9 ms·
Where does Google actually say that they won’t read Gmail or Google Docs?
- jordanlewis 15y agoRight in their privacy policy (http://www.google.com/intl/en/privacy/privacy-policy.html http://www.google.com/intl/en/privacy/privacy-policy.html): We may collect the following types of information: <snip> User communications – When you send email or other communications to Google, we may retain those communications in order to process your inquiries, respond to your requests and improve our services. When you send and receive SMS messages to or from one of our services that provides SMS functionality, we may collect and maintain information associated with those messages, such as the phone number, the wireless carrier associated with the phone number, the content of the message, and the date and time of the transaction. We may use your email address to communicate with you about our services. <snip> In addition to the above, we may use the information we collect to: Provide, maintain, protect, and improve our services (including advertising services) and develop new services; and Protect the rights or property of Google or our users. If we use this information in a manner different than the purpose for which it was collected, then we will ask for your consent prior to such use.
- Bud 15y agoUh, that privacy policy (or at least the snippets you posted) provide NO explicit assurances that Google is not reading your stuff. At all. It tells you what they WILL do. And it says if they decide to "use" (vague) "this information" (vague) in other ways, they'll ask for consent. Does simply reading it count as "using" it? Google doesn't say. I wouldn't trust these assurances at all.
- gojomo 15y agoThe section you've excerpted could be interpreted as saying that Google does reserve the right to have both its software and personnel read your email in order to "[p]rovide, maintain, protect, and improve our services (including advertising services) and develop new services; and Protect the rights or property of Google or our users." Which is, more or less, for any reason whatsoever except those already blatantly illegal (harassment, blackmail, etc.).
- byoung2 15y agoThis should be covered by the statement "don't be evil"
- jaysonelliot 15y agoIf the FBI comes knocking on Google's door and says they have a terrorist under surveillance, and they need to read his email in order to save a busload of schoolchildren from a bomb, should Google let them do it? Is it evil to read a bad person's email, or is it evil not to read it? That's why a clearly stated policy that says exactly when Google will or will not let a human look at your documents and email is important. "Don't be evil" is cute, but it's not a policy statement.
- Retric 15y agoIt's federal law that Google needs to hand over everything they have when the FBI comes calling on these cases. So Google's only choices are hand over the content or wait 30 minutes until people show up and start dismantling their data-center and then go to jail.
- ceejayoz 15y agoIt's federal law that Google needs to hand over everything in the scope of the warrant. No law requires Google to give the FBI "everything they have", especially if there isn't a court order.
- Bud 15y agoNor is the GP post accurate about what Google's options are, since it's obviously an option to bring in the lawyers, resist, and get a court order to block FBI's actions for a while, if Google were inclined to do so. I tend to scoff at the notion that FBI would start "dismantling data centers" in the manner described.
- Retric 15y ago
- heyrhett 15y agoHe answers his own question in the article. "https://mail.google.com/support/bin/answer.py?hl=en&answer=1304609 https://mail.google.com/support/bin/answer.py?hl=en&answ... says that the answer to “Is Google reading my mail?” is “No” but doesn’t elaborate ..." So, he's looking for a more elaborate answer? This is PhilG, so I should cut him some slack, but it seems pretty clear to me.
- Bud 15y agoMisleading. What that document actually says is this: No, but automatic scanning and filtering technology is at the heart of Gmail. Gmail scans and processes all messages using fully automated systems in order to do useful and innovative stuff like filter spam, detect viruses and malware, show relevant ads, and develop and deliver new features across your Google experience. Priority Inbox, spell checking, forwarding, auto-responding, automatic saving and sorting, and converting URLs to clickable links are just a few of the many features that use this kind of automatic processing. In other words, Google IS most certainly "reading" your email, at the very least with computers, for various purposes.
- Retric 15y agoI think there is a basic disconnect. There is no way for a computer to anything with an email (save it, give it to you etc) without 'reading' it's contents. So the only meaningful thing for people to worry about is decoding the content which IMO means a spam filter does not qualify as decoding. Nor does displaying adds for tires if the word cars shows up in your email.
- marshray 15y agoSo when you visit my website and I see Google pushing ads to you for Justin Bieber posters and pillowcases http://www.amazon.com/dp/B003FCXDRM/ http://www.amazon.com/dp/B003FCXDRM/ we'll know Google isn't reading your Gmail. ... or are they? ;-)
- AgentConundrum 15y ago
- deleted 15y ago[deleted]
- buro9 15y agoThey're definitely reading my email. I know this for a fact as the last time I mailed them they replied.
- lwhi 15y agoI don't think terms provide too much assurance - maybe they're only really useful if legal recourse ensues. There will always be the possibility of a rogue employee who goes out of his or her way to read data that doesn't belong to them. In the case of Dropbox - to prevent this possibility - we can encrypt our data if we choose to (I've successfully used 'encfs' in the past). In the case of Google's email and document services I don't think this is possible?
- rarrrrrr 15y agoOr use SpiderOak, Tarsnap, or Wuala, all of which handle encryption natively.
- ww520 15y agoDoes end to end email encryption get any traction? I remember PGP supposed to do it. Not sure how far that went. It seems for company using third party email hosting, it shouldn't be too inconvenient to set up a company-wide encryption on its emails.
- curiouskat 15y agoWhat about Facebook? A few weeks ago I had a situation where Facebook contacted me about a job, and it appeared that Facebook may have been reading (or at the least mining) private messages related to my startup (http://news.ycombinator.com/item?id=3035376 http://news.ycombinator.com/item?id=3035376). A Facebook employee replied to the thread but wouldn't provide details.
- nostrademons 15y ago(I am neither a Facebook employee nor can I speak for them.) I really think that was just coincidence. Considering how many people talk about startups over Facebook messages and how many people have been contacted by Facebook recruiters, there's bound to be at least one person who was contacted by a Facebook recruiter a day or two after talking about startups. It'll seem mighty suspicious to that person, and they'll blog about it. Congratulations, you're the lucky one. Companies that big just generally don't do things like read private e-mail, because they know it'll get out somehow - disgruntled employee, whistleblower - and the damage to their reputation is totally not worth whatever they can gain from it.
- bad_user 15y agoThe thing people don't realize is that when contacted by a big company for a job, usually it's a bot that just sent hundreds of emails. Receiving an email from Google or Facebook is nothing special.
- curiouskat 15y agoWhat data sources does Facebook use to trigger the email? And are emails manually approved before they go out? If so, does that mean a Facebook employee looks at the data source that triggered email, which in some cases may be the user's private messages?
- rwolf 15y agoIt seems to be a large leap to go from "sends lots of emails" to "automates finding people to recruit." There is a similar leap from "automates finding people to recruit" to "uses private messages as signal."
- jodrellblank 15y agoHow could they? They have ~24,000 employees and 260 million Gmail users. http://www.quora.com/How-many-employees-does-Google-have http://www.quora.com/How-many-employees-does-Google-have and http://en.wikipedia.org/wiki/Gmail http://en.wikipedia.org/wiki/Gmail respectively. (Although off the top of my head, they do say they will automatically scan all email for the purposes of advertising, spam filtering, etc. and the debate used to be "does this count as reading if no human is involved?").
- ianferrel 15y agoThat just proves that they can't read everybody's email.
- rjd 15y agoThe same can be said about any IT department. One of my friends sent made the news papers over sending a racially shared joke through the email system to the "boys joke list" in a rather large and respected company. Turns out some people in the IT department where also helping themselves to the list as a source of entertainment, one of them took extreme offense to the joke and reported it. After the thing went through its investigation process it was uncovered that the majority of disliked staff in the department where infact reading everyones email. Most of them had set up notification filters to flag emails with there names to see what people where saying about them. Now the question is how common is this considering how easy it is to do... and how the whole system more or else runs off trust? I'd say if you have sensitive stuff going through your email that you don't want external parties to see, set up your own server and find someone who isn't petty to look after it.
- kenjackson 15y agoFor an IT department the expectation is that people will read your email. I honestly don't think what you describe is rare at all, based on stories I've heard. And if you work for the gov't your email can often be requested by citizens via FOIA.
- rjd 15y agoI was working for a government agency in New Zealand when they introduced a law that meant every email became a government communication and you couldn't delete anything. I usually operate on an empty inbox principal, it was a total nightmare for me. I folded that contract as soon as my term was up.
- X-Istence 15y agoMoving it to another folder wouldn't have sufficed?
- rjd 15y agoYep, but when you get hundreds of emails a day, you end up folders inside folders. Not being able to trim excess is a total pain. Not to mention the pain of having limited mailbox sizes, so you have to ring the infrastructure vendor to archive your mail. And then put in requests to get older archives so you can search for stuff.
- w1ntermute 15y agoHas there been anyone working to make a comprehensive locally-hostable webmail/weboffice suite that replicates Google's functionality? I can imagine that this would be quite poular. Sure, some of the features like Priority Inbox might require complex heuristics, but things like labels should be easy to add support for.
- gujk 15y agoGoogle used to sell hardware appliances, before they realized they would actually prefer to read all your documents.
- angdis 15y agoThe real question is not whether google, dropbox or anyone else has explicit "policies" about reading content from users. They're just going to say whatever makes them look good from a marketing and legal perspective. Companies lie all the time, systematically and comprehensively. They act in their own self-interest period. From their point of view it is merely a question of how much they can get away with. The more interesting question to explore is how much we actually trust these companies with our personal information and how do we decide when we reach a limit to our trust. Do I believe that google can read my gmail? Yes. Do I think this capability will cause harm to come to me as a result? Hell no. There's nothing "in it" for them to do so for me or millions of others. I "trust" them for this reason.
- freshhawk 15y agoUntil there is something in it for them. It's a pretty classic security question, sometimes usability means that you accept zero security and completely share your private correspondence with the world. I think trust is the wrong word, you are really just accepting the risk of sharing all your data for the benefits because the risk is low.
- angdis 15y agoYes, I agree "trust" is the wrong word. It is perhaps better to think of it as a trade-off of some risk for some convenience and that's OK. In any case, back to the OP's question, the stated "policy" about privacy means virtually nothing unless there exists a third party who can effectively verify that policy.
- freshhawk 15y agoYes, in my experience on either side of those "policies" they really do mean nothing. You just have to assume that all the data you share is no longer yours and will be used however the company sees fit. I am amazed by the number of people who assume that "that would be bad PR if they got caught" is good enough security to protect data they consider sensitive. Especially when the PR damage historically has been very low, especially if you are a sexy and loved company like facebook or google.
- bad_user 15y agoThe question is wrong. Any email provider will read your email, at least for spam detection. The question should be - does Google keep a profile on you based on the content of your emails? I'm pretty sure they are able to serve ads without keeping a profile, making the decision solely on the content of the email being read. However, that may not be the case.
- jurjenh 15y agoThey keep some sort of record on your emails though - a while ago they mentioned that they were "Bringing better ads to gmail" - what they think are relevant ads based on other emails you've received when they can't find relevant content for the one you're currently viewing. Not sure what kind of profile this ends up being, but it can be quite entertaining when I get ads about sumo wrestling (because of previous emails from appsumo)...
- julian37 15y agoThe question is wrong. Any email provider will read your email, at least for spam detection. He's clearly talking about humans reading your mail. No email provider has humans reading your mail for purposes of spam detection, at least not in the usual case. The question is perfectly valid: seeing that other companies have clear policies on the extent to which employees can access your data, how come Google doesn't have any such policies?
- QuasiPreneur 15y agohttp://gawker.com/5637234/ http://gawker.com/5637234/
- ap22213 15y agoHow many individuals at google have the ability to read a particular person's personal data? If I'm a moderately important person[1], how many individuals, in or outside of google, will have access to any of that data over the life of it? And, how does google internally police against misuse? And, who watches the watchman? [1] say, 1 in a thousand, of which google has 260,000 such gmail users
- dspeyer 15y agoProbably about 50 altogether. Each of us promises to never ever look at personal data, before being granted privileges. And I'm pretty sure all those promises are serious. I don't know how enforcement works, though a single offense would be firing-worthy.
- X-Istence 15y agohttp://www.pcmag.com/article2/0,2817,2369188,00.asp http://www.pcmag.com/article2/0,2817,2369188,00.asp
- sixtofour 15y agoFrom the comments: > here’s a strange little story that happened to me a while ago – I set up a gmail account to deal with nigerian letters and such (I wanted to collect some data to report the spammers/thieves, without compromising my actual e-mail address in the process). I set this up with a fake username (something like george.thompson or so) and a password which included the word “nigeria” in it. Lo and behold, after my first login (before sending/receiving any mail) the targeted advertising in gmail included some nigerian ads (nigerian holidays, nigerian business bureau, etc). coincidence?…. If true, it seems they matched ads to the guy's password. Which means they needed to be able to read it plain text. The plain text should only ever live long enough to create or match with a hash.
- wahnfrieden 15y agoDon't be too quick to judge - maybe he had been searching for Nigerian related things before creating the account.
- ap22213 15y agoI think the experiment would only be illustrative if the computer had zero past Internet use (ie no cookies) and the ip address was brand new. Surely google tracks even if you don't have an account.
- nopal 15y agoCould he have visited any Nigeria-related sites or performed any Nigeria-related searches? He'd have to have a sterile browsing environment to ensure his ads weren't related to something else on Google's ad network.
- cooldeal 15y agoThe Gmail man reads your email and docs. http://www.youtube.com/watch?v=yXqrTfOWx60 http://www.youtube.com/watch?v=yXqrTfOWx60
- ahi 15y agohttp://www.wired.com/threatlevel/2010/09/google-spy/ http://www.wired.com/threatlevel/2010/09/google-spy/ http://gawker.com/5637234/gcreep-google-engineer-stalked-teens-spied-on-chats http://gawker.com/5637234/gcreep-google-engineer-stalked-tee... Even if they say they won't it looks like they are lacking some internal controls.
- waitwhat 15y agoRogue employees are a fact of life. That they were caught shows that Google's internal controls are (at least reasonably) effective.
- dotBen 15y agothe tl:dr of this comment thread is that most HN'ers have sadly taken the question too literally and are commenting on the fact Google reads emails with a definition of "read" being that of "parse" (ie computationally). I think most people know and expect they obviously do that, for advertising targeting etc. I can't believe people are shocked or surprised at that. Which is a shame because I think it's pretty clear the OP is actually asking about Google employees reading your email, which is a valid question but sadly lost in the fight over semantics. :/
- patrickaljord 15y ago> Which is a shame because I think it's pretty clear the OP is actually asking about Google employees reading your email Unless you run your own smtp and pop/imap mail servers, there is no way to be sure no one will read your emails. Even then, your servers could get hacked or maybe your contacts use a hosted solution (and most people do) that could get hacked, there is again no guaranty. The only work around is to fully encrypt your emails, even then someone could steal your private keys, or you could be using an unpatched encryption software etc. It's a matter of trust and time saving. Do you trust google, yahoo employees etc to not spy on you more than you trust your ability and your contacts ability not to get your mail servers hacked? How much of your time and money are you ready to waste maintaining such a server?
- nobody31 15y agoExcept that Lucent have no real reason to put firmware in a fiber switch to read your email as it goes down the tubes. A company that makes all it's money from targetted ads - might
- patrickaljord 15y agoDid you even read parent's post? We all agree that google (and yahoo, and hotmail) parse our emails to offer better ads and to index them for search. What we're talking about is bad employees reading your emails for their own curiosity.
- 15y ago
- swaits 15y agoStore your plaintext email on someone else's server. Act surprised it's not private.
- EponymousCoward 15y agoNo Google doesn't read your email. In fact their spam detection just works by flipping the worlds luckiest coin at every incoming email.
- nobody31 15y agoWhere does it say on harvard.edu that they wont kill students and harvest their organs? Edit: Oh sorry forgot that people in the land of the free don't have a human rights act preventing Google reading their email (not sure about harvesting organs)
- abraham 15y agoGoogle made a related statement last year when they fired an employee for unauthorized access to private data including emails. "We carefully control the number of employees who have access to our systems, and we regularly upgrade our security controls–for example, we are significantly increasing the amount of time we spend auditing our logs to ensure those controls are effective. That said, a limited number of people will always need to access these systems if we are to operate them properly ..." http://techcrunch.com/2010/09/14/google-engineer-spying-fired/ http://techcrunch.com/2010/09/14/google-engineer-spying-fire...
- espeed 15y agophilg's comment: "Folks: The problem with Google promising to hold “personal information” confidential is that a document may not meet the definition of “personal information” given in http://www.google.com/intl/en/privacy/faq.html#toc-terms-personal-info http://www.google.com/intl/en/privacy/faq.html#toc-terms-per... . For example, if you write down some ideas for a new product and keep it as a Google Doc there may be nothing in the document that identifies you as the author and therefore it might be okay for Google to read or distribute the document. Generally speaking the Google privacy docs address a separate issue from the question of keeping email or documents confidential. They are about the question of whether your identify is kept confidential when you’re browsing around the Web and Google is figuring out what your interests and demographics are. Worthy stuff to be writing about, no doubt, but it doesn’t shed much light on the subject of whether a Google employee can copy and paste paragraphs from your email messages or Google docs." http://blogs.law.harvard.edu/philg/2011/11/03/where-does-google-actually-say-that-they-wont-read-gmail-messages-or-google-docs/#comment-190817 http://blogs.law.harvard.edu/philg/2011/11/03/where-does-goo...
- ck2 15y agoIt's not google you have to fear. It's the warrantless backdoors installed for most government entities. What you think is harmless to discuss is probably being auto-indexed by them to use against you if you ever become a "problem" (ie. protest war, etc.)
- mike-cardwell 15y agoGoogle should provide the option of automatically encrypting your incoming email with your public PGP key, if you provide one. They could similarly automatically encrypt your Sent folder (not the actual sent messages). That way, even if your account is compromised, or emails subpoenaed, they can't read the emails without your private key. That's exactly what I do on my system anyway. I host my own email as well though: https://grepular.com/Automatically_Encrypting_all_Incoming_Email https://grepular.com/Automatically_Encrypting_all_Incoming_E...
- amorphid 15y agoI am more concerned about Google making an arbitrary decision to delete my Gmail account.
- icebraining 15y agoThat's why I got my own domain. Coupled with offlineimap (or any other mail backuping software) running regularly, I can move from Gmail to any other provider in the time it takes to create a new account and update the MX records.
- scotty79 15y agoAren't there some laws about secrecy of correspondence that already cover this?
- kandu 15y agoIt is probably pointless for Google to use humans to read mails, especially the mails of regular people. And it is certain that they use automated processing of the information in the mails. A most relevant question would be: Does Google match the profiles of its mail users to high profile people, such as company managers or other rich people who can be easily found on, for example, Linkedin? If so, does Google automatically filter their email in order to predict, for example, the stock market?
- hugoroy 15y agoAren't emails subject to the legal definition of private correspondence and therefore protected from this kind of behaviour? (I believe this is the case in France, Italy, Spain or Germany)