Last week, we reported that a marketing company called Cox Media Group Local Solutions claimed they could listen to users’ conversations through phones and other devices and sold that information to others. Apple has contacted iMore to clarify that this would be a “clear violation’ of its App Store guidelines.
As we said in our original report, Apple is known to take its privacy very seriously but CMG didn’t make it clear how it gleams data and what from, other than nebulously stating it comes from ‘smartphones, smart TVs, and other devices’
In the FAQ at the bottom of CMG Local Solution’s Blog, before it was unceremoniously removed, it stated “Our technology is on the cutting edge of voice data processing. We can identify buyers based on casual conversations in real-time. It may seem like black magic, but it’s not-it’s AI. The growing ability to access microphone data on devices like smartphones and tablets enables our technology partner to aggregate and analyze voice data during pre-purchase conversations.”
In response to that claim, Apple has told iMore that apps ‘must request explicit user consent’, as is stated in the App Store Guidelines, in order to record or log user activity through a device camera or microphone. Data collected and stored must be made aware to the user, can be retracted at any time, and must be in line with current GDPR regulations.
Consideration – iMore’s take
Many iMore readers may not be aware of this but, in a life before writing here, I pursued a career in law and specifically studied the GDPR as part of the degree I proudly hang up in a wall back in my hometown. Something that is important to note is that, in a contract like that you sign with new apps, consideration is given on both sides to what you are getting from the interaction and what you are giving.
If you are not made aware of what you are signing specifically, it is not considered a valid contract, which is why Apple uses the term ‘explicit user consent’. You can not sign away rights to something hidden in a contract that you were not made aware of. Apple told iMore that ‘No app can access the microphone or camera without your permission’ and clarified that an orange indicator displays when they are on, partially for this reason. You can technically give away your right to that information if made aware of that choice and if the data is handled responsibly so CMG could be reliant on people actively giving information made through recordings or videos to it.
This is not to say that there aren’t legal ways to access information in other ways, especially that which you give it through search engines, smart speakers, and more. Siri itself does not tie your data to you and only uses information to improve the device. This also makes no mention of any other phone manufacturers, who will also have processes in place to stop activity like this.
Apple also highlighted many of the privacy protections built into its iPhone with iOS, including permissions required for apps that want to track you, and its App Privacy report which shows how often your microphone, photos, camera, and contacts have been accessed over the last seven days. Apple also told iMore that any data processed or stored on servers is ”associated with a random identifier – a long string of letters and numbers,” which means it can’t be traced back to you.
CMG Local Solutions has made claims suggesting it either has a way around traditional processes in other phones or is potentially misleading clients as to how effective its marketing information is. CMG Local Solutions was pretty vague about how its data capture worked but it claims to work with partners like Amazon, Google, and Microsoft. This is not an indication of guilt from any of the named companies but we’re hoping the specific use of this data will be made clear further down the line.