May 03, 2014 16:07
Dear tech companies. It frustrates me that even when I have some trust in your respect of privacy, your own attempts to convince the public is often based on obviously (for people working on IT security, at least) false statements. Yes, it's much to ask people to trust your good will only, but if there's nothing preventing you from breaching the privacy, don't claim you cannot do it. Too often the formula of such statements is "We have such and such solution in place, that makes it impossible for us to..." Now, if you yourself have complete control of that prevention solution, including disabling it when ever convenient for you, how does it makes it impossible for you to breach the privacy? Not to mention that users have only your word that such an solution exist in the first place. If you ever have hold of the data in unencrypted form, don't claim you cannot read it.
For casual reader I should note that I'm not claiming there's no privacy anywhere. There exist solutions where the privacy breach prevention bit is not controlled by the company providing the service, usually in the form of giving them only encrypted data. Also, even these internal solutions provide a lot of security against unauthorized access of the data by personnel of the companies - any breach would be made by some of the select individuals or as a company, not by any cleaning lady.