Recently, as many people know, there was a little flurry over the latest version of iTunes and its Ministore feature. It took off on the 11th when Boing Boing reported that
A new version of Apple's iTunes for Mac appears to communicate information about every song you play to Apple, and it's not clear if there's any way to turn this off, nor what Apple's privacy policy is on this information.... iTunes [6.0.2] had a new pane in the main window -- the "Mini-Store" which showed albums and tracks for sale by the artist whose song was presently playing.
The story broke earlier in the day on since1968. Some of the reactions to the feature were easily predictable: privacy advocates protested; others have defended Apple specifically; and a very few have taken the attitude that computers are dangerous places, and if you're not prepared to defend yourself, too bad. As the debate over it progressed, it struck me that there were a couple interesting things emerging from it.
One was the character of the objections to the service. Some people complained about the fact that iTunes was collecting information about people were listening to-- indeed, what songs they were clicking on. A small number of people complained that the service wasn't very good, and that the recommendations were kind of unsurprising. But many people didn't object so much to the idea of having a recommendations system built into iTunes, but that it turned itself on without first obtaining the user's permission.
In other words, the debate wasn't focused exclusively around the fact that information was being collected; it was the conditions under which it was gathered, and the quality of the service. For some, the failure to disclose is the bigger of the two problems. Rob Griffith's piece in Macworld is illustrative:
Yesterday, Apple’s iTunes 6.0.2 update was released, and offered these features, according to the Read Me:
iTunes 6.0.2 includes stability and performance improvements over iTunes 6.0.1.
What it also offered, but didn’t bother to disclose, was the addition of a bit of potential spyware to the iTunes interface. As reported originally on since1968.com, and then followed-up on boingboing and other sites, the new iTunes MiniStore, which appears directly below the song list area in the main iTunes window, watches what you click on in iTunes and sends that information across the Web to a remote server. When you double-click a song to play in your Library or playlists, the display in the mini-store changes to reflect ‘matches’ based on what’s been selected, as seen below....
[T]his isn’t about the MiniStore itself. It’s about Apple’s attitude in rolling this change out to the millions of iTunes users, without as much as a peep about what’s going on behind the scenes.
No company, even one I admire as much as Apple (I did spend nearly five years of my life working there), should start transmitting personal data over the Internet without my explicit permission and a clear explanation of how it’s being used. In addition, if a company is collecting this information, I have a right to know exactly what’s being collected, and what the company plans on doing with my personal information.
"[A]lso offered, but didn’t bother to disclose:" as I read it, the non-disclosure is where things go wrong.
Another commenter drew an interesting distinction when they wrote,
When iTunes reports back to base what you’re playing it’s evil. When Last.FM reports back what you’re playing it’s really neat.
Last.FM is a service that collects this data and uses it to construct recommendations, and to identify people whose musical tastes are similar to yours. In other words, it's equal parts recommendation system and social software.
The comparison is noteworthy. First, Last.FM a service that you sign up for: you register an identity, download some software onto your computer, and activate the software. It's impossible to accidentally be part of it. Second, users get something out of it: the chance to find out about music that they might not otherwise hear, and to find out about people who share their tastes. Third, the service doesn't tie recommendations to sales in a straightforward way: in other words, it's not gathering information about you in order to more effectively sell you stuff.
One other notable aspect of the l'affaire iTunes was how quickly users figured out what was going on. By the end of the 11th, so far as I can tell, people had figured out what information iTunes was sending out; when it sent it out; and where the information was going.
So what does this all tell us?
Recommendations and social software-like services are going to have an element of transparency, whether you like it or not. For companies, until there's a magic communications technology that makes it possible for computers to send information without users finding out about it-- which these days basically means something akin to telepathy-- it's worth assuming that people will find out what you're doing. (The same rule will probably hold true for RFID, which communicates wirelessly.)
For users, this means knowing that a service you sign up for will be gathering information about you; the question is whether you what you get out of the deal makes that worthwhile. After all, people make these bargains all the time, even if they don't think about them in quite this way. There's a piece of software that reads every single e-mail message I get, even before I see it. Sounds scary, right? It's called a spam filter. There's also a company that knows every single thing I've bought with my credit card; it's called my credit card company, and one reason they gather that information is to prevent malicious use of credit cards. In each case, the trade of surveillance for additional security feels worthwhile.
But such exchanges are going to become more a feature of our lives online, as more companies try to exploit the value of recommendation services, as more software is built with the assumption that you're always online (are there any Apple dashboard widgets that work if you're not on the Web?), and as more people discover the virtues of being always connected. Trading privacy is, in a sense, implicit in a move to a more pervasive, always-on, social software-enhanced world; the challenge at this point may be to understand what you're getting into, and to pressure developers to design these services in ways that minimize the downsides.
(This leaves unanswered a deeper question: whether the preservation of this kind of information-- in the form of log files, giant databases, etc.-- itself constitutes a problem. As Slate recently commented about the DOJ-Google fight, "however brave Google's current stance may be, the legal debate over Google's compliance misses the deeper and more urgent point: By keeping every search ever made on file, the search-engine companies are helping create the problem in the first place.")
The controversy also suggests that opt out should be the default. Apple has released another version of iTunes that asks people if they want to use the service, and informs them that it can be turned off; once that came out, the controversy pretty much disappeared. Offer people the opportunity to sign up, but don't just do it and force them figure out how to disable the service later.
Technorati Tags: itunes, pervasive computing, privacy, social software, ubicomp, Web 2.0
Recent Comments