2. You can't expect every user to know they are logged, or how it's affecting the user, or know how to disable/delete it, can you?

3. How can I verify that you did delete the data about me instead of just hiding from me for viewing it? Alphabet is not belong to public sector. So the simple answer is I can't. If you want me to trust you, don't use opt-out as default.

4. I'm sure you can tell the differences between those alternatives and Google products.

5. It's not that hard to respect some one's data. First, do not collect it! Second, if you have to collect it, tell the owner why! Third, delete it completely while requested.

6. Aggregated data collection and use without permissions adds potential risks to the society. (Cambridge Analytica)

Edit: And you guys are doing deep learning, that's gonna consume lot's of data. Duplex for example, you use anonymous phone call data to train it. The question is, where does that data even come from? I'd blacklist whoever collected the data, even it's collected anonymously.

Everything adds "potential risks". When you talk about risk, you have to give estimates of both the frequency and the criticity, and then compare to the potential benefits. Only then you have all the pieces to take an informed decision, according to your preferences.

They can reduce the risks to a certain level if users were told how they are going to use the data and why before using it. Are they going to do that? No, because that increases the cost, which means less profit, which means shareholders won't agree.

So there comes law.

I don't think this stops Google from collecting your viewing history. If it did, Youtube recommendations wouldn't work at all, because they would know nothing about what I like or don't like. But I'm pretty sure recommendations work regardless of your settings -- meaning you're being tracked.

I happen to like the recommendations, so I don't mind this. But it's a hard problem.

Does that actually prevent the data from being stored on Google's servers? I'd like to believe that the data isn't being vacuumed up regardless of what the user says, so if you're willing to vouch for it then that would mean a lot.

You see, the point is that we, the users, helped to create a mammoth that has an enormous pile of sometimes very intimate data on almost anyone. This in itself is dangerous, regardless of what they do with this data - whether they share it with advertisers and other third parties, the government, NSA etc. or not. Also, the world changes fast. Owners change, governments change. Who is to blame when things end up badly? We are, because we got lured by free unlimited spam-free mailbox, free browser, cheap phone, free analytics, accurate search engine. We like these so much that we gave up critical thinking for a while. But the society as a whole is slowly waking up, hence articles like these (which is quite lacking on several points BTW.)

A breach would be a security issue, not a privacy issue.

A security issue is where a third party accesses your data stored at Google without Google's permission.

A privacy issue is where a third party accesses your data stored at Google with Google's permission but without your permission.

Until the GDPR started being enforced, I think it was common practice to collect and sell data without the user's full knowledge and consent. It's a huge change in mindset having to know and explain what they're doing.

Even when not signed in, YouTube remembers the sort of video you've watched and suggests similar ones; I didn't explicitly consent to this, and they didn't tell me clearly what data they were collecting. I'm a former Gmail user; I didn't explicitly consent to Google analysing the contents of my email messages; I think a typical person would not expect that.

If something “feels creepy”, it's probably a privacy breach.

Maybe Google think they have the user's permission. It may be an honest misunderstanding. I'm not saying they're malicious; but I think they have very little incentive to really care about privacy, because their users don't demand it. Third parties will pay for user data.

Also, I think you should be able to choose who you trust. You shouldn't be obliged to trust Google (or Microsoft or whoever); I would see that as a monopoly.

I guess it's a good reminder that i need to change services

Again, "reading" emails seems to be an arbitrary distinction. Your emails are stored and served to you, so they are read by HTTP servers, by your browser, by many things. The real issue is the use that is made of those readers: an index that allows you to search your emails more efficiently does not seem to be nefarious, but I definitely agree that other nefarious uses are possible (say some company that would use emails to target people in debt or something like that), just not the case with Gmail.

> You can use a program on your computer locally to keep your emails and index&search them.

Right, but then it's not Gmail anymore, that's just an IMAP mail server with Thunderbird. Gmail started as a smart webmail; being able to quickly search your emails from anywhere, without a desktop client, without fetching thousands of emails before you could perform a search.