News for hackers. Stuff that matters.
Re:Google accused of 'trust demolition' over health app by AlexandrB on Wednesday November 14, 2018 @10:00AM (#18450269)
The specific language was:

> [data] "will never be linked or associated with Google accounts, products or services"

Streams is plainly a Google product and is probably using deep learning models trained on this data. Morever, patients were never given the option to opt-out of this data collection at all.

Re:Google accused of 'trust demolition' over health app by crazygringo on Wednesday November 14, 2018 @10:06AM (#18450315)
I can't tell what you're trying to say...

What is trained on what data? The point is that health care data will never be linked to your "Google account", e.g. your Gmail/YouTube/etc. or other Google services -- AdSense can't show you ads based on a hospital visit.

DeepMind is part of Alphabet, like Google is part of Alphabet. DeepMind can do its thing without ever touching Google accounts or Google data.

Re:Google accused of 'trust demolition' over health app by kodablah on Wednesday November 14, 2018 @10:39AM (#18450650)
>>> "will never be linked or associated with Google [...] products [...]"

>> is [...] a Google product

> I can't tell what you're trying to say...

Surely it's clear...said it wouldn't be associated w/ Google products and became a Google product. You can bring up nuance or twist words or whatever, but it's clear that at the least they misled.

Re:Google accused of 'trust demolition' over health app by andybak on Wednesday November 14, 2018 @10:53AM (#18450781)
> [data] "will never be linked or associated with Google accounts, products or services"

was true at the time but surely what people care about is data flowing between the medical app and existing Google services? i.e. what the wording could be revised and still keep to the original intended meaning.

Whether you think the company separation was critical to trust is a rather different question to whether they have broken the intent of their original promise. If you don't trust Google then you presumably also had suspicions about the previous arrangement.

Re:Google accused of 'trust demolition' over health app by clhodapp on Wednesday November 14, 2018 @11:47AM (#18451249)
Since "will never" describes the future, the statement was never true if the event happened (which it did) or ever end up happening, hence the PR-speak "we have no plans".
Re:Google accused of 'trust demolition' over health app by andybak on Wednesday November 14, 2018 @12:23PM (#18451634)
See my reply below.
Re:Google accused of 'trust demolition' over health app by eiaoa on Wednesday November 14, 2018 @11:00AM (#18450835)
>> [data] "will never be linked or associated with Google accounts, products or services"

> was true at the time but surely what people care about is data flowing between the medical app and existing Google services?

I would think people would care about the data flowing to any Google service. An understanding that it only applied to existing services like you're claiming would be meaningless. A hyperbolic example of this is Google/Deepmind would still be compliant if they came out with a brand new service, Google Privacy Destroyer 1.0, that puts all these people's private health data up for sale on the dark web.

Re:Google accused of 'trust demolition' over health app by andybak on Wednesday November 14, 2018 @12:22PM (#18451629)
I didn't mean that. At the time the medical company was separate from Google. Therefore the statement was intended to communicate the key point - we're not using your data for other stuff. This is the spirit of the declaration and the part that we should probably care most about.

The statement unfortunately has a secondary implied promise which Google has broken. But my point is that if we don't trust Google to keep the data separate then the initial promise was meaningless. And if we do then not much has changed.

If Google wanted to do bad things then they would have kept the companies separate to keep their promise superficially.

The wording was poorly thought out but unless you think the reorganisation is going to materially change Google's behaviour then I don't see it as hugely significant.

Re:Google accused of 'trust demolition' over health app by danShumway on Wednesday November 14, 2018 @11:12AM (#18450937)
The problem is, even if Google is following the spirit of the policy, how do we know whatever policy they introduce now won't be changed in the future?

So the new promise is "Patient data remains under our NHS partners' strict control, and all decisions about its use will continue to lie with them." Except I can think of at least two or three good reasons off the top of my head why Google could renege on that without breaking the spirit of their promise too. Maybe Google decides that the information will be more secure on their servers, and the original point was to make it more secure anyway, right?

Yes, Google's original promise was kinda arbitrary and over-strict. But the way you build trust is you keep promises, even if they're arbitrary. When Google says they're not going to do something, they should not do it. Otherwise, nobody will trust them in the future when they say they're not going to do other things. Nobody wants to live in a world where we have to second guess what the intent is behind everything a company promises and are only able to hold them to that.

If Google can't keep its promises, then it shouldn't have made any promises in the first place. It should have just given a milk-toast answer like, "we care about privacy", which would have communicated exactly the same information without deceiving customers into thinking that there was an actual line in the sand somewhere.

Re:Google accused of 'trust demolition' over health app by Loughla on Wednesday November 14, 2018 @12:23PM (#18451632)
>Nobody wants to live in a world where we have to second guess what the intent is behind everything a company promises and are only able to hold them to that.

How is this not the world we already live in?

Every agreement, obligation, promise, or contract I've read from my major tech 'partners' professionally and personally has had a clause that they can change it at any time with no prior notification.

Re:Google accused of 'trust demolition' over health app by danShumway on Wednesday November 14, 2018 @01:40PM (#18452500)
You're right, that is crummy, and it is something that annoys me.

That being said, at least they include the clause. If this promise had been phrased as, "we won't link with Google products, but we might in the future", I would honestly feel a bit more charitable towards them. It wasn't.

DeepMind went out of its way to describe this not just as a temporary promise, but as a legal one.[0] In their words, "...data will never be connected to Google accounts or services, or used for any commercial purposes like advertising or insurance. Doing so would be completely impossible under our NHS contracts and the law".

That is a full step beyond the crappy TOS that most companies use, and statements like that were given to ease consumer concerns and make it easier for DeepMind to form deep relationships with hospitals.

One other thing to note outside of legal obligations or technicalities is that even if you don't think Google did anything different from the companies you're talking about, companies who do 180s on their TOS still lose trust. The trust loss is separate from the legality.

I don't know if you can go to Google and say, "legally, you shouldn't be allowed to link your product," I'm not a lawyer. I do know that we as consumers and engineers should instinctively distrust any future promises that Google makes about privacy.

If what they're doing is legal, I'm still going to call them out for being untrustworthy and dishonest. Their earlier statements are still lies.

[0]: https://twitter.com/MalcolmMoore/status/1062394654702927873

Re:Google accused of 'trust demolition' over health app by mayankkaizen on Wednesday November 14, 2018 @10:29AM (#18450548)
"DeepMind can do its thing without ever touching Google accounts or Google data."

May be it is the case at present. But I see zero probability that it will always be the case.

Re:Google accused of 'trust demolition' over health app by je42 on Wednesday November 14, 2018 @10:51AM (#18450761)
Health products need to be designed with privacy as a core pillar. Just pumped everything to the cloud and then figuring out - was nice a couple of years ago. Thankfully the laws are catching up and hopefully companies like Google will not only start to comply with them but actually follow the underlying spirit of these laws.
Re:Google accused of 'trust demolition' over health app by alehul on Wednesday November 14, 2018 @11:56AM (#18451331)
How can you say zero probability? I understand a hyperbole, but let's make a fair estimate.

Assuming hyperbole: why do you believe that, over time, there is a low probability "DeepMind can do its thing without ever touching Google accounts or Google data?" What factors will contribute to that?

Re:Google accused of 'trust demolition' over health app by PunchTornado on Wednesday November 14, 2018 @10:50AM (#18450750)
> [data] "will never be linked or associated with Google accounts, products or services"

it doesn't say your google account or product. it is in general google products.

It seems to me that they are breaking this promise.

Re:Google accused of 'trust demolition' over health app by DannyBee on Wednesday November 14, 2018 @01:21PM (#18452277)
Streams is a Deepmind product, moving to Google Health.

It's not like it was an existing Google product that the data is being moved to.

If Google Health was part of Alphabet but not Google, would you argue it was "plainly not a Google product"?

Or is that still a Google product?

(FWIW: I actually expect the article gets it wrong and that Google Health will be/is a separate LLC under Alphabet but not Google)

Re:Google accused of 'trust demolition' over health app by danShumway on Wednesday November 14, 2018 @02:01PM (#18452748)
> Streams is a Deepmind product, moving to Google Health.

So now it's a Google product. And when they said [data] "will never be linked or associated with Google accounts, products or services", that was a lie. Seems very straightforward to me.

> If Google Health was part of Alphabet but not Google, would you argue it was "plainly not a Google product"?

It has Google in the name. I don't understand this claim. It's a Google product. From the official blog post that Streams released yesterday[0]:

"We’re excited to announce that the team behind Streams—our mobile app that supports doctors and nurses to deliver faster, better care to patients—will be joining Google."

They're not joining Alphabet; they're joining Google. I mean, I guess linking to Google is technically different than literally being consumed by Google?

[0]: https://deepmind.com/blog/scaling-streams-google/

Re:Google accused of 'trust demolition' over health app by DannyBee on Wednesday November 14, 2018 @03:42PM (#18453710)
"It has Google in the name. I don't understand this claim."

Just because something has Google in the name does not mean it is part of the same legal entity as the rest of Google.

This is already the case in various situations.

Your view seems to be "branding" is what makes it a Google product, and that seems wrong. Branding has no effect on anything material at all.

If Google called it "Alphabet Chrome" but it reported into the Google entity, would it suddenly remove privacy concerns around chrome? As I asked, and you never answered, would you suddenly no longer call it a Google product?

What really matters is what entities it is part of and what walls/agreements/etc exist between the entities, etc.

Re:Google accused of 'trust demolition' over health app by danShumway on Wednesday November 14, 2018 @04:19PM (#18454054)
Okay, but: "We’re excited to announce that the team behind Streams—our mobile app that supports doctors and nurses to deliver faster, better care to patients—will be joining Google."

They're joining Google. Representatives from DeepMind have said that they're joining Google[0]. Every source I can find says that they're joining Google. You're talking about a hypothetical that doesn't exist.

If Streams was joining Alphabet instead of Google, that would probably change things a bit. If they announced they were joining Mozilla instead of Google, that would change things even more. But based on all of the information we have now from both Google and Streams, neither of those things are happening.

Is your position that the blog post that Streams itself used to announce this about their own acquisition is wrong?

[0]: https://twitter.com/Dominic1King/status/1062755561727578113

Re:Google accused of 'trust demolition' over health app by dekhn on Wednesday November 14, 2018 @02:48PM (#18453195)
Wait, are you saying "Google Health" is an independent company under Alphabet, sibling to Google, but with Google in the name?

That seems implausible but would make sense.

Re:Google accused of 'trust demolition' over health app by DannyBee on Wednesday November 14, 2018 @03:40PM (#18453699)
Yes, I actually believe that is the case (or will be the case)

I wouldn't see any advantage to making it part of the same legal entity, and a lot of disadvantages.

Google does this in plenty of cases, actually.

https://icis.corp.delaware.gov/ecorp/entitysearch/namesearch...

Search for Google. A subset of the results are Google entities

Re:Google accused of 'trust demolition' over health app by dekhn on Wednesday November 14, 2018 @03:49PM (#18453792)
Oh, huh, I guess Google Fiber counts, and GV was called Google Ventures while being an Alphabet child for a few months.

That's pretty misleading. I wonder if the news leaked before a name was picked?