3 ms·
> Email clients alternative to Gmail, as well as any app that accesses what Google deems "sensitive user data" (including emails, calendar, fit data etc.) will
by SpicyLemonZest 4y ago
> Email clients alternative to Gmail, as well as any app that accesses what Google deems "sensitive user data" (including emails, calendar, fit data etc.) will now require an expensive (talking of at least $4500 a year) and intentionally cumbersome certification process, and such a certification needs to be renewed on a yearly basis
Isn't Google required under the GDPR to verify the security and privacy compliance of any third party apps they send user data to? This really starts to cast doubt on the rest of the story for me; any app developer who hasn't been hiding under a rock since 2010 must know why modern companies insist on certifying third party apps with API access.
- alaricus 4y ago
- deleted 4y ago[deleted]
- bcrosby95 4y agoIf that were true, wouldn't Google have to verify the security and privacy compliance of every browser out there?
- SpicyLemonZest 4y agoI confess that I don't have a clear understanding of why browsers never seem to count in privacy discussions.
- abofh 4y agoThe GDPR prohibits companies sharing customer data with third parties without consent of the customer. It most certainly does not prohibit customers disclosing their own data to third parties.
- contravariant 4y agoAlso, if I run software then it's first party.
- SpicyLemonZest 4y agoIt doesn't, but in this scenario the data is flowing directly from Google to third party code without the customer sitting in the middle. Even under the much more lax US privacy rules, user consent isn't a panacea - Facebook was famously fined $5 billion for allowing users to authorize data sharing with Cambridge Analytica.
- contravariant 4y agoThat was mostly because the data sharing was intentionally opaque. Saying the GDPR prevents me from letting my email client access my contact list is insane