Sept. 19--Most Americans probably don't realize the depths, and potential dangers, of sharing information on their mobile devices. SpyAware, a free app from Privacy Sentry (www.spyaware.be), shows Android users which apps collect their data, where it's going and how to identify the biggest threats to their private information.
Craig Spiegelberg, Privacy Sentry's founder and CEO, warns that invasiveness has become so out of control that it might take governmental regulations to establish coherent privacy rights.
Q: Spotify's new privacy policy allows collection of your mobile device's contacts, photos and media files. What's your level of concern?
A: Spotify essentially outed the industry by trying to justify its overreach. A lot of the people saying, "Don't worry about it," are using the same tune that has been used to justify this in the past: Your private data isn't worth much.
Q: What's your recommendation?
A: Anybody who cares about their private information should weigh carefully whether they want to support that.
Q: Facebook is a bigger bear.
A: They take a lot of information that goes way beyond what they need to provide that service. But it's hard to say to people, "Don't use Facebook," because there are a billion people who love it.
Q: Are you one of them?
A: Yes, I'm a moderate user. But in the last 24 hours, it took 5.6 megabits of data from my phone and sent it to 58 locations around the world. You can go to the permissions list and see what they're taking. It's pretty invasive.
Q: Those numbers are from your app?
A: Yes. It basically provides anti-piracy software for your phone. People can't see what's being taken.
Q: Is adjusting the permissions in Facebook sufficient? Do you trust it?
A: No. When you have devices mining information, and that's their business model, they're going to find lots of ways around it.
Q: What permissions does SpyAware require?
A: We need to look at location. (And also images, video, audio and a device's external storage.) We don't capture that information, but we look at which app is taking your location. We look at app behavior, not personal behavior.
Q: Apps in Apple devices can only track you after you've activated the app. Android devices are always tracking.
A: Generally, that's true. My Wells Fargo app, where I do my online banking, doesn't track me.
Q: People should limit the number of apps they download to protect themselves. Do you have a certain threshold?
A: People may have 20 or 30 or 40 apps on their phone, but they typically use between five and 10. Keep the apps that you use. Avoid apps with a huge list of permissions.
Q: The agreements are so long and drowning in legalese that people can't understand what they're agreeing to.
A: While I'm not a huge proponent of government involvement in stuff like this, we have met with the FCC and FTC. There is some interest in them getting involved to coordinate some rules on what private information is taken. Now it's the wild, wild West.
Facebook privacy
How to opt out of ad-tracking:
1. Click the down arrow at the upper-right corner of your Facebook page.
2. Go to Settings, then Ads.
3. Click Edit in the "Third Party Sites" area, then select "No One" from the drop-down menu.
4. Click Edit in the "Ads and Friends" area, then select "No One." Now third-party applications and ad networks cannot use your name or picture in an advertisement.
How to control apps:
1. Click on the lock symbol in the upper-right corner of your Facebook page.
2. Click See More Settings at bottom (not Privacy Checkup).
3. Click on Apps on the menu on the left side of the page.
4. Click on Logged In With Facebook.
5. Review the list of apps tracking you.
6. Moving your mouse over an app's icon reveals options to edit permissions -- some apps know your birth date, work history and where you live -- or delete it, which prevents it from accessing your account.
7. Review the four sections at the bottom of the page. Make sure to click on Apps Others Use. Checked boxes show what data your friends see, your apps see and your friends' apps see. If you don't want to share, remove the checks.
