WhatsApp to share user data with Facebook for ad targeting heres how to opt out

Facebook-owned messaging giant WhatsApp has announceda big change to its privacy policy which, once a useraccepts itsnew T&Cs,willsee it start to share some user data with its parent companyincluding for ad-targeting purposes on the latter service.

[B]y coordinating more with Facebook, well be able to do things like track basic metrics about how often people use our services and better fight spam on WhatsApp, WhatsApp writes in a blog on the change today.

Facebook can offer better friend suggestions and show you more relevant ads if you have an account with them. For example, you might see an ad from a company you already work with, rather than one from someone youve never heard of.

WhatsAppwill also be sharing the data with the Facebook family of companies so presumably its user datacould also be fed toVR firm Oculus Rift, another Fb acquisition, and photo-sharing networkInstagram.

WhatsApp data that will beshared under the new T&Cs includes thephone number a user used to verify their account, and the last time theyused theservice.

Two pieces of data which on a creepinessscale of personal intelyoud rather not hand over to a data-mining tech giant are both right up there.

You can read the full WhatsApp privacy policy here.

There is an option to opt out of some of thedata sharing (specifically for ad and product purposes) see lower down this post for more details although most users will just tap I agree to WhatsAppsnew T&Cs without reading them andrealizing what they are agreeing to.

This is why, as weve said before, T&Cs suck. And why user consent to a massive privacy shift like this shouldcertainlynot default opt people in.

Privacy vs data

This is undoubtedly a huge step-change for a service that has typically prided itself on championing user privacy, including completing a rollout ofend-to-end encryption across its entire service earlier this year, and continuing to fight requests from authorities to hand over user data.

But once WhatsApp agreed to be acquired by data-mining social network giant Facebook, back in February 2014, the writing was arguably on the wall for any pro-privacy stance.

Facebook is in the business of monetizing usage via interest-based advertising fed by harvesting the personal data of its users. WhatsApps original business model, of charging users a small yearly subscription fee for an ad-free messaging service, was discontinued after Facebook took over ownership of the service.

The annual $1 fee was ditched in January this year, but WhatsApp still does not have a replacement business model given its anti-ads stance, although itislaying the groundwork toopen up business accounts. And theintelit will be sharing with Facebook under itsnew T&Cs will likely be used to further its plans there.

At the time of the acquisition Facebook said itwould be keeping the messaging giant independent, despite some obvious overlap with its own Facebook Messenger app.

WhileWhatsApp founder Jan Koumclaimedthere would be no changes.Heres what will change for you, our users: nothing.WhatsApp will remain autonomous and operate independently, he wrote at the time, adding: There would have been no partnership between our two companies if we had to compromise on the core principles that will always define our company, our vision and our product.

Fast forward a couple of years andone core principle privacy is now being, if not entirely compromised, at least loosened given that Facebook will now be able to link users of its own social services with WhatsApp users. It will also be able to track relative usage of its services vs activity on the messaging app, as WhatsApp feeds it engagement intel via the last used signal.

Its not clear from the WhatsApp blog post if other user data will be shared with Facebook. The wording suggests this is entirely possible, although if a user has updated to the latest version of the app, which end-to-end encrypts all content, then their messaging content at least cannot be shared, so long as the person they are messaging has also updated.

WhatsApp also makes this point in its blog post, noting: When your messages are end-to-end encrypted, only the people you are messaging with can read them not WhatsApp, Facebook, or anyone else.

But thats kind of missing the point about letting Facebook triangulate users across two massive services, with over a billion active users apiece. It remains to be seen whether that collapsing of boundaries between two distinct services will catch the attention of data protection regulators in Europe, which has more stringentprivacy rules, and where Facebook has already faced multiple data protection related investigationsand legal actions and continues to do so.

Weve asked WhatsApp for a comprehensive list of everything it intends to share with Facebook, and for a comprehensive list of everything Facebook intends to do with the data it will be receiving on WhatsApp users and their usage of the service and will update this post with any response.

As well as phone number and last seendata, TechCrunch understands Facebook will also be fed intel on a WhatApp users operating system, mobile country code, mobile carrier code, screen resolution and device identifier. All of which open up plentiful tracking/ad-targeting possibilities.

But this looks very much like Facebook trying to fill in missing mobile phone number data via the more comprehensive WhatsApp address book given that the latter requires users to supply a number to verify anaccount, whereas it is possible to use Facebook without supplying your mobile number (albeit, Facebook might well have grabbed your digitsvia your friends uploading their contacts books to the service anyway And the serviceperiodically nags those who havent to add amobile number).

Facebook

WhatsApp says the data is being shared to coordinate more and improve experiences across our services and those of Facebook and the Facebook family going on to cite the following three specific examples:

  • We will be able to more accurately count unique users
  • We can better fight spam and abuse
  • If you are a Facebook user, you might see better friend suggestions and more relevant ads on Facebook

In WhatsApps privacy policy it fleshes this out a little more, including noting potential marketing and ad-targeting use-cases for sharing itsuser data with Facebook writing (emphasis mine):

We joined the Facebook family of companies in 2014. As part of the Facebook family of companies, WhatsApp receives information from, and shares information with, this family of companies. We may use the information we receive from them, and they may use the information we share with them, to help operate, provide, improve, understand, customize, support, and market our Services and their offerings. This includes helping improve infrastructure and delivery systems, understanding how our Services or theirs are used, securing systems, and fighting spam, abuse, or infringement activities. Facebook and the other companies in the Facebook family also may use information from us to improve your experiences within their services such as making product suggestions (for example, of friends or connections, or of interesting content) and showing relevant offers and ads. However, your WhatsApp messages will not be shared onto Facebook for others to see. In fact, Facebook will not use your WhatsApp messages for any purpose other than to assist us in operating and providing our Services.

Learn more about the Facebook family of companies and their privacy practices by reviewing their privacy policies.

One such marketing use-case for Facebookto make use of the WhatsApp phone number data is for itsCustom Audiencesad offering, whereby businesses using its platform can target ads based on an existing customer contact list they have.

So any WhatsApp users that have given abusinessthe same mobilephone number they use for the app can beserved targeted ads by that same business via Facebook.

While a Facebook product use-case for the phone number data is toexpand the friend recommendations itcan send by it being able to identify more networks of friends, based on linking more people tomobile numbers.

Partial opt-out

Opting out of the data-sharing entirely does not seem to be possible, but WhatsApp is offering a partial opt out specificallyfor Facebook ad targeting and product-related purposes.

However it notes thatdata will still be shared for other purposes such as improving infrastructure and delivery systems, understanding how our services or theirs are used, securing systems, and fighting spam, abuse, or infringement activities.

So there is no way to totally opt out, short of short of stopping using WhatsApp.

A WhatsApp spokesperson declined to comment on why it is not offering users a complete opt out of data-sharing with Facebook, butin a statement the spokesperson said: We understand people with WhatsApp accounts might want to opt out of sharing their account information to improve their Facebook experiences. They have an additional 30 days to opt out after accepting the new terms so they have time to consider their choices.

How to opt out of sharing data forFacebook ad targeting

WhatsAppdetails two ways toopt out of sharing data for Facebook ad targeting on itsbloghere.

Firstly if you havent already agreed to the new T&Cs you can opt out before agreeing to the new terms by tapping to read the full terms of service and privacy policy and scrolling to a control at the bottom of the document where theres a check-box option for sharing the data which you then untick before hitting agree

WhatsAppIf youve already accepted the new T&Cs without unchecking the box to share your information with Facebook WhatsApp is also offering a thirty-day window to make the same choice via the settings page in the app.

To exercise your opt out in this scenario you need to go to Settings > Account > Share my account info in the app and uncheck the box/toggle the control displayed there. And doso within the thirty-day window. Presumably, after that, even this partial opt out will expire.

This post was updated with additional details and comment