The Cayla toy was an interactive doll that could respond to children's questions and engage in conversation. It had a built-in microphone and Bluetooth connection, allowing it to connect with other devices and access the internet. The privacy issues with Cayla arose from its lack of security measures, making it vulnerable to hacking. Hackers could potentially listen to conversations, collect personal data, and even interact with the child without their knowledge. These concerns led to the toy being banned in most countries. Cayla differs from popular devices like Echo and Siri in terms of its security vulnerabilities. While all these devices can collect and store personal data, Cayla's lack of security made it more susceptible to privacy breaches compared to better-secured devices like Echo and Siri.
Myrstad's statement that even if people do not purchase and keep flawed devices like Cayla in their homes, they are still not safe implies that there are other ways their privacy can be compromised. This could happen through the use of other smart devices in the home or even through the data collected by companies through various online platforms and services.
Myrstad believes that we have been lured into a false sense of security because most people don't carefully read the terms and conditions of apps on their phones. He conducted an experiment where he and his colleagues created a fictitious app with absurd terms and conditions. The experiment aimed to assess whether people take the time to read the terms and conditions thoroughly. They found that very few people read the terms and conditions, often agreeing to them without knowing what they agreed to. This lack of awareness puts users at risk of unknowingly sharing their personal data and giving consent to practices they might not approve of.
Myrstad argues that achieving informed consent is close to impossible because the terms and conditions are often excessively long, complex, and written in legal jargon. These conditions can be difficult for users to understand fully, and they might not have sufficient time or resources to analyze them thoroughly. While companies have a responsibility to be transparent and provide clear information, Myrstad believes that putting all the burden of responsibility on the consumer is unfair. He suggests that companies should take more responsibility for their practices and make it easier for consumers to make informed decisions about their data and privacy.
Myrstad's experiment on a popular dating app revealed concerning privacy implications. The app's terms and conditions allowed the company to collect and use personal data for various purposes, including sharing it with third parties for targeted advertising. The terms also stated that the company could retain the data even after users deleted their accounts. These aspects raise concerns about data privacy, as users might not be aware of the extent to which their data is being shared and used. While the specific dating app was not mentioned, such practices could discourage individuals from joining dating apps or any other platform with similar terms and conditions.
Myrstad describes commercial practices such as financial loss, subconscious manipulation, and discrimination. Financial loss occurs when users are unknowingly charged or lose money due to unclear terms and conditions. Subconscious manipulation refers to tactics used by companies to influence users' choices or behaviors without their conscious awareness. Discrimination occurs when companies use data to target or exclude specific groups unfairly. These practices might not shock individuals who are aware of the potential risks of sharing personal data, but they serve as reminders of the importance of privacy protection.
For companies to improve privacy and security and build trust with users, they should prioritize the following actions:
1. Ensure clear and easily understandable terms and conditions: Companies should present their terms and conditions in plain language, avoiding legal jargon and excessive complexity.
2. Obtain explicit consent: Companies should implement practices that require users to actively consent to data collection and usage, rather than assuming consent by default.
3. Offer granular privacy controls: Users should be provided with options to manage their privacy settings and control the sharing and usage of their data.
4. Provide transparent data usage policies: Companies should clearly communicate how they collect, store, use, and share user data. Users should have full visibility into these practices.
5. Implement strong security measures: Companies should invest in robust security systems to protect user data from unauthorized access and data breaches.
6. Regularly update privacy policies: Companies should stay proactive in updating their privacy policies to reflect the evolving data protection landscape and changes in user expectations.
By implementing these measures, companies can prioritize privacy and security, leading to increased trust and loyalty from users.
How Tech Companies Deceive You into Giving Up Your Data and Privacy
Watch How Tech Companies Deceive You Into Giving Up Your Data and Privacy and answer the following questions:
What is the Cayla toy? Describe Cayla and identify the privacy issues that existed with this toy and ultimately led to it being banned in most countries. How does Cayla differ from popular devices like Echo and Siri?
Myrstad says that even if people do not purchase and keep flawed devices like Cayla in their homes, they are still not safe. What does he mean by this?
Why does Myrstad say that we all may have been lured into a false sense of security in regard to the many apps on our phones? How many apps do you have on your phone and of these apps, how many have you carefully and closely read the terms for? Explain.
Describe the experiment that Myrstad and his colleagues embarked on regarding phone apps and the terms associated with them. Why did Myrstad and his colleagues do this experiment? What did they find out?
Myrstad claims that “achieving informed consent is close to impossible,” and he asks the question, “do you think it's fair to put the burden of responsibility on the consumer?” Myrstad says that he does not think this is fair—share your thoughts and opinion on the matter.
What privacy concerns or security concerns do you have based on what Myrstad described that he found about a popular dating app? Identify specific aspects of the terms and conditions that Myrstad notes that you find troubling and explain why. Would any of this keep you from joining a dating app in the future? Explain.
Identify and explain the commercial practices that Myrstad describes regarding financial loss, subconscious manipulation, and discrimination. Do any of these practices shock you or were you aware that these types of practices are happening, possibly to you? Explain.
Towards the end of his Ted Talk, Myrstad says, “Well, companies need to realize that by prioritizing privacy and security, they can build trust and loyalty to their users.” Based on what you learned in this unit, what would you suggest to a company like the dating app that Myrstad examined or other businesses to improve their privacy and security and build trust and loyalty with their users?
1 answer