The official Mastodon app (and most other Fediverse apps) do not collect any data about you.

When you sign up on a Fediverse server, it asks for the minimum amount of information (an email address and a password) and none of this info goes to the app or app makers.

This is in stark contrast to other social networks which seem to collect lots of personal info. See the attached image for a comparison of the privacy policies of various official social network apps.

#Privacy #FediTips #Fediverse

@FediTips well bsky at least does not seem to sniff browsing history… but the others 😰
@mariuszklimczak @FediTips Yeah I was thinking that same thing. Bluesky at least looks like reasonable stuff their own service might want to make recommendations to you.

@edward_jazzhands @mariuszklimczak @FediTips

Well, it is certainly better than Threads, but how do you think Bluesky plans to make a buck? It's you. Your content and your personally identifying data. If you are cool with that, go for it.

@mastodonmigration @edward_jazzhands @FediTips I don't expect their charity, it's just a lot of ppl posting content of interest to me (academia) are on bsky, so I followed. One has to keep common sense though, of course.
Cheers!

@mastodonmigration @mariuszklimczak @FediTips
I'm on Mastodon because I love the whole idea of a voluntary decentralized network. But at the same time... I'm also not like super opposed to the concept of a company needing to use some of my data to sell targeted advertisements, so they can make some money doing it. Being a software developer myself I completely understand that people have mouths to feed and business is business. I -love- l open source software, and I contribute. But it also doesn't pay bills a lot of the time.

If its done in a responsible way, like Bluesky seems like they're trying to, it's not that big a deal. I prefer Mastodon but I'm also not terrified of companies selling me targeted ads. As long as I feel like the company doing this ad brokering is somewhat responsible, its fine.

There's a very big difference between selling targeted ads (while keeping your data inside the company's own databases), and literally selling your data.

@edward_jazzhands @mastodonmigration @mariuszklimczak

BlueSky are a for-profit corporation backed by VC money.

Whenever this structure has been applied to online services, it has inevitably resulted in "enshittification" where initially-reasonable policies gradually spiral out of control into full-scale surveillance. The VC investor-owners will demand ever more growth, and eventually the only way to grow will be to screw users.

VC-funding is incompatible with respecting users in long term.

@FediTips @edward_jazzhands @mastodonmigration @mariuszklimczak this type of fear mongering and hand-wavy prophecies frankly undermine the whole message and merit of the mastodon model.

“We’re better because they are worse, believe me”.

@securescientist @FediTips @edward_jazzhands @mariuszklimczak

FediTips did not "fear monger" nor "handwave" they stated facts. Corporate websites need revenue to satisfy their investors. Revenue does not magically happen. They need to sell something to someone. If it is not in app ads it can only be your content and your personal data. In time it will likely be both. That's just facts.

If you are fine with this, that's cool, but that's the way it is.

@mastodonmigration @FediTips @edward_jazzhands @mariuszklimczak that’s just good’ol anti capitalist sentiment. Of course money has to come from somewhere, whether that requires to “screw users” by “disrespecting” them inevitably leading to a “full-scale surveillance” setup is prophetic fear mongering.

Ideology has always been myopic.

@securescientist @mastodonmigration @edward_jazzhands @mariuszklimczak

Money does have to come from somewhere, but covering costs and growing profits are two totally different things.

A lot of the essential infrastructure that for-profit activity depends on isn't itself for-profit. For example most roads are just funded to cover costs, they aren't growing profits or even making any profit at all.

@securescientist @mastodonmigration @FediTips @edward_jazzhands @mariuszklimczak I mean, Facebook and Google are great examples of this trajectory. They *used* to be more reasonable, but they kept chasing money at all costs.

@securescientist @FediTips @edward_jazzhands @mariuszklimczak

Luca. Not trying to be disrespectful here. But, rather than speak in generalities, please try to think about it from a business perspective. Initially money comes from investors, so they can offer free stuff. But investors only do this to attract users. Eventually the business must make money. So they must sell something. What do you think Bluesky will sell? Serious question. What are their options for making money?

@mastodonmigration @FediTips @edward_jazzhands @mariuszklimczak sure it will sell user information, to a degree or another, to become viable financially. Users need not be screwed and the platform needs not be a surveillance one for the model to be sustainable. Assuming it *must* be is ideology. I rebut the simplistic, dismissive assumption that it’s either mastodon or doom. I’m just not one for black and white arguments.

@securescientist @FediTips @edward_jazzhands @mariuszklimczak

'Black and white arguements'? Not sure what you mean. You just agreed they will sell your user information and you seem fine with that. So, what's the issue? FediTips entire point was that you and your data would become their product. If that works for you, cool. I guess you don't like their terminology, but that's how they and many others view this kind of surveillance capitalism, you just have a difference of opinion.

@mastodonmigration @FediTips @edward_jazzhands @mariuszklimczak perhaps bad English, sorry. Black and white as in either this was or that way, no way in between. I think it’s an expression in English too but I may be wrong.

@securescientist @FediTips @edward_jazzhands @mariuszklimczak

It is. Guess you mean that you don't think all surveillance capitalism is bad. In that, you are certainly in the majority, because most people willfully give away all their personal information.

Some of us here on Mastodon are particularly sensitive to the issue because of all the history of abuse. Also in the US we don't have GDPR so the government is not a protection from the worst abuses.

@mastodonmigration @edward_jazzhands @mariuszklimczak at the risk of seeming patronizing, have you read https://bsky.social/about/blog/7-05-2023-business-plan ? It’s vague, incomplete, and somewhat defeating, but it does set out a structure and some principles around which the business model will be built. And those do not go in the direction you give for granted. Perhaps you have access to better info than I do to be so conclusive, @FediTips & all.
Our Plan for a Sustainably Open Social Network - Bluesky

We've been exploring avenues of monetization other than traditional advertising, and have raised a seed round to support our mission and growth.

Bluesky

@securescientist @mastodonmigration @edward_jazzhands @mariuszklimczak

Whatever principles are set out are meaningless once the pressure is put on them to grow faster.

BlueSky is very reminiscent of Ello:

https://waxy.org/2024/01/the-quiet-death-of-ellos-big-dreams/

TL:DR:

"Despite their idealist manifesto and their Bill of Rights, I don’t believe they could ever truly be in partnership with their community once they were taking large amounts of venture funding. All of their ideals and big dreams were easily undone, even the legal restrictions they defined in their Public Benefit Corporation charter."

The Quiet Death of Ello's Big Dreams - Waxy.org

Ello launched in 2014 with big dreams, but the artsy social network suddenly shut down last year, deleting nine years of posts without warning. What happened?

Waxy.org

@securescientist @edward_jazzhands @mastodonmigration @mariuszklimczak

It's not "hand-wavy prophecies" or "fear mongering", it's just what has happened and will happen again with orgs that use this particular structure.

If you take investment money you are giving investors power over you. Investors, especially VCs, don't just want to cover costs, they want profit growth. In the online world, that inevitably leads to surveillance and "enshittification". Can you give an example otherwise?

@edward_jazzhands @mariuszklimczak

They don't need to gather that through the app though if they really are a decentralised network.

(But they are much more reasonable requirements though than Threads etc, yes!)

@mariuszklimczak @FediTips Some of the others get even more "fun" when you notice the "sensitive data" category popping up here and there.

@pstewart

Yeah... what exactly is that? 🤔 I tried looking at Apple's info page and it just describes it as "Sensitive Info". 😬

@FediTips Apple defines it on their developers' site: "racial or ethnic data, sexual orientation, pregnancy or childbirth information, disability, religious or philosophical beliefs, trade union membership, political opinion, genetic information, or biometric data."

@pstewart

Good grief... 😬

That is just dystopian. That kind of info could get people arrested (or worse) in countries with repressive regimes. 😞

@FediTips I'm not sure to understand from where that data comes from. Do you have the original link somewhere ?
@spokeek @FediTips These appear to be screenshots from Apple's app store. https://apps.apple.com/us/app/bluesky-social/id6444370199
‎Bluesky Social

‎Bluesky is THE NEW SOCIAL NETWORK for people who stay online and up-to-date. News, jokes, gaming, art, hobbies, and whatever you're into is happening here. Short text posts make for a quick read during coffee, an easy way to wind down the day, or a great way to get connected to your community. Follo…

App Store
@baralheia @FediTips Nice, wouldn't have known. Thank you a lot.

@spokeek @baralheia

Yup, they're all Apple app store screenshots taken today. For example if you search for instagram app store you will get a link to https://apps.apple.com/app/instagram/id389801252

‎Instagram

‎Little moments lead to big friendships. Share yours on Instagram. — From Meta Connect with friends, find other fans, and see what people around you are up to and into. Explore your interests and post what's going on, from your daily moments to life's highlights. Share what you’re up to and into:…

App Store
@spokeek @FediTips the Google play store has very similar data, but it looks differently. So my assumption is it's the apple app store

@FediTips

And is this also the case if one uses the service via browser rather than in the app?

@anarchademic

Yes, because the website will only want your login details and doesn't collect other info.

However, as @ekis says bear in mind that Mastodon (and all the other social networks listed) use a database system that the server owner may have access to. In theory a server owner could manually look directly at the database to view private messages, but this would be true on all these social networks.

@FediTips

This particular tidbit is not well known IMO.

@FediTips

Which official Fediverse agency has designated this app as “The official Mastodon app”? What does it mean to be “The official Mastodon app” and what distinguishes it from other Fediverse clients?


This Mastodon access software centricity is so outdated.

@FediTips

Isn't that a well known thing though? Most people here on Mastodon already know that Mastodon is privacy respecting, alongside most Fediverse apps. Don't get how thats a tip.

Also, they are operated by huge greedy companies, of course they'll collect data.

It's the sad truth.

@lunariansia

No, not everyone knows.

For example someone replied to this post as follows:

https://infosec.exchange/@SpaceLifeForm/113335684010093335

SpaceLifeForm (@[email protected])

@[email protected] This particular tidbit is not well known IMO.

Infosec Exchange

@FediTips

It SHOULD be common sense though, right?

@FediTips what fediverse apps do collect data? (Besides Threads of course)

@ch0ccyra1n

None that I'm aware of, but there are so many apps available that it's difficult to know about all of them.

Main thing is to check an app's app store privacy section before you install an app (which is where the info in this post came from).

@FediTips not to even mention every action you take becoming training material for an LLM, ready to be accidentally reproduced / hacked! 😨

@FediTips What's really amazing is that you don't need to use the official app. Unlike Reddit and Twitter/X that have killed off third-party support, the Fediverse can be accessed through numerous apps.

Decentralisation is the future!

@FediTips Question: how and who does the audit as to what kind of data being collected?
James Cridland (@[email protected])

@[email protected] A reminder that the App Privacy section in the Apple App Store is self-reported. Apple doesn’t appear to check, other than “providing resources” to help app developers “fill out this information accurately”. https://support.apple.com/en-us/102399

bne.social

@antdesros @AndikaCJ @james

The official Mastodon app is open source, outsiders with the necessary programming knowledge can see all of its workings at any time:

https://github.com/mastodon/mastodon-ios

https://github.com/mastodon/mastodon-android

If it was spying on people, it would be very easy for outsiders to spot it.

The same goes for most third party Mastodon apps as they are mostly open source too.

mastodon/mastodon-ios

Official iOS app for Mastodon. Contribute to mastodon/mastodon-ios development by creating an account on GitHub.

GitHub
@FediTips Twitter now automatically opts you in to using your data to train their LLM. And you cannot opt out, which is why many are moving over to Blue Sky.
@FediTips It seems to be that Bluesky is benign here, with diagnostics arguably being excusable, and the other ones just counting data submitted to the server (which Mastodon would then "collect", too)

@anselmschueler

It is worrying that BlueSky is already collecting data they don't need.

"(which Mastodon would then "collect", too)"

No, they wouldn't. The makers of Mastodon's software and the owners of Mastodon servers are totally separate things.

Most people are on third party Mastodon servers which have no connection to the makers of Mastodon's software or the official apps.

This is one of the points of decentralisation, to avoid having any kind of central control point.

@FediTips Right, that was my point. BlueSky is also technically decentralized and I am saying that maybe this data collection listed here is not by the app itself, but by the relevant server.
@FediTips I don't know if this is the case but I also don't see any reason to believe otherwise.

@anselmschueler

The reason to believe otherwise is to compare the entry for Mastodon and BlueSky.

According to their app store entries, Mastodon collects nothing, BlueSky collects something.

This is the point of my original post with its comparisons of screenshots from app stores.

@FediTips As I understand app developers are given some latitude in how they fill in these boxes, so what I was considering was the possibility that the BlueSky developers interpreted the requirements for this information differently.

@anselmschueler

Ahh okay... that's an interesting point. It would be good to have more info on that.

Claire Barnes (@clairefromclare.bsky.social)

A useful comparison of the privacy policies of various social network apps. Most collect a lot of personal data (you are the product): Mastodon and other Fediverse apps do not. Bluesky is much better than X, for now, but this may change: see 👇 https://social.growyourown.services/@FediTips/113335045675571157

Bluesky Social
@FediTips @nekerafa
@MonaApp tampouco recolecta ningún tipo de datos.