TechDigits

Tech news
Thursday, Mar 28, 2024

How private is your Gmail, and should you switch?

How private is your Gmail, and should you switch?

You might be surprised how much Google’s email service – and others – know about you. Here’s how to set some boundaries

Most people are aware of the cookies that track them across the web, and the privacy-invading practices of Google search, but did you know Google’s email service, Gmail, collects large amounts of data too?

This was recently put into stark focus for iPhone users when Gmail published its app “privacy label” – a self-declared breakdown of the data it collects and shares with advertisers as part of a new stipulation on the Apple App Store.

According to the label, those that grant the appropriate permission to the iOS Gmail app can expect Google to share information including their approximate location, user ID – an identifier used to anonymously track them – and data about the ads they have viewed online with advertisers. More data is used for analytics – in Google’s words, “to build better services” – including purchase history, location, email address, photos and search history.

Gmail is by far the most popular email service, with more than 1.5 billion active users, compared with 400 million using Microsoft Outlook and 225 million signed up to Yahoo Mail.

Although Google stopped scanning email content to tailor ads in 2017, last year the company started showing shopping ads in Gmail. And it still scans emails to facilitate so-called smart features such as the ability to add holiday bookings or deliveries straight to your calendar, or to autocomplete suggestions.

Every way you interact with your Gmail account can be monitored, such as the dates and times you email at, who you are talking to, and topics you choose to email about, says Rowenna Fielding, founder of privacy consultancy Miss IG Geek.

How Google uses your data


Much of the information collected by Gmail and shared with advertisers is metadata – data about data. But if you carry cookies from other Google services, your activity can be correlated or “fingerprinted” from associated products such as Google Maps and YouTube. “Gmail becomes a window into your entire online life because of how wide and deep their surveillance architecture goes,” Fielding says. “Practically everything you do online will feed back to Google.”

Google claims none of the data collected from scanning emails for purchase information, delivery tracking numbers and flight bookings is used for advertising, but as Andy Yen, founder and CEO of secure email service ProtonMail says: “It remains a fact that Google keeps a record of these events and logs them regardless.”

Part of the problem is a lack of regulatory enforcement around email data collection and tracking. Most people are becoming aware of tracking as they visit websites due to regulation such as the EU’s ePrivacy Directive and the General Data Protection Regulation (GDPR).

“People are aware of cookies because of privacy and data protection law – which states that planting trackers on your device requires your consent, and you have the right to be told about what is happening to your data,” says Fielding. “In Europe, those protections cover email tracking as well, but there hasn’t been much enforcement in this area.”

Gmail v other email services


Other mainstream email providers aren’t much more private. Like Gmail, Microsoft’s Outlook is embedded in the firm’s ecosystem and integrated with its other services. “Any mainstream, consumer-level account is only free in that you don’t pay it with money, but with data,” Fielding says. “Microsoft says it doesn’t look at the content of emails in Outlook to serve you ads, but it is open about collecting and using metadata about user activity across all of its services for advertising.”

Gmail is also the most hefty data collector, says Yen. He says the iOS privacy labels illustrate the “stark difference” in approach to data collection between the Gmail app and other email providers. “Outlook and Yahoo gather far more than they need, but even they don’t go as far as Gmail by collecting location data and purchase history.”

It’s often said by privacy experts that if you don’t pay for the product, you are the product, and when it comes to Google this is “undeniably the case”, says Yen. “Google’s business model is based on monetising the data it gathers from users, predominantly to sell it to Google’s real customers – advertisers… Gmail forms one part of that data-gathering infrastructure.”

Yet while it’s true that Google is absorbing your data, Jon Callas, director of technology projects at the US-based privacy advocate Electronic Frontier Foundation, says the most invasive tracking comes via email marketers, not the service providers. “Here, since Google is one of the world’s biggest advertising companies, it is intimately involved no matter what email service you use.”

These types of emails – from businesses offering products and services – can be monitored by the sender, whether you knowingly signed up or not. Data sent back to email marketers includes whether you’ve opened the email, how long for, and which links you’ve clicked on.

Callas explains: “When you load pictures remotely, the people who sent the email learn that you read the message, the time you read it, and an approximation of where you are via your network address.”

Often these “pictures” consist of a single pixel and are invisible to the naked eye. Callas says the best way to protect yourself against this stealthy type of tracking is to set your email so it does not load pictures or remote content by default.

Lock down your Gmail, or choose a privacy-focused alternative


The other problem with Gmail and services like it, according to privacy advocates, is a lack of end-to-end encryption. This gold-standard level of security protection, used by secure messaging apps such as Signal and WhatsApp as well as email services including ProtonMail and Hushmail, means no one can access the content of your emails, even the provider. It also gives you the reassurance that the email service can’t sell your data to advertisers.

But this level of security and privacy often comes at the expense of the functionality people are accustomed to in Gmail, such as integration with apps including Google Calendar.

Yet some experts question whether end-to-end encryption is necessary for email, when apps such as WhatsApp and Signal can be used for private and convenient communication. And as Callas says: “The ProtonMail service is encrypted, but for this to be effective, both parties need to be using some form of encrypted email.”

So, do you need to ditch Gmail? If much of the above sounds messy and leaky, you could consider a provider such as ProtonMail to email others using a similarly protected service, or Signal, which ensures the communication is end-to-end encrypted on both sides.

And if you are unconcerned about Google’s data-slurping habits, you may revise your opinion after using its privacy checkup function to review the tranche of data it holds about you. There are, however, lots of options to restrict the data that their services collect about you. In addition, Fielding recommends blocking online trackers across other Google services with tools including Privacy Badger or Ghostery.

If you have an iPhone, it’s possible to lock down Gmail even further by avoiding Google’s app and sticking to Apple’s own Mail client, or by opening your email via the Safari browser.

Although this might not offer the same level of functionality, Fielding says: “Using Apple Mail is an incremental improvement on using the Gmail app, because Apple’s business model is not as heavily dependent on data and ad tech as Google’s.”

Newsletter

Related Articles

TechDigits
0:00
0:00
Close
FTX's Bankman-Fried headed for jail after judge revokes bail
America's First New Nuclear Reactor in Nearly Seven Years Begins Operations
Southeast Asia moves closer to economic unity with new regional payments system
Today Hunter Biden’s best friend and business associate, Devon Archer, testified that Joe Biden met in Georgetown with Russian Moscow Mayor's Wife Yelena Baturina who later paid Hunter Biden $3.5 million in so called “consulting fees”
Google testing journalism AI. We are doing it already 2 years, and without Google biased propoganda and manipulated censorship
Musk announces Twitter name and logo change to X.com
The future of sports
TikTok Takes On Spotify And Apple, Launches Own Music Service
Hacktivist Collective Anonymous Launches 'Project Disclosure' to Unearth Information on UFOs and ETIs
Typo sends millions of US military emails to Russian ally Mali
Server Arrested For Theft After Refusing To Pay A Table's $100 Restaurant Bill When They Dined & Dashed
Democracy not: EU's Digital Commissioner Considers Shutting Down Social Media Platforms Amid Social Unrest
Sarah Silverman and Renowned Authors Lodge Copyright Infringement Case Against OpenAI and Meta
Why Do Tech Executives Support Kennedy Jr.?
The New York Times Announces Closure of its Sports Section in Favor of The Athletic
Florida Attorney General requests Meta CEO's testimony on company's platforms' alleged facilitation of illicit activities
The Poor Man With Money, Mark Zuckerberg, Unveils Twitter Replica with Heavy-Handed Censorship: A New Low in Innovation?
The Double-Edged Sword of AI: AI is linked to layoffs in industry that created it
US Sanctions on China's Chip Industry Backfire, Prompting Self-Inflicted Blowback
Meta Copy Twitter with New App, Threads
BlackRock Bitcoin ETF Application Refiled, Naming Coinbase as ‘Surveillance-Sharing’ Partner
UK Crypto and Stablecoin Regulations Become Law as Royal Assent is Granted
A Delaware city wants to let businesses vote in its elections
Alef Aeronautics Achieves Historic Milestone with Flight Certification for World's First Flying Car
Google Blocked Access to Canadian News in Response to New Legislation
French Politicians Advocate for Pan-European Regulation on Social Media Influencers
Melinda French Gates Advocates for Increased Female Representation in AI to Prevent Bias
Snapchat+ gains 4 million paying subscribers in its first year
Apple Makes History as the First Public Company Valued at $3 Trillion
Elon Musk Implements Twitter Limits to Tackle Data Scraping, but Faces Criticism for Technical Misunderstanding
EU and UK's Slow Electric Vehicle Adoption Raises Questions About the Transition to Green Mobility
Top Companies Express Concerns Over Europe's Proposed AI Law, Citing Competitiveness and Investment Risks
Meta Unveils Insights on AI Usage in Facebook and Instagram, Amid Growing Calls for Transparency
Crypto Scams Against Seniors Soar by 78% in 2022, Experts Urge Vigilance
The End of an Era: National Geographic Dismisses Last of Its Staff Writers
Shield Your Wallet: The Perils of Wireless Credit Card Theft
Harvard Scientist Who Studies Honesty Accused Of Data Fraud, Put On Leave
Putting an End to the Subscription Snare: The Battle Against Unwitting Commitments
The Legal Perils of AI: Lawyer Faces Sanctions for Relying on Fictional Cases Generated by Chatbot
ChatGPT’s "Grandma Exploit": Ingenious Hack Exposes Loophole in AI, Generates Free Software Codes
The Disney Downturn: A Near Billion-Dollar Box Office Blow for the House of Mouse
A Digital Showdown: Canada Challenges Tech Giants with The Online News Act, Meta Strikes Back
Distress in the Depths: Submersible and Passengers Missing in Titanic Wreckage Expedition
Mark Zuckerberg stealing another idea: Twitter
European Union's AI Regulations Risk Self-Sabotage, Cautions smart and brave Venture Capitalist Joe Lonsdale
Nvidia GPUs are so hard to get that rich venture capitalists are buying them for the startups they invest in
Chinese car exports surge
Reddit Blackout: Thousands of Communities Protest "Ludicrous" Pricing Changes
Nvidia Joins Tech Giants as First Chipmaker to Reach $1 Trillion Valuation
AI ‘extinction’ should be same priority as nuclear war – experts
×