[bthdonohue]

I read HN regularly, but I'm pretty much a lurker on all social channels. When there's a conversation relevant to me or the products I work on, I like to jump in to represent the relevant company or products.

With respect to follow ups, I usually respond and move on to other things. I do my best to be open and transparent in online communities like these.

Moving onto your privacy concerns there are two things I'd like to say...

* Instapaper has always done hard deletes of user data when you delete articles or your account, it's been done that way since the Marco days.

* We have never monetized using user data, or developed any type of special targeted advertising for Instapaper.

[thinkingemote]

"We have never" does not mean "we will never" does it? The legal terms doesn't seem to preclude it from happening. Most companies don't have agreements with data orgs until they have the juicy data. It's easy to say "we probably won't sell it" until the board sees the value of the accrued data in a couple of years. instapaper could make it more explicit that it's not going to happen in the terms rather than social media posts by an employee.

[throwawaymath]

1. If Instapaper "hard deletes" user data when a user deletes their account, what precisely does the License Grant language mean when it states Instapaper has a "worldwide, non-exclusive, perpetual, royalty-free, fully paid, sublicensable and transferable license" to the User Content "including after your termination of your Account or the Services."? This is from "Instapaper Application License", section (a) of the Instapaper Terms of Service [1].

2. You've just said, "We have never monetized using user data, or developed any type of special targeted advertising for Instapaper." How is this statement congruent with paragraph 3 of "The Way We Use Information" in the Instapaper Privacy Policy [2]? Quoting:

- We may tell an advertiser or publisher that X number of people visited a certain area on our website

- We may tell an advertiser or publisher that X number of people bookmarked Z stories from a particular site or topic.

I'm going to be blunt with you, Brian: I don't believe what you're saying to me right now. At best I believe you're stating things which are superficially true but skating around the spirit of people's intent when they ask about privacy policies and how user data is being used.

Unless you have a fantastic answer for these two questions, I don't see how what you've just said is reconcilable with your privacy policy or terms of service. Literally "selling" user data is not the only way in which user data is monetized. Monetizing user data by providing derivative or curated analytics pertaining to that data is also substantial monetization of that user data. If advertisers developed their own special targeting for Instapaper users on or off the Instapaper platform based on the data you shared with them, then as a matter of fact yes, you did help in developing specialized targeting for advertisements.

To summarize thus far: you have effectively given me a non-answer, in consideration of the statements on Instapaper's TOS and Privacy Policy. And despite taking the time to respond to my comment (presumably because I challenged you directly), you have not responded to the parent commenter who originally asked you the question that started this thread.

EDIT: I'm not sure what's triggering these downvotes, but if someone downvoting has a substantial refutation or insight, it would be nice if you shared with the class instead of just pressing a button. As it stands Brian has not responded to the substance of my point, and it seems virtually self-evident according to the Privacy Policy that Instapaper monetizes user data. It's not much of a leap from there to assume that this revenue was no longer worth it for Pinterest after GDPR came into effect.

__________________________

1. https://www.instapaper.com/terms

2. https://www.instapaper.com/privacy

[comex]

Your quotes from the privacy policy do not describe “targeted advertising”. Indeed, the section you quoted from has this preamble:

> We use non-identifying and aggregate information to better design Instapaper, to suggest popular content to users, and to share with advertisers and publishers.

and this afterwards:

> When information is used in this or a similar manner, we do not disclose anything that could be used to identify the individuals on whom the information is based.

I suppose using aggregate data in that manner could technically be described as “monetiz[ing] using user data”, but it’s not the type of activity most people are worried about (nor, incidentally, something that would implicate the GDPR).

As for the ToS license grant, it’s presumably the type of cover-your-ass wording lawyers always put into those agreements. I’m not a fan of the practice myself, but it’s not really evidence that Instapaper does, or intends to, use user data after deletion. Also, it might be intended to address backups, though I’m just speculating.

[kristofferR]

Yeah, if Instapaper didn't do shady things with user data GDPR wouldn't take more than a couple of days to add support for, instead of the 2+ years it's been.