[bwoodruff]

Hi folks,

Thank you for the comments on this important topic. 1Password's mission is to help people safeguard their most important information and to do that, we have always taken a human-centric approach to security. In order to deliver the exceptional product experience our users expect from us, we need to better understand how they use 1Password.

And while our goal is to deliver better 1Password products, we won’t require our community to help us if they don't want to. We're fully committed to transparency and will provide updates coming out of our research and development period. When we are ready for a wider rollout of this functionality, we will provide clear, in-app messaging, and you’ll be able to control whether or not telemetry is active on your account.

In the meantime, thank you for sharing your feedback – these discussions are always valuable to us, and we appreciate your constructive candor.

-Ben, 1Password

[93po]

Unless telemetry is opt-in, there is no commitment to transparency. Opt-out may as well just be buried as a disclosure in the EULA that no one reads.

[bwoodruff]

As our CTO, Pedro, discussed in his blog post (https://blog.1password.com/privacy-preserving-app-telemetry/), we have only rolled out telemetry to our employee base. We will be analyzing the results of this internal-only roll-out before implementing this functionality more broadly.

This functionality will have a prominent in-app message that will ask Individual and Family account users to choose whether they prefer to keep telemetry on or off their account. Nothing gets collected until they’ve made this choice, and users will be able to change their preferences whenever they would like.

-Ben, 1Password

[93po]

> This functionality will have a prominent in-app message that will ask Individual and Family account users to choose whether they prefer to keep telemetry on or off their account. Nothing gets collected until they’ve made this choice, and users will be able to change their preferences whenever they would like.

Does the choice for "Track My Activity" look like a "Continue" or "Next" button? Respectfully, it sounds like you're trying really hard to not actually say it's going to be opt-out.

[bwoodruff]

The designs for what the screen will look like have not been completed yet. I couldn't say exactly what the language will be. From what I've seen thus far it will be clear that there is a choice to be made, but the default selection will be to enable telemetry.

Here is a draft of what we're considering: https://bucket.agilebits.com/ben/telemetry-consent-draft.png

Does that help clarify what the experience will be?

[93po]

I appreciate the least-bad option for a feature most people don't want. I will be impressed if this is how it's implemented and how it stays. I also appreciate your willingness to engage with people online who get to stay anonymous while making criticisms when you don't have the same luxury.

[Aaron2222]

So it's effectively opt-in then? It strikes me as odd that this wasn't clearly communicated in the blog post, and even more odd that phrasing like "At that point, we’ll also provide guidance on how you can opt out if you’d like to" was used.

[93po]

It sounds pretty clear it's not opt-in. They'd just say so if it was.

[bwoodruff]

You're not going to have to hunt around in the settings to consent to telemetry, no, but we're also not going to collect without consent. We're in the early stages, so this is subject to change. Still, our design team shared this mockup that may help visualize the direction we plan on taking if we move forward with a customer-facing rollout of telemetry.

https://bucket.agilebits.com/ben/telemetry-consent-draft.png

[torstenvl]

I'm no longer a 1Password user due to a number of extremely user-hostile behaviors, but credit where it's due -- this mock-up, if implemented, will be far better than I feared.

[astrostl]

I don't like opt-out telemetry but I get it. I hate and do not get local vault elimination. I've been using 1P since 2008 and I'm out once the 1P7 browser extensions stop working.