Firefox maker Mozilla deleted a promise to never sell its users’ personal data and is trying to assure worried users that its approach to privacy hasn’t fundamentally changed. Until recently, a Firefox FAQ promised that the browser maker never has and never will sell its users’ personal data. An archived version from January 30 says:
Does Firefox sell your personal data?
Nope. Never have, never will. And we protect you from many of the advertisers who do. Firefox products are designed to protect your privacy. That’s a promise.
That promise is removed from the current version. There’s also a notable change in a data privacy FAQ that used to say, “Mozilla doesn’t sell data about you, and we don’t buy data about you.”
The data privacy FAQ now explains that Mozilla is no longer making blanket promises about not selling data because some legal jurisdictions define “sale” in a very broad way:
Mozilla doesn’t sell data about you (in the way that most people think about “selling data”), and we don’t buy data about you. Since we strive for transparency, and the LEGAL definition of “sale of data” is extremely broad in some places, we’ve had to step back from making the definitive statements you know and love. We still put a lot of work into making sure that the data that we share with our partners (which we need to do to make Firefox commercially viable) is stripped of any identifying information, or shared only in the aggregate, or is put through our privacy preserving technologies (like OHTTP).
Mozilla didn’t say which legal jurisdictions have these broad definitions.
Some obvious jurisdictions that come to mind, are US vs. EU:
- US: protects “Personally Identifiable Information” (PII)
- EU: protects “Personal Information” (PI)
The color of your hair… is PI in the EU, it isn’t PII in the US since it’s not enough to pinpoint you as a single person.
Under US law, a data broker can gather a bunch of “not-PII, just PI”, and refine it into profiles that can end up pinpointing single individuals.
Under EU law, that’s illegal; no selling PI, period.
Kichae@lemmy.ca 3 days ago
So, here’s the funny thing about “never will”. It’s not a promise you can go back on. “Never will” means “forever won’t”.
Changing that language is a breech of trust. Getting all “nuanced” and weasel-wordy about it doesn’t change that.
Folks should start looking into whether the previous promise is legally binding in any way, and start preparing for a class action suit if it is. Because Mozilla’s better dead than it is as zombie smoke screen for this horse shit.
ryannathans@aussie.zone 3 days ago
You realise if Mozilla disappears there is only chromium
lemminator@lemmy.today 3 days ago
That doesn’t detract from OP’s point. I want Mozilla to be a good, privacy respecting organization, but they aren’t anymore.
Kichae@lemmy.ca 3 days ago
They’ve been hiding behind that excuse for a decade now. How far do they get to take it? How far do they get to go before we’re “allowed” to tell them to eat shit?
anachronist@midwest.social 2 days ago
If Firefox disappears. Mozilla isn’t Firefox, it’s the organization staffed with ad-tech and McKinsey ghouls and paid by Google to kill Firefox.
anachronist@midwest.social 2 days ago
The equally hilarious thing is that currently they have the “never will” promise in the same codebase as the “definitely will” gated by a “TOU” flag, showing intent to violate the promise.
teawrecks@sopuli.xyz 3 days ago
It seems like the issue here is, users want to be spoken to in colloquial language they understand, but any document a legal entity produces MUST be in unambiguous “legal” language.
So unless there’s a way to write a separate “unofficial FAQ” with what they want to say, they are limited to what they legally have to say.
And maybe that’s a good thing. Maybe now they need to create a formal document specifying in the best legalese exactly what they mean when they say they “will never sell your data”, because if there’s any ambiguity around it, then customers deserve for them to disambiguate. Unfortunately, it’s probably not going read as quick and catchy as an ambiguous statement.
anachronist@midwest.social 2 days ago
The issue is Mozilla’s McKinsey CEO has decided to break the promise not to sell personal data.