News for hackers. Stuff that matters.
Re:Google promised to delete sensitive data. It logged my ab... by crazygringo on Tuesday May 09, 2023 @10:40AM (#35875017)
This article doesn't seem to be supported by the provided facts.

In all cases except one, the feature seems to be working as intended:

> "After I sat for 15 minutes in the parking lots of two clinics south of San Francisco, Google deleted each from my location history within 24 hours. It did the same for my colleague’s two visits to clinics in Florida."

And in the one case where the author claims it hasn't been deleted, the screenshot [1] isn't showing Planned Parenthood as part of the timeline at all. It's simply showing it as a map location like other nearby locations not on the path (like "Himalayan Cuisine") -- and even labels it as "Recently viewed", which is why it might be prioritizing showing it when it might not otherwise. Not because it was in the timeline, but because it was recently viewed.

The only other criticism is:

> Often, Google kept my location on its timeline but only labeled it as the name of a neighborhood rather than a specific clinic. One time, it labeled my visit to a Planned Parenthood clinic as the coffee shop next door, and kept the record.

But what is Google supposed to do? It thinks you went to the coffee shop because location data isn't perfect. Sometimes it labels something adjacent and sometimes it doesn't label anything at all.

The feature seems to be working as intended, and if you want more privacy then just turn your timeline history off.

[1] https://www.washingtonpost.com/wp-apps/imrs.php?src=https://...

Re:Google promised to delete sensitive data. It logged my ab... by JohnFen on Tuesday May 09, 2023 @11:10AM (#35875503)
It's a great reminder, though, that relying on Google to be able to discern a sensitive situation isn't adequate. Even if Google was perfect, they can't read minds.

Best practice still has to remain to turn off your phone, or at least put it in airplane mode, before you leave the house if you need more privacy.

Re:Google promised to delete sensitive data. It logged my ab... by throwwwaway69 on Tuesday May 09, 2023 @11:45AM (#35876142)
I believe even in airplane mode it’s been shown that your phone will still send general location data back to your carrier once back online but I don’t recall specifics
Re:Google promised to delete sensitive data. It logged my ab... by dspillett on Tuesday May 09, 2023 @12:08PM (#35876482)
How would it collect any location data in airplane mode: WiFi, Bluetooth, GPS, and related, should all be turned off. NFC too I presume. I doubt readings from vibration (step counting), barometer, compass, if your device takes such readings, are going to be useful enough on their own to provide a good location fix.

Maybe if you take a photo of something recognisable they could log your location at that point if the photo is automatically tagged when you connect later. Though even if that is the case, I expect the OP wasn't taking pictures of any landmarks during a journey to/from the abortion clinic.

Re:Google promised to delete sensitive data. It logged my ab... by Bedon292 on Tuesday May 09, 2023 @12:17PM (#35876605)
Accelerometer and gyroscope are enough to do a pretty decent mapping of indoor locations without GPS and the like. Its all differential, so the longer it goes without a point of reference the lower the confidence is, but its possible.
Re:Google promised to delete sensitive data. It logged my ab... by prepend on Tuesday May 09, 2023 @12:56PM (#35877171)
GPS is receiving data, not sending data. My experience is that even in airplane mode I can still get my latlong and compass position.

I assume my phone just logs the location based on time and then submits when airplane mode is off.

Re:Google promised to delete sensitive data. It logged my ab... by porkbeer on Tuesday May 09, 2023 @12:57PM (#35877184)
Gps is not completely turned off, nor is wifi. Just YOUR access to them. Both can pinpoint position.
Re:Google promised to delete sensitive data. It logged my ab... by 93po on Friday May 12, 2023 @12:00PM (#35918055)
https://www.nitrokey.com/news/2023/smartphones-popular-qualc...

https://old.reddit.com/r/LineageOS/comments/gdu8l4/aeroplane...

I believe the premise is that airplane mode disconnects the OS from the modem, but it doesn't necessarily turn the modem itself off. It's still hitting cell towers and phoning back to Qualcomm. If Qualcomm has this information, three letter agencies have this information.

Re:Google promised to delete sensitive data. It logged my ab... by JohnFen on Tuesday May 09, 2023 @12:09PM (#35876490)
This is possible, yes, and is why I suggest that turning your phone off is preferable to using airplane mode.

Best of all is, of course, leaving your phone at home. But that seems to be well beyond most people's abilities these days.

Re:Google promised to delete sensitive data. It logged my ab... by creato on Tuesday May 09, 2023 @11:46AM (#35876162)
It’s also a great reminder that this data is imprecise and shouldn’t be relied on for anything important, by anyone.
Re:Google promised to delete sensitive data. It logged my ab... by dekhn on Tuesday May 09, 2023 @11:58AM (#35876365)
Larry's endgame for Google Search was a brain-embedded knowledge engine. Like, literally reading minds to answer questions.
Re:Google promised to delete sensitive data. It logged my ab... by GeekyBear on Tuesday May 09, 2023 @11:24AM (#35875770)
> In all cases except one, the feature seems to be working as intended:

This is not supported by the article text.

>To test Google’s privacy promise, I’ve been running an experiment. Over the last few weeks, I visited a dozen abortion clinics, medical centers and fertility specialists around California, using Google Maps for directions. A colleague visited two more in Florida.

In about half of the visits, I watched Google retain a map of my activity

Re:Google promised to delete sensitive data. It logged my ab... by brightlancer on Tuesday May 09, 2023 @11:36AM (#35875986)
"Often, Google kept my location on its timeline but only labeled it as the name of a neighborhood rather than a specific clinic. One time, it labeled my visit to a Planned Parenthood clinic as the coffee shop next door, and kept the record."

IOW, Google saw the author going to places _other_ than the abortion clinics or did not identify that the author had gone to the abortion clinic, so Google did not delete those entries.

Should Google delete all entries of anyone who at anytime passes within X feet/miles of an abortion clinic?

Re:Google promised to delete sensitive data. It logged my ab... by GeekyBear on Tuesday May 09, 2023 @12:16PM (#35876597)
> Should Google delete all entries of anyone who at anytime passes within X feet/miles of an abortion clinic?

Should Google tell people they will proactively delete location data when people visited "particularly personal" places including abortion clinics if they didn't intend to keep their word?

Geofence warrants are a real danger and Google told the public they would delete their location history to protect people from this threat.

Re:Google promised to delete sensitive data. It logged my ab... by 2Gkashmiri on Tuesday May 09, 2023 @11:47AM (#35876179)
as someone who does not have a google account signed in to my android phone, who tries to mostly use f-droid, i find it deeply unsettling that all my actions are recorded by the overlords. why should you opt in to that?

you say turn it off but how many people know that option even exists?

Re:Google promised to delete sensitive data. It logged my ab... by crazygringo on Tuesday May 09, 2023 @12:24PM (#35876710)
I opt into it because I find it super useful.

When I go for long walks or bike rides I like seeing the route and calculating my distance, and having that done automatically without having to remember to start logging it in advance each time.

It's also super useful when I can't remember which day I last went to the gym -- was it 2 or 3 or 4 or 5 days ago? And I can decide how important it is to go today.

I just find having a record of where I've been useful. And it's a cool visual diary of where I've been. I like having it stored in the cloud so it syncs across devices. And I don't consider Google to be my overlord, just a tool I use.

Re:Google promised to delete sensitive data. It logged my ab... by lern_too_spel on Tuesday May 09, 2023 @11:59AM (#35876381)
It's off by default, so all the people who have it on know that option exists.
Re:Google promised to delete sensitive data. It logged my ab... by prepend on Tuesday May 09, 2023 @01:03PM (#35877249)
Yes, but every time I’ve shown someone their location map they have not remembered turning it on.

I think this is in part to google prompting you pretty much every time you use maps or other web tools to turn on location history for improved functionality. I think lots of people don’t understand that and just turn it on to remove the prompt.

Kind of frustrating as this could be done in a privacy preserving manner by keeping all location data local on device and overlaying it on the map locally. Functionality wise, google doesn’t need these data.

Re:Google promised to delete sensitive data. It logged my ab... by Bedon292 on Tuesday May 09, 2023 @12:13PM (#35876532)
Is it really a valid test to just drive there and sit in the parking lot? They mention sitting there for 15 minutes at two locations, but don't discuss the rest. So perhaps they actually went into the building other times. It is not clear to me.

If you are just sitting in a shared parking lot with other business around how are they supposed to label the location? If it gets labeled as probably being the coffee shop, then its not a visit to a sensitive location which needs to get deleted.

Scenario: You navigate to a sensitive location. Close out Google Maps and do whatever. Now they forget where you navigated to, because it is sensitive. Some time later, you open Google Maps and navigate home. It now has an unknown location as your starting point, and guesses somewhere close. So it picks up the coffee shop as potential. And uses that as the starting point for the new trip. How could they also remove that coffee shop? That would require retaining the fact that you were at a sensitive location there.

Also note that the lack of data around sensitive locations in your history may be an indicator for those looking for it. If you had gone to the coffee shop it would show up as the coffee shop, but instead it shows up as no data. I would much rather it have a nearby plausible location than a total gap in the data.

And I think the most important part of it is they don't have any history of anyone going to that specific location. So a subpoena asking for everyone who went to that location returns 0 results. Getting a subpoena for everyone who went to the neighborhood or the coffee shop, should be harder, and even if they get it its not likely to provide any useful info.