Live data from Hacker News

How to Force Facebook into Handing Over their Secret Tracking Data

europe-v-facebook.org

31–40 of 107 posts

Re: How to Force Facebook into Handing Over their Secret Tracking Data

#31
post #29

Earlier quoted context omitted.

You may be surprised that many (at a guess, maybe most?) companies/websites actually consider a delete function to be changing a 'deleted' flag to 1 in a database. The data persists, but is no longer shown. I would also make a very big assumption that the only companies who wouldn't do this are those run by developers or other people who have had experience implementing that sort of system. There's nothing bosses lov…

This is how I usually implement delete. Deleting a record can have many cascading effects and there is no possibility for undoing it if it was an error. I think this is a pretty standard way of doing it.

I agree with the fact a hard delete may have unintended effects, even in the best design, but in my ideal world I'd rather make allowances for that than simply offer my users the illusion I'm deleting their data.

I think that may be a view shared between developers who care about ethical practices, where our personal ideals and how we think we should respect the user takes precedence over the data collection and profit motive.

I think it's important to remember websites are dealing with actual people, who aren't a new commodity to be exploited for capital gain. Who aren't little mines full of precious data ready to extract at any cost.

Of course, none of this really matters. Whether you delete something or not, it will be routinely stored, over and over again, on some backup server. It's there forever.

Re: How to Force Facebook into Handing Over their Secret Tracking Data

#32
post #30

Earlier quoted context omitted.

You may be surprised that many (at a guess, maybe most?) companies/websites actually consider a delete function to be changing a 'deleted' flag to 1 in a database. The data persists, but is no longer shown. I would also make a very big assumption that the only companies who wouldn't do this are those run by developers or other people who have had experience implementing that sort of system. There's nothing bosses lov…

I think you're close, but missing something: The companies who wouldn't do this are run by developers or other people who don't interact much with the actual users . Irreversible actions are horrible UX, and any irreversible action in a commonly used area of the app will make a large number of people steaming mad on a daily basis — guaranteed. People who will blithely click "Delete" — and then click "Yes" even though…

I highly doubt Facebook went with the delete flag because of the customer service perspective.

Re: How to Force Facebook into Handing Over their Secret Tracking Data

#33

So let's say I launch TrackMyEatingHabits.com. If a user that happens to live in the UK signs up, they can send me a request for all of their data and I have to comply, right? So this means that when I design the software for TrackMyEatingHabits.com, I should also be mindful to have a process (and data model) that makes it easy to locate this user data quickly, right? Also, I should have in place processes to verify…

Yes, please do that (limiting your market to the U.S.).

Excuse me, there are a couple of entire continents getting tired of that! Or should I assume you talked out of the same frustration?

Re: How to Force Facebook into Handing Over their Secret Tracking Data

#35
post #30

Earlier quoted context omitted.

You may be surprised that many (at a guess, maybe most?) companies/websites actually consider a delete function to be changing a 'deleted' flag to 1 in a database. The data persists, but is no longer shown. I would also make a very big assumption that the only companies who wouldn't do this are those run by developers or other people who have had experience implementing that sort of system. There's nothing bosses lov…

I think you're close, but missing something: The companies who wouldn't do this are run by developers or other people who don't interact much with the actual users . Irreversible actions are horrible UX, and any irreversible action in a commonly used area of the app will make a large number of people steaming mad on a daily basis — guaranteed. People who will blithely click "Delete" — and then click "Yes" even though…

I agree. I've already just replied to another reply on this but dealt more with the ethics of the matter.

What I would actually implement is something akin to the recycle bin in an OS. Flag something as deleted, ensuring it's no longer published in whatever form on the website. Optionally, delete it properly after a set period of time, or otherwise allow the users to manually perform that action.

In addition to that, log the delete actions along with the IDs of the deleted items. So if after all that the user regrets it and files a complaint, you can trawl through your backups to restore it.

Irreversible actions in the UI are bad. Having no choice but to tell the customer tough luck is bad. Deceiving the user is also bad.

Of course I'll concede my ideals are more compatible with the concept of deleting an entire user account, for example, as opposed to removing individual items associated with. But I don't think everyone else's intents are as pure as yours.

Re: How to Force Facebook into Handing Over their Secret Tracking Data

#36
post #34

Facebook knows too much about us, let's all send them a scanned copy of our passport!

Whether they do it now or not, but a few years ago they actually demanded that info (or some other form of valid ID such as your driving license) if you wanted to start a page and add music to it.

I was in a band back then. Set up the page, tried to add my own band's music, and was told I had to provide valid ID first.

Re: How to Force Facebook into Handing Over their Secret Tracking Data

#38
post #4

Is there a similar law in the United States? If so, I've never heard of it.

No, there's no general right-to-data law. There are general right-to- government -data laws, so you can e.g. request your own FBI record. But private businesses don't normally have to disclose what data they collect on you. There are a few exceptions for specific areas; for example, the credit-ratings agencies have to provide you with a copy of your credit report, and in some cases an employer may be required to prov…

So for those of us that live in the US, is it not possible for us to request to have the data that Facebook stores about us???

Related (well, maybe): You can easily download a copy of your Facebook data no matter where you are located, by logging in and clicking "Account Settings" > "Download a copy of your Facebook data". This will include all things like messages, pictures, etc., but I am positive that it isn't nearly as in depth as what is outlined in that article.

Re: How to Force Facebook into Handing Over their Secret Tracking Data

#40

So let's say I launch TrackMyEatingHabits.com. If a user that happens to live in the UK signs up, they can send me a request for all of their data and I have to comply, right? So this means that when I design the software for TrackMyEatingHabits.com, I should also be mindful to have a process (and data model) that makes it easy to locate this user data quickly, right? Also, I should have in place processes to verify…

I work for a european social network. I helped make a self service page, where users can view their info. However, we only some basic the information that is easily accessible for us in our databases.

So far no one send request for all their access log data, but that would mean, that we would have to go though billions of entries.

Actually not a lot of people request their information anyway. It's sill better then the software patent situtation in the use.

Post reply on HN