Whenever you use the internet, you leave behind a data trail - a kind of digital footprint. Detectives might use this trail to trace your movements if you are suspected of an offence, while companies might use the data to target you for particular products and services. However, tracing or stealing data is also something contemporary criminals are doing, in order to commit fraud and identity theft, or to isolate and target victims for other types of crime.

It is important to be mindful of security at all times when you use the internet. Once data is released into the world, there is little you can do to get it back. If you feel your security might have been compromised, change your account details and passwords for the apps and sites you use immediately. To protect yourself in the future, make sure you only use secure sites that encrypt your data as standard, and which have policies not to sell data on.

Facebook and WhatsApp: an example of poor data sharing practices

One recent case in the news is that of messaging application WhatsApp, which was acquired in 2014 by social media giant Facebook. At the time of the buyout, the terms and services for WhatsApp were updated to reflect the new data-sharing arrangement with parent company Facebook. Essentially, Facebook would gain access to any and all data relating to WhatsApp use. This happened despite founder Jan Koum stating publicly before the deal that WhatsApp and Facebook privacy policies would remain separate - it caused a major backlash from users of both sites.

Facebook and WhatsApp were forced to suspend data sharing because of consumer outrage. The Information Commissioner’s Office (ICO) then engaged in a two-year investigation of the sharing policy. That investigation has concluded as of March 2018, with the data sharing practice declared as illegal under existing data protection laws. Those laws will expire in May when the EU’s General Data Protection Regulation (GDPR) directive comes into effect. 

Following the ICO’s ruling, WhatsApp has signed a public pledge not to share data with its parent company, unless it can do so under full GDPR compliance. However, it is possible that data sharing will recommence in the future - and this could be bad news for consumers.

Why app data-sharing is dangerous for users

Identity fraud and data correlation

Many of us use mobile and web applications in our everyday lives. These apps often require us to input personal data. This can include contact and identification details, health and fitness information, likes and dislikes, retail preferences, daily habits and routines and much more. Though these small bits of information say very little about us on their own, when they are combined a very detailed picture of your life can be built up. 

This information is very useful for criminals who may target you based on your data. A recent example in the UK is a spate of high-value bike thefts, linked to social media and exercise app use. Thieves are searching for users of expensive bikes through social media, then using Strava, a route-tracking app, to find that user’s routes and target their bike when it is not in use. Joining the data dots can quickly expose a person’s vulnerabilities.

Data sets can even include stolen information, such as passwords and login details that were not protected by encryption, and were subsequently hacked and distributed. When hackers are able to connect your passwords with your personal details, they can gain access to a wide number of the apps and services you use.

Third-party data sharing

When you share your personal data with a company, you are placing your trust in that company. You give them the information you feel comfortable sharing, you presume that data will stay safe with that company. However, you must always check the terms and conditions before sharing any personal information online. Often, using a web app means agreeing to the third-party use of shared data - this is where privacy and security tend to slip.

You may trust the company you opt to use, but how about their suppliers and marketing partners? Unless you vet every third-party with a connection to that business, you are signing over personal data for free use that you cannot control. Those third parties may not use encryption to protect data or use secure servers to resist hacking. If a third-party is hacked, it is your data that could be stolen and you may not even know it has happened.

1stCallDetectives: respecting your privacy

1stCallDetectives values your right to privacy and security when you use the internet. Our own site is protected by our new encryption certificate, guaranteeing discretion. Our private investigation service is committed to client privacy and our internet security specialists ensure that your data is protected from hacking, never shared and never disclosed to third parties.

If you are concerned about identity fraud and online data security, our investigators may be able to help. We can investigate companies for illegal use of your data, and use technological surveillance to track offenders engaged in criminal activity online. For an investigation service you can rely on, call 1stCallDetectives on 0845 520 4121.