> Replaying user behaviour is not a privacy issue

This is a problem with the Silicon Valley bubble. Just because everyone else is in your shit pile doesn’t mean it doesn’t stink. You just can’t smell it.

> Replaying user behaviour is not a privacy issue. Pretty much every mobile/web app connected to the internet is doing this with varying granularity.

All I hear is that every mobile/web app connected to the internet has significant privacy issues.

Where I point my mouse is my business dammit.

I would rather not having an app sending screenshots of the screen / record taps while I input my CC number.

Nor of any alerts / notifications that are unrelated to the app itself.

So I'd say it can be quite a privacy issue.

I agree that sensitive data should be handled much better, but - at least in a webapp - they don't capture screenshots, they just only capture mouse movements, clicks and scrolling and then rerender that on the html.

Many of these companies (e.g. FullStory, Hotjar) obfuscate all input fields for exactly this reason.

I’m sorry but they don’t, at least in a sensible defaults, easy/reliable way. Unless they’ve changed recently. We did extensive testing and found it was up to the end user implementing the integrations, and their regard for this topic/privacy.

“Videotaping your screen is not a privacy issue”

Hmm.

Funny how it's not a privacy issue for Apple devices, but triggers hundreds of posts of rage and ranting for Google devices.

Corporate cheerleading at its finest.

[Having hundreds of SV companies offer products that track user behaviour in iOS/Android/Web apps is of course a huge privacy concern, since that can very accurately profile you as a person.]

Just because everyone does it doesn't make it right!