I love Google. With all the great services they offer, many of which I use, I don’t know what I’d do without them. But sometimes I wonder if we might be trusting them with a little too much personal information by using all their different products. I usually stay signed in to my Google accout all day long, using various Google services as I need them.
Here’s a list of the information about me they have access to: I use Gmail for all my email needs (I highly recommend Gmail as the best web-based email service out there), so all my email is stored with them. I use Google Analytics and Webmaster Tools for this blog, so they know that I operate this site and they know details about the traffic I get. They know all the sites I subscribe to via RSS or Atom feeds in Google Reader. They know who my friends are from Gmail/Google talk. They have the documents I’ve written or received in Google Docs, and they have my schedule in Google Calendar (although I don’t always use GCal and Google Docs, I sometimes do and they have the stuff I’ve put there). And while I’m logged in to my Google account for all those services, they also can see what searches I’ve done in Google web search, Google Maps, YouTube, Google Images, Google Blog search, and just about any other things I’ve done through Google.
For right now, it’s very unlikely that people at Google pay any attention to this information. They may have all my email on their servers (as would any email service), they know who my contacts are, what I search for while I’m signed in, and all that stuff, but right now all they claim to do with it is scan through it to provide relevent advertisements alongside some services. Other than that, our information is pretty much just sitting on their servers.
But what would happen if Google started going through this information? Already, they reserve the right to release some information when required by law. They were recently asked to show server logs for their YouTube video sharing service in the lawsuit with Viacom. Those logs, according to Google, contain some information that is potentially personally identifiable, which is why they asked (and were allowed) to remove the irrelevant personal information.
Suppose one day, in a future case, the personal information they have is no longer irrelevent? The information they have could be used to catch criminals who used the Internet as a tool in their crime, but it might be used to do some less justified things as time goes on. Catching major criminals could evolve into catching minor criminals, which could evolve into just catching liars and sleezy sites. I could just see the next “innovative” service from Google, Google Lie Detector, where you enter someone’s Google account name and something they said (or might say) to get an estimate of the probability it’s true. Something like that, although Google might not have enough information to do it now, would probably be possible in the future as we trust Google with more information. Of course, it would not be in compliance with their Privacy Policy to do something like that, but check out the last paragraph of the current policy:
Please note that this Privacy Policy may change from time to time. We will not reduce your rights under this Policy without your explicit consent, and we expect most such changes will be minor. Regardless, we will post any Policy changes on this page and, if the changes are significant, we will provide a more prominent notice (including, for certain services, email notification of Policy changes). Each version of this Policy will be identified at the top of the page by its effective date, and we will also keep prior versions of this Privacy Policy in an archive for your review.
Okay, so the privacy page will change sometimes, and if they consider it “significant”, then Google will provide a more prominent notification. But that could also change, right? If you look at previous versions of their privacy policy, you’ll notice that it has changed quite a bit. And check this out from the Gmail privacy policy:
You may organize or delete your messages through your Gmail account or terminate your account through the Google Account section of Gmail settings. Such deletions or terminations will take immediate effect in your account view. Residual copies of deleted messages and accounts may take up to 60 days to be deleted from our active servers and may remain in our offline backup systems.
So basically, anything you delete from Gmail, while disappearing from your email list and freeing up that storage space in your account, may not be deleted from their servers immediately and may never be permanently deleted from their backups. Similar policies apply to Google Calendar, Google Docs, and other Google services.
Google really is gaining a lot of information and power, and fast! Even though right now they don’t do much with our information, keep in mind that they do have a lot of it, and there really is a lot they could do with it in the future. Google might even become a government agency or a sort of quasi government/government sponsored enterprise like Fanny Mae and Freddie Mac, possible helping the CIA or FBI with intelligence and investigations. But with Google having some of the best products out there, and mostly for free, I don’t plan on switching any time soon just to make sure no one company has too much information about me. But I am going to keep it in the back of my head the next time I do a search or add a feed to Google Reader or send an email or IM in Gmail, “How would I feel if somebody was behind me, watching me perform that action?”. Because with all the power they have, and the fact that I’m signed in to my Google account most of the time, it wouldn’t be that hard for Google to trace my actions back to me.