to Facebook. Disclaimer texts are shady things!
  - Barrin92 6y ago
    that would also be illegal under GDPR. Not to mention it's a misunderstanding about how Facebook works. Facebook does not sell data at all, they sell ad-space based on their own data.
    - fsflover 6y ago
      > that would also be illegal under GDPR Not a problem to Facebook: https://ruben.verborgh.org/facebook/#history https://ruben.verborgh.org/facebook/#history
      - Barrin92 6y ago
        not sure what the relevance here is. That user is complaining about not getting network data from Facebook which may not be covered by GDPR, rather than his personal data he stored on the service. However giving your data to third parties without your explicit consent is without a doubt a violation of GDPR.
mikestew 6y ago
have you tried using WhatsApp without the Contacts permission? Not to be pedantic about an off-hand comment, but yeah, works fine, AFAICT. I'm not even a "pro" WhatsApp user: I use it strictly for the one social group that didn't think SMS was good enough. Meaning I didn't have to know the secret incantation. I'm sure I was asked about contacts, to which I assume I said "FB? Hahaha, no way!" And if I go to the Status tab, it sho'nuff complains about me not uploading contacts and if I want status of all my WhatsApp peeps, I need to upload contacts.
mftrhu 6y ago
> have you tried using WhatsApp without the Contacts permission? Yes. It works. Reaching out to new people is a PITA, as you have to append their phone number to a an api.whatsapp.com/send?phone= URL and open that on your phone, but it works.
jlokier 6y ago
> have you tried using WhatsApp without the Contacts permission? Yes, that's how I use WhatsApp. It sucks because all I see is conversations and calls from phone numbers without names. But I don't trust WhatsApp enough to share my whole contacts list with them. I would be happy to grant permission for individual number-name associations to be visible to WhatsApp, if that was possible. It's the contacts list as a whole I'm not willing to share; the people I'm actually talking with on it would be fine. But no, we can't have sensible things like that. Showing the numbers is very silly, because WhatsApp knows the name of every person I'm talking with. It has their name from the person at other end! But no, it has to use the Dark Pattern(tm) of showing numbers to pressure me into sharing all my contacts, which it doesn't actually need.
- 2Gkashmiri 6y ago
  whoa. this is one reason i am STILL NOT ON WHATSAPP..... seriously. this comes from back when truecaller was introduced and i had an iphone. saw permission to access contacts. never used the app, even today. same for whatsapp or facebook. call me paranoid, but i don't want being "linked". same reason i dont have a google account and even though i have been using an android device for the past 2 years, there is no account and i use something like aurora store to get apps. works decent enough
  - jlokier 6y ago
    I have a "junk" Google account on my phone. It's not linked to anything except my phone. I don't even know the account name. It means I can't use in-app payments, and will never pay for an app, but at least I can download essential (to me) apps like banking apps from the Play store.
    - 2Gkashmiri 6y ago
      oh. why dont you try aurora store? that app allows you to download actual play store apps which is what i use. it uses anonymous google accounts to login and give you access.
hbcondo714 6y ago
>b-b-but it's encrypted! Facebook actually updated their LIMITATIONS OF KEY METRICS AND OTHER DATA section at the top of their annual and quarterly reports[1] this year to say that "as a result of limited visibility into encrypted products, we have fewer data signals from WhatsApp user accounts and primarily rely on phone numbers and device information to match WhatsApp user accounts with accounts on our other products". Prior to 2020, did they not disclose this in their reports. [1] https://last10k.com/sec-filings/fb https://last10k.com/sec-filings/fb disclosure: I work on Last10K.com
- parliament32 6y ago
  Yes, we can all agree that E2EE means FB isn't reading your messages and using that data (like they do, for example, in FB Messenger / IG messages). But the metadata is still valuable, and not encrypted, and is probably how they're making money with the product.
  - hbcondo714 6y ago
    I can't attest to this metadata but it's just worthy to note Facebook starting telling shareholders this year that they have "limited visibility into WhatsApp user activity due to encryption".
  - Talinx 6y ago
    A closed-source App could send the private key to a server. I hope WhatsApp doesn't do that.
    - parliament32 6y ago
      They absolutely could. But, given the popularity of FB properties, I'm sure there are several groups who decompile their releases on a regular basis and I'm sure there'd be a lot of screaming if the E2EE wasn't implemented properly (see: the Zoom E2EE debacle).

Barrin92 6y ago

At least in Europe that is not true, from their official page "We do not share data for improving Facebook products on Facebook and providing more relevant Facebook ad experiences.Today, Facebook does not use your WhatsApp account information to improve your Facebook product experiences or provide you more relevant Facebook ad experiences on Facebook. This is a result of discussions with the Irish Data Protection Commissioner and other Data Protection Authorities in Europe[...] Importantly, WhatsApp does not share your WhatsApp contacts with Facebook or any other members of the Facebook Companies, and there are no plans to do so." https://faq.whatsapp.com/general/security-and-privacy/how-we-work-with-the-facebook-companies https://faq.whatsapp.com/general/security-and-privacy/how-we...

sliq 6y ago
What they say in official text is not automatically what they actually do. Example: maybe they dont sell data to Facebook, but to a middle-man company. And this company sells to Facebook. Disclaimer texts are shady things!
- Barrin92 6y ago
  that would also be illegal under GDPR. Not to mention it's a misunderstanding about how Facebook works. Facebook does not sell data at all, they sell ad-space based on their own data.
  - fsflover 6y ago
    > that would also be illegal under GDPR Not a problem to Facebook: https://ruben.verborgh.org/facebook/#history https://ruben.verborgh.org/facebook/#history
    - Barrin92 6y ago
      not sure what the relevance here is. That user is complaining about not getting network data from Facebook which may not be covered by GDPR, rather than his personal data he stored on the service. However giving your data to third parties without your explicit consent is without a doubt a violation of GDPR.

mikestew 6y ago

have you tried using WhatsApp without the Contacts permission? Not to be pedantic about an off-hand comment, but yeah, works fine, AFAICT. I'm not even a "pro" WhatsApp user: I use it strictly for the one social group that didn't think SMS was good enough. Meaning I didn't have to know the secret incantation. I'm sure I was asked about contacts, to which I assume I said "FB? Hahaha, no way!" And if I go to the Status tab, it sho'nuff complains about me not uploading contacts and if I want status of all my WhatsApp peeps, I need to upload contacts.

mftrhu 6y ago

> have you tried using WhatsApp without the Contacts permission? Yes. It works. Reaching out to new people is a PITA, as you have to append their phone number to a an api.whatsapp.com/send?phone= URL and open that on your phone, but it works.

jlokier 6y ago

> have you tried using WhatsApp without the Contacts permission? Yes, that's how I use WhatsApp. It sucks because all I see is conversations and calls from phone numbers without names. But I don't trust WhatsApp enough to share my whole contacts list with them. I would be happy to grant permission for individual number-name associations to be visible to WhatsApp, if that was possible. It's the contacts list as a whole I'm not willing to share; the people I'm actually talking with on it would be fine. But no, we can't have sensible things like that. Showing the numbers is very silly, because WhatsApp knows the name of every person I'm talking with. It has their name from the person at other end! But no, it has to use the Dark Pattern(tm) of showing numbers to pressure me into sharing all my contacts, which it doesn't actually need.

2Gkashmiri 6y ago
whoa. this is one reason i am STILL NOT ON WHATSAPP..... seriously. this comes from back when truecaller was introduced and i had an iphone. saw permission to access contacts. never used the app, even today. same for whatsapp or facebook. call me paranoid, but i don't want being "linked". same reason i dont have a google account and even though i have been using an android device for the past 2 years, there is no account and i use something like aurora store to get apps. works decent enough
- jlokier 6y ago
  I have a "junk" Google account on my phone. It's not linked to anything except my phone. I don't even know the account name. It means I can't use in-app payments, and will never pay for an app, but at least I can download essential (to me) apps like banking apps from the Play store.
  - 2Gkashmiri 6y ago
    oh. why dont you try aurora store? that app allows you to download actual play store apps which is what i use. it uses anonymous google accounts to login and give you access.

hbcondo714 6y ago

>b-b-but it's encrypted! Facebook actually updated their LIMITATIONS OF KEY METRICS AND OTHER DATA section at the top of their annual and quarterly reports[1] this year to say that "as a result of limited visibility into encrypted products, we have fewer data signals from WhatsApp user accounts and primarily rely on phone numbers and device information to match WhatsApp user accounts with accounts on our other products". Prior to 2020, did they not disclose this in their reports. [1] https://last10k.com/sec-filings/fb https://last10k.com/sec-filings/fb disclosure: I work on Last10K.com

parliament32 6y ago
Yes, we can all agree that E2EE means FB isn't reading your messages and using that data (like they do, for example, in FB Messenger / IG messages). But the metadata is still valuable, and not encrypted, and is probably how they're making money with the product.
- hbcondo714 6y ago
  I can't attest to this metadata but it's just worthy to note Facebook starting telling shareholders this year that they have "limited visibility into WhatsApp user activity due to encryption".
- Talinx 6y ago
  A closed-source App could send the private key to a server. I hope WhatsApp doesn't do that.
  - parliament32 6y ago
    They absolutely could. But, given the popularity of FB properties, I'm sure there are several groups who decompile their releases on a regular basis and I'm sure there'd be a lot of screaming if the E2EE wasn't implemented properly (see: the Zoom E2EE debacle).