Hacker News new | ask | show | jobs
by sizediterable 1513 days ago
From https://fig.io/privacy:

> Inevitably, there will be users who, for whatever reason, don't want their usage of Fig to be personally tracked. Of course. It's your data and software on your device. You shouldn't even need a reason. We want to cater to these users. And we will. But unfortunately, we are so early on in the process of building Fig that we need to be able to speak to our users. De-anonymising telemetry for the time being while minimisng the events tracked enables us to do this in a non intrusive way. But it is of course not for everyone. Therefore, once we reach a critical mass of usage in the coming months, we will then anonymise all telemetry, making Fig more accessible.

It has been several months since this was written. Are they still collecting de-anonymized user data?

4 comments

I just installed it. You are presented with an option to disable telemetry once setup is complete in the form of a CLI command (fig settings telemetry.disabled true). But, for some reason, you can't disable it during setup.

However, during setup, you need to "sign-up" by sharing your email - you can't skip this step as far as I could tell.

as far as i remember you couldn't actually disable telemetry

they still send a daily ping

This is incorrect. If you opt-out, no telemetry events are sent at all.
https://news.ycombinator.com/item?id=27277819

> Telemetry: Fig has basic telemetry in order to help us make product decisions. We currently give the you option to opt out of all non-essential telemetry by running `fig settings app.disableTelemetry true`. This removes everything except for one daily ping. We use this ping to help us understand how many people were using Fig.

Have you checked this, i.e. checked your network traffic for 24 hours after installing and registering Fig?
mschrage (the author of the comment you're responding to) seems to have a personal affiliation with the project.

If you assume he's contributing here in good faith (my assumption) then I'd say it's safe to say that it does in fact disable telemetry.

Can you enter root@dev.null?
You can, but unless you own that address you won’t be able to use the app as you’re expected to type a code sent to the provided address
Wouldn't `foo@example.com` be a better testing email.
how about noth@n.ks and em@i.l
I use some-random-string@mailinator.com. So even they send you some activation link you just go there and click it. Very convenient page.
example.com is officially on a list of example domains that will never be allocated to real use.
I usually use e@e.e or if that fails e@e.com or if even that fails e@gmail.com
That statement means that they have chosen, by design, to be unavailable in Europe.

In Europe you must be able to prove that your software was designed from the ground up with enough safeguards for user privacy, as opposed to considering privacy requirements as a bolted-on afterthought.

They would be able to argue that the data is anonymised.
Wouldn't it be hard to argue when it's explicitly stated that it's "de-anonymized"?
Oh, lol. That’s just dumb and unnecessary.
They explicitly say the data is de-anonymised because otherwise they wouldn't be able to directly contact users.
Remind me again why do they even need to send any telemetry, anywhere, ever?
Sounds strange, you can speak to your users even if you aren’t using telemetry.