Unroll.me

#1

Post by nav » Mon, Apr 24, 2017, 12:28 PM UTC

Unroll.me
daringfireball.net

Re: Unroll.me

#2

Post by HappyTypist » Mon, Apr 24, 2017, 1:13 PM UTC

I looked on their website, Frequently Asked Questions, and even hovered over text like "Unroll.me is a free service" in order to find a disclosure.

I could not find ANY disclosures whatsoever.

Nowhere does Unroll.me disclose that they sell your emails to the highest bidder.

I wish we had a FTC that could bankrupt Unroll.me's previous and current founders and executives. Absolutely despicable behaviour.

Re: Unroll.me

#3

Post by jbmorgado » Mon, Apr 24, 2017, 1:14 PM UTC

If you have ever used the service, it probably has still almost full access to your gmail account (I noticed it had in mine).

You can remove its authorisations at: https://myaccount.google.com/permissions

Re: Unroll.me

#4

Post by nhangen » Mon, Apr 24, 2017, 1:14 PM UTC

I don't find the practice ethical at all, but that said, don't understand why anyone would be surprised by this. Users are almost always the product.

Seems like the Gruber version of outrage porn.

Re: Unroll.me

#5

Post by eganist » Mon, Apr 24, 2017, 1:14 PM UTC

Basically a repost of https://news.ycombinator.com/item?id=14180463

Had to search my inbox as a sanity check to make sure I hadn't signed up for the service. Turns out I hadn't, but it was pitched on Product Hunt both in April 2015 and May 2016.

I'm hoping at least security folks made the mental connection that signing up meant compromising your personal emails. That's the single reason I didn't bother.

Re: Unroll.me

#6

Post by JumpCrisscross » Mon, Apr 24, 2017, 1:17 PM UTC

eganist wrote: post #5

Basically a repost of https://news.ycombinator.com/item?id=14180463 Had to search my inbox as a sanity check to make sure I hadn't signed up for the service. Turns out I hadn't, but it was pitched on Product Hunt both in April 2015 and May 2016. I'm hoping at least security folks made the mental connection that signing up meant compromising your personal emails. That's the single reason I didn't bother.

> signing up meant compromising your personal emails

Assuming someone only signed up with their personal address. Curious how many .gov email addresses are in their database...

Re: Unroll.me

#7

Post by eganist » Mon, Apr 24, 2017, 1:19 PM UTC

HappyTypist wrote: post #2

I looked on their website, Frequently Asked Questions, and even hovered over text like "Unroll.me is a free service" in order to find a disclosure. I could not find ANY disclosures whatsoever. Nowhere does Unroll.me disclose that they sell your emails to the highest bidder. I wish we had a FTC that could bankrupt Unroll.me's previous and current founders and executives. Absolutely despicable behaviour.

Terms of Service pointed me to their Privacy Policy.

Privacy Policy indicated the following:

> We also collect non-personal information − data in a form that does not permit direct association with any specific individual. We may collect, use, transfer, sell, and disclose non-personal information for any purpose. For example, when you use our services, we may collect data from and about the “commercial electronic mail messages” and “transactional or relationship messages” (as such terms are defined in the CAN-SPAM Act (15 U.S.C. 7702 et. seq.) that are sent to your email accounts. We collect such commercial transactional messages so that we can better understand the behavior of the senders of such messages, and better understand our customer behavior and improve our products, services, and advertising. We may disclose, distribute, transfer, and sell such messages and the data that we collect from or in connection with such messages; provided, however, if we do disclose such messages or data, all personal information contained in such messages will be removed prior to any such disclosure.

Damningly, if they're collecting and disclosing transaction details, they're also technically conveying personal information given the ease by which identities can be reversed from this sort of data.

Re: Unroll.me

#8

Post by CameronBanga » Mon, Apr 24, 2017, 1:20 PM UTC

JumpCrisscross wrote: post #6

eganist wrote: post #5

Basically a repost of https://news.ycombinator.com/item?id=14180463 Had to search my inbox as a sanity check to make sure I hadn't signed up for the service. Turns out I hadn't, but it was pitched on Product Hunt both in April 2015 and May 2016. I'm hoping at least security folks made the mental connection that signing up meant compromising your personal emails. That's the single reason I didn't bother.

> signing up meant compromising your personal emails Assuming someone only signed up with their personal address. Curious how many .gov email addresses are in their database...

It only works with major emails services like Gmail, Yahoo, etc, I believe.

Re: Unroll.me

#9

Post by accountyaccount » Mon, Apr 24, 2017, 1:22 PM UTC

Typically I'd expect this data to be anonymized, but when it's your entire inbox how anonymous can it really be?

Re: Unroll.me

#10

Post by Freak_NL » Mon, Apr 24, 2017, 1:22 PM UTC

eganist wrote: post #5

Basically a repost of https://news.ycombinator.com/item?id=14180463 Had to search my inbox as a sanity check to make sure I hadn't signed up for the service. Turns out I hadn't, but it was pitched on Product Hunt both in April 2015 and May 2016. I'm hoping at least security folks made the mental connection that signing up meant compromising your personal emails. That's the single reason I didn't bother.

> Had to search my inbox as a sanity check to make sure I hadn't signed up for the service.

Wouldn't you remember granting a third party full access to your email inbox? That doesn't seem like a trivial decision to make.