News for hackers. Stuff that matters.
Re:Privacy not included: Holiday gift list for privacy and s... by craftyguy on Wednesday November 14, 2018 @07:04PM (#18455549)
> This is false

Since the software is proprietary, and you are not making an official announcement on behalf of fitbit, why should we believe you? What you say directly contradicts the privacy policy[0] on your employer's website, which certainly states that they have the freedom to share your information 'with others': "You may also authorize us to share your information with others" and "We transfer information to our corporate affiliates, service providers, and other partners who process it for us"

0. https://www.fitbit.com/legal/privacy-policy#how-info-is-shar...

Re:Privacy not included: Holiday gift list for privacy and s... by brlewis on Wednesday November 14, 2018 @07:33PM (#18455732)
Please stay on topic. The claim I said was false was "shares your information with 3rd parties for unexpected reasons".
Re:Privacy not included: Holiday gift list for privacy and s... by craftyguy on Wednesday November 14, 2018 @08:06PM (#18455979)
Who expects a fitness tracker to share information to 3rd parties at all? I bet if you asked any of fitbit's customers if they expected fitbit to share their information with <insert random 'data processing' company here>, they would not have expected that.
Re:Privacy not included: Holiday gift list for privacy and s... by brlewis on Wednesday November 14, 2018 @08:20PM (#18456059)
Who? Anyone who knows that companies contract work out. At very few companies is every single function performed by employees.
Re:Privacy not included: Holiday gift list for privacy and s... by cyphar on Wednesday November 14, 2018 @08:49PM (#18456211)
I don't see what employing contractors has to do with sharing user data with third-parties.
Re:Privacy not included: Holiday gift list for privacy and s... by brlewis on Wednesday November 14, 2018 @09:16PM (#18456316)
A contractor is a third party.
Re:Privacy not included: Holiday gift list for privacy and s... by cyphar on Wednesday November 14, 2018 @09:23PM (#18456352)
But a contractor working on your codebase (which is what I believe you were implying) isn't the same as providing user data to a third party (for processing or for advertising and so on).

Providing data to third parties for processing is clearly different (and as an ex-user of one of Fitbit's products I definitely wouldn't have expected that this is the case -- Fitbit's fitness tracking is so core to the company that I wouldn't expect the processing of said data to be outsourced.) Yeah, it's in your privacy policy but that's just a cop-out (by that metric, no product can unexpectedly send data to third-parties).

Re:Privacy not included: Holiday gift list for privacy and s... by brlewis on Wednesday November 14, 2018 @11:18PM (#18456826)
I think you're making assumptions about the kind of information that's shared. The kind of example to think of is when you buy from Fitbit and your information gets sent to a payment processor.

Here's the whole paragraph:

We transfer information to our corporate affiliates, service providers, and other partners who process it for us, based on our instructions, and in compliance with this policy and any other appropriate confidentiality and security measures. These partners provide us with services globally, including for customer support, information technology, payments, sales, marketing, data analysis, research, and surveys.

Re:Privacy not included: Holiday gift list for privacy and s... by brlewis on Wednesday November 14, 2018 @09:49PM (#18456473)
I was talking about customer service and the other examples listed in the policy.
Re:Privacy not included: Holiday gift list for privacy and s... by sincerely on Wednesday November 14, 2018 @08:02PM (#18455950)
If I'm using a fitness tracker watch, I'd expect that the functionality doesn't involve sharing my data with 3rd parties.
Re:Privacy not included: Holiday gift list for privacy and s... by brlewis on Wednesday November 14, 2018 @11:24PM (#18456845)
I'll spell this out since downvotes seem to indicate some people do not get it. "You may also authorize us to share your information with others" is not an unexpected reason for information to be shared. For example, if you install Strava and authorize Fitbit to share your information with Strava, the sharing is expected.