e.g. https://www.google.com/policies/privacy/archive/20160325-201...
https://github.com/digitalocean/tos/commit/782ce59ec49a75fe2...
I'm not seeing anything there that substantially differs from the previous version, but IANAL.
- Now collects IPs as "Personal Information" in addition to the previously-listed types
- No longer claims that cookies do not contain Personal Information, and no longer claims that cookies are not tied to any form of Personal Information in their database (I'm guessing due to the first change, but not positive and not disclosed)
- Adds language limiting the length of time they may hold Personal Information from previous "indefinitely" to current "as long as necessary according to applicable law"
- Adds language limiting the terms of a user's "explicit consent" to collection of Personal Information - previously, usage was the entirety of consent, now consent is conditional upon DigitalOcean adhering "to the applicable law".
- Hardens their commitment to not selling personal information from "will never intentionally" sell to "will not" sell
- Adds relevant language throughout to adhere with EU-US Privacy Shield Principles, including a new section on the same.
- Clarifies account deletion - even post-deletion they will retain email addresses and network logs, and possibly other Personal Information in cases where fraud or illegal activity has been determined by DigitalOcean or law enforcement.
- Clarifies how to object to collection and disclosure of Personal Information; clarifies that such an objection will not affect service-level, transactional or legal communications.
IANAL either, but hey.
https://github.com/digitalocean/tos/commit/782ce59ec49a75fe2...
https://www.zoho.com/privacy-policy-changes-19032015-3009201...
Do you expect your doctor to similarly "share your data" for "ads and promotions"? No, because he's getting paid for services rendered.
Its one thing if you are partaking in free service such FB or Google et al but when you are exchanging money for good or services I think this crosses the line. Recent examples of this I have seen are AT&T who sent out notice about Customer Proprietary Network Information, basically selling your data even though in the US you are likely paying AT&T > $100 a month. This blogs has the actual notification:
http://ivebeenmugged.typepad.com/my_weblog/2016/03/att-cpni....
Ditto for Verizon with their supercookies. In Verizon/AT&Ts case their position seems to be "well Google and FB are doing it." and we need to compete.
Another recent example was was ING now Voya Financial Services that manages a 401K retirement accounts sent out a notification to customers explaining that they would be sharing your data with third parties.
This is really a disturbing trend. If the service is free then I think your infomration is fair game but when I am paying for something it needs to be opt in.
And almost without waver the reason these companies give for such actions is "so we can provide yo with better service"
It's sad, and I don't advocate it, but it's true.
But I don't see where it's particularly egregious. It shares some data with advertisers (surprise) and only to the extent required for ads and promotions. And it says you can opt out, though it's via email.