[secure]

The data collected for Google Public DNS is actually very reasonable. Have a look at https://developers.google.com/speed/public-dns/privacy.

I haven’t checked the other products, just wanted to point this out since people seem to assume worse than what’s actually happening (for Google Public DNS, at least).

[dualboot]

It's not just what they collect with a single service. It's the amount of clarity that comes from a linkage with their other collected data sets.

[delroth]

On that same web page:

> We don't correlate or combine information from our temporary or permanent logs with any personal information that you have provided Google for other services.

Of course, all of that is meaningless if you want to think that Google is lying in its privacy policies.

(Disclaimer: I work at Google, but not on 8888).

[russdpale]

Personally, if they cant prove it, it shouldn't be trusted. And in talking about proving it with the source code. The days of granting benefit of the doubt to these companies should be over. The onus of security should be on the providers proving it, not misplaced trust.

[delroth]

How does providing the source code help with proving trust? You don't know that the service is actually running the source code that was published.

If you're willing to believe that the service matches the published source code, why wouldn't you also be willing to believe that the service matches the published "specifications" (e.g. privacy policy)?

[jkaplowitz]

Do any providers you use meet this standard? A few bits of open source software have been subjected to credible public audits, but not most of those. For proprietary services, the detailed results of any audits are typically nonpublic.

This is nice in theory but would prevent you from sharing your data with any third-party services in practice beyond your personal circle of trusted acquaintances.

[JangoSteve]

To be fair, that's also what they said for the other services before they changed their minds.

[rhizome]

We don't correlate or combine information from our temporary or permanent logs with any personal information

I'd say that depends on what definition of "personal" they're using.

[kyrra]

https://policies.google.com/privacy/key-terms#toc-terms-pers...

"Personal information

This is information which you provide to us which personally identifies you, such as your name, email address or billing information, or other data which can be reasonably linked to such information by Google, such as information we associate with your Google account."

[rhizome]

OK, but that just brings up "other data."