Earlier quoted context omitted.
> Privacy friendly Does this mean that a user can use their identity on two separate sites, and those two sites can't collude to build a shared profile of the user, without the user's permission? Does the user have to choose a specific server to be involved in all their identity interactions? If the server stops working, does the user lose their identity? Also, is it possible to create an account without a phone (or…
> Does this mean that a user can use their identity on two separate sites, and those two sites can't collude to build a shared profile of the user, without the user's permission? That's precisely what it means. User IDs will be unique for each site and I'm hoping to anonymize email addresses as well, similar to what Apple has done for "Sign in with Apple". Some companies might be required by law to collect some PII b…
> [companies'] needs will be vetted before.
Is the plan that a single entity offering this centralized product will control not just which users are allowed to have identities, but which companies are allowed to access users' IDs? Presumably there is a somewhat costly process to vetting companies and their requirements, so would companies pay a fixed amount to cover this vetting process, or pay more based on the level of personal information they hoped to receive from users?
> the prospect of decentralized, verified identities is also very interesting.
What type of verification do you imagine being necessary or available for user identities?
> The current product is in the form of an app so you will need a phone but you won't need a phone number (or SIM).
Are there any technologies specific to phones that mean this couldn't run as a web app instead?
> My current system assumes one identity per person but it's fully possible to have multiple devices which acts as that identity.
So if you can install multiple copies of the app on your (Android) phone, you could have multiple identities on the same device?