[throwaway1959]

Just to make sure: this protects you from your co-worker/spouse looking at your search history at your desk/device. The advertisers and corporations can freely purchase your search history from Google. It does not seem like a significant step towards privacy to me.

[viro]

Do you know the difference between targeting based on data and having the data? I can show you an AD based on ur search I can't buy ur search history and see you looked up hentai.

[Spivak]

Yes and people’s whole careers are built on maintaining that fiction that they’re meaningfully different.

We sent you this ad because we know you like hentai and “we asked Google to look through their data and show ads to hentai watchers” is a distinction without a difference when it’s equally uncomfortable that Google is looking at this information as it would be for Google’s clients.

[viro]

You know the "we" is google right?! the company provides google an AD and how they want to target it. Then google serves that AD

[Spivak]

Yes? The difference between hentaidirect.com buying your data and analyzing it, then buying ad space and serving you an ad based on your search history and hentaidirect.con asking Google to do the same on their behalf is the same to me. In both cases I have an entity who is a stranger looking through my search history to serve me ads.

[throwaway1959]

Maybe I am too cynical, but I think in Google's case, the difference between targeting based on data and having the data will be several extra zeros in their price point.

[viro]

The only real way google makes money is by selling ADs. The only reason they are sooo good at it, is because of the amount of infomation they have about you and me. If they willy nilly sell that information to entities that directly devalues that data. Now ask your self why would google devalue their core competitive advantage.

[mda]

"The advertisers, gov agencies and corporations can freely purchase your search history from Google"

I hope you have some information backing this claim.

[riversflow]

Why wouldn't I operate under this assumption though?

[dodobirdlord]

Well, for one, Google says that they don’t sell user data. And they work with thousands of advertising agencies all over the world, so if it was a lie I’m sure it would have been been revealed in a front page NYT article by now. There are a ton of people who would be in a position to leak that the claim is a lie, and a lot of people very financially interested in learning it’s a lie.

For two, you can look up Google’s history of fighting back against court orders to access customer data. There wouldn’t be much point in that if this data was just “available to advertisers and government agencies”. Except maybe PR, which going back to point one.

For three, Snowden’s leaks revealed that the NSA installed fiber taps in Google datacenters to steal this data, precisely because Google wouldn’t give it to the NSA without a valid warrant. Google has since publicly claimed that they have encrypted all traffic on their internal network.

“Google sells your data!” is an old meme, but a tired one, and not one that stands up to inspection.

[ncmncm]

We may take as given that advertising agents cannot simply buy the history of your usage, outright.

Does that mean much? Google would not be so foolish as to hand over everything at once, when they could do something else that allows them to sell it, or the use of it, again and again. They doubtless have a hundred ways, each more clever than the last, to sell it again and again. Since they control the whole apparatus, they can make full use of all your history at all times without revealing to advertisers anything that would allow Google to be bypassed next time.

So, Google's pledge is simply that every use of your data will necessarily involve paying Google again. And, anything at all that can help Google uniquely identify you with activity anywhere online certainly is collected into your file, the use of to be dold for what the traffic will bear.

Your ISP has a different set of incentives.

[dodobirdlord]

I don’t think this addresses any of the three points, unless you’re interpreting the OP’s “advertisers, gov agencies and corporations can freely purchase your search history from Google” in an entirely non-literal sense that has nothing to do with the literal meaning of the words.

> Your ISP has a different set of incentives.

Indeed, ISPs are known to wholesale sell their user’s traffic history.

[mda]

Because it is pure speculation and is honestly not backed by any evidence?

[riversflow]

I'm unclear how you have a threat model that isn't based on speculation. Unless they are having third party audits that I'm unaware of, I basically have Google's word right now that they are deleting my data. I agree that the evidence suggests that right now, Google does not sell your data, and that they have adequate security. That doesn't mean I trust them when they say they delete my data, or that my data will be safe forever.

I'm not even saying that Google is selling it, I'm just arguing that it makes practical sense to me to have that assumption from a privacy standpoint.