5 ms·
Are we expected to sympathize with an app that's siphoning off sensitive user data from phones without informing the user? Seems shady. Your main website says:
by px43 5y ago
Are we expected to sympathize with an app that's siphoning off sensitive user data from phones without informing the user? Seems shady.
Your main website says:
* Data is never kept online
* No ads, no affiliate marketers, and no creepy tracking
* No phone number is required; No need to share your phone book. Only need an email address (can be masked)
But your privacy policy says:
* For a better experience while using our Service, we may require you to provide us with certain personally identifiable information, including but not limited to your name and email address.
* We may employ third-party companies and individuals
* We want to inform our Service users that these third parties have access to your Personal Information.
Kind of ridiculous IMO that you can get away with doing that just by adding an additional link in your app.
- VLM 5y agoOP will have to speak for themselves, but the policy looks like boilerplate I've had to include for 3rd party crash reporting services. So if the stack trace for a null pointer somehow vaguely includes some kind of PII as a side effect of reporting the crash, the privacy policy needs to cover their behind.
- collaborative 5y agoYou are not required :) *Data is never kept online -》 this is written next to the E2EE chat, not user accounts. E2EE msg data is not kept online I don't employ any 3rd parties, but included that just in case. It is a word-for-word copy of a sentence in ProtonMail's privacy policy The email address can be masked and the name and surname can be made up or left blank
- lmkg 5y agoCan you guarantee that you are handling data the way that ProtonMail does? Do you know how ProtonMail handles its data? A privacy policy is not just some mumbo-jumbo where you just need to get the words right. The words need to be in correspondence with your actions. Copying someone else's words is not a recipe for success because those words are in accordance with their actions. Even if the privacy policy is compliant for them, the same policy can be non-compliant for you.
- totalZero 5y agoIf you don't employ third parties then presumably you could have chosen not to copy that part of protonmail's privacy policy.
- collaborative 5y agoI am not a lawyer and don't know how wide "3rd parties" can refer to. Is my cloud provider a 3rd party? If there is a lawyer here who can advise that it is safe to do I will remove it
- dsr_ 5y agoDon't take legal advice from Internet lawyers; don't take business advice from your competitors. Hire somebody knowledgeable to review your privacy policy and terms of service.
- dyeje 5y agoHave you ever hired a lawyer to review a privacy policy / ToS? It costs thousands of dollars.
- edoceo 5y agoSo? Lots of things cost money. It almost sounds like you're advocating for a cheap short-cut. It's bad in code, it's bad in legal dealings
- dyeje 5y agoYes, I am 100% advocating for a cheap shortcut when it makes sense. The vast majority of projects will not find success and do not warrant thousands of dollars of investment when a boilerplate ToS / PP will do. OP did the due diligence of at least reading through and trying to understand theirs. I do not think it is appropriate to grill them about it, hence my comment.
- dsr_ 5y ago
- iicc 5y agoIt also doesn't say who the agreement is with. It says it's a company, but there's no company number or registered address. In the UK (which is the claimed jurisdiction) this is a legal requirement for websites.
- collaborative 5y agoThanks, corrected
- admax88q 5y agoSeems like a pretty boilerplate privacy policy. When in doubt cover your own ass. Privacy policies are just a waste of time anyways, bad actors are going to act bad regardless of any "policy" they have in place. Not to mention the policy is not necessarily a contract.