Google does not sell your personal data. Its worse
Tags: webdev, discuss
Published: 2023-04-18 14:44:03

Google does not sell your data. Not exactly…

In everyday language, selling is giving something away in exchange for something else of value. This is close enough to most legal definitions of sale. And in this sense, it is true enough that Google does not sell your data. Google is not a data broker: a company cannot pay Google to buy emails or IP addresses. But when it comes to privacy, **not selling your data is not enough**.

Google monetizes personal data in other ways, some of which involve disclosing personal data to third parties. One of those ways is **real-time bidding system** (RTB) that powers Google Adsense.

In a nutshell, a website makes advertising spaces available for advertisers through Google Adsense’s intermediation. Several advertisers bid for the same advertising spaces whenever a visitor loads a page in an automated real-time auction. This real-time bid involves **disclosing personal data to advertisers** to cater their ads better.

For instance, let’s say Google figures out that you like guitars- whether through Google Analytics, your Google Maps data, your Google searches, etc. When you visit a website using Google Adsense, a real-time bid for advertising spaces begins, and Google tells advertisers that you like guitars. This allows advertisers to figure out how much an advertising space is worth to them and decide what kind of ad to serve you (this visitor likes guitars, so let’s show them guitars instead of pianos or drums).

This sounds innocuous enough, but it really isn’t. Profiling is based on the collection of **thousands of data points about you**, including your web searches, the websites you visited, and your location data. This allows for accurate predictions about your personality, behavior, and much more. You may not see ads for medication or sex toys, but that does not mean Google cannot take an educated guess about your medical conditions or sexual inclinations based on the data they have.

If you surf the Internet, chances are your personal data are auctioned dozens, if not hundreds, of times a day. Your data are disclosed to all advertisers participating in each auction- not just the winner. In fact, some **data brokers** participate in the auctions just to gather as much data as possible. This allows them to profile you and sell the information to the highest bidder because **Google has no control over what happens to your data after they are disclosed**.

This happens to the data of millions of people every day, as explained in [this document](https://www.iccl.ie/wp-content/uploads/2022/05/Mass-data-breach-of-Europe-and-US-data-1.pdf) by the Irish Council of Civil Liberties.

But **it is not a sale**, because no one pays for the data. Advertisers buy advertising spaces, and Google gets its cut. Personal data are disclosed in the process, but they are not the goods for sale.

In a way, Google can truthfully claim that it [doesn’t sell your data](https://about.google/intl/en-GB/how-our-business-works/). But from a privacy perspective, it does not matter whether RTB is a sale or not.

To be clear: Google is not the only company doing this. RTB protocols are standard for all major players in the web advertising market. But Google is the dominant player in this market, so it holds a large share of the responsibility. And by insisting on the notion of sale in its disingenuous statements, **the company is intentionally diverting the public’s attention**

The privacy issues with Google’s products don’t end here- far from it. Android devices track users by default with advertising IDs (which is invasive and [probably illegal](https://www.theregister.com/2021/04/07/max_schrems_google_complaint/) under the GDPR). Android also [tracks all calls and messages](https://www.theregister.com/2022/03/21/google_messages_gdpr/) without providing any information about the tracking, asking for consent, or even offering an opt-out. And we recently explained how the company recently [changed the url for Google Maps](https://www.simpleanalytics.com/blog/google-changed-google-maps-url-your-location-data-is-no-longer-safe) to extend location permission to the entire [https://www.google.com](https://www.google.com/) domain on their browsers.

Google is constantly looking for ways to collect as much data as possible and turn it into as much money as possible.

So does Google sell your data? I will leave that open to interpretation.

Why do I care?

I believe in an independent web that is friendly to website visitors. This is the reason I built a privacy-friendly Google Analytics alternative that collect no personal data and does not use trackers or cookies. If this resonates with you, feel free to [give it a try](http://simpleanalytics.com/).

#