How did Cambridge Analytica get data on 50 million people when only 270,000 people had agreed to hand over their information to a third party? Facebook said people who downloaded the app gave consent for the app to collect limited information about their friends whose privacy settings were set to allow it.
That information was eventually paid for by Cambridge Analytica, the voter profiling company that worked with the Trump campaign.
O.K., so what do I do now?
There is a multipronged approach you can take to protect yourself from data-harvesting apps and programs. That includes tools you can install in your browser and settings you can tweak on Facebook. Here’s a run down of what you should do:
• Audit your Facebook apps. If you used Facebook to sign in to a third-party website, game or app, those services may continue to access your personal data. On Facebook, go to the settings page and click on the Apps tab to see which apps are connected to your account. From there, you can take a closer look at the permissions you granted to each app to see what information you are sharing. Remove any apps that you find suspicious or no longer use. (Facebook has also made some changes to prevent the gathering of detailed information of friends of users.)
• Audit your Facebook privacy settings. If you are concerned about what details apps can see about you and your Facebook friends, now is a good time to check your privacy settings and minimize the information you share publicly. For example, you can make sure that only your friends can see your Facebook posts, or that only you can see your friends list.
• Install a tracker blocker. There are add-ons that you can install in your browser that try to block trackers embedded on websites. But be aware that in some cases, they will make parts of websites work improperly. In our tests, Disconnect and Privacy Badger were useful tools for blocking trackers on Google’s Chrome browser.
Here’s a primer on how tracking works, to give you a sense of why blockers are important: When you engage with an app on Facebook, it may plant a tracker in your web browser, like a cookie, that collects information from you. Even when you close out of the app, the tracker can continue to follow your activities, like the other sites you visit or the people you interact with through status updates, according to Michael Priem, chief executive of Modern Impact, an advertising firm in Minneapolis.
“It doesn’t go away after you’ve stopped looking at the ad,” he said.
• Install an ad blocker. Another way to block trackers is to prevent ads from loading altogether. Ad blockers are also add-ons that you can install for your browser on your mobile device or computer. Mobile ads are fully functioning programs, and they sometimes include malware that harvest some of your data. Even the largest websites do not have tight control over the ads that appear on their sites — and sometimes malicious code can appear inside their ad networks. A popular ad blocker among security researchers is uBlock Origin.
• Clear your browsing data. Periodically, you can clear your cookies and browsing history. Apple, Google and Microsoft have published instructions on how to clear data for their browsers Safari, Chrome and Internet Explorer. That will temporarily delete cookies and trackers, though they will probably reappear over time.
• Be wary of unknown brands. Even if you read the privacy policies, you still may have to take them with a grain of salt. In the case of the thisisyourdigitallife app, the fine print said the information would be collected for academic use, not commercial purposes. So think twice before sharing information with unfamiliar companies or organizations. (Then again, the researcher came from Cambridge University, one of the world’s top schools — so who can you really trust?)
Continue reading the main story