{"id":127081,"date":"2019-02-04T12:00:08","date_gmt":"2019-02-04T12:00:08","guid":{"rendered":"https:\/\/www.transcend.org\/tms\/?p=127081"},"modified":"2019-02-11T11:26:39","modified_gmt":"2019-02-11T11:26:39","slug":"googles-sidewalk-labs-plans-to-package-and-sell-location-data-on-millions-of-cellphones","status":"publish","type":"post","link":"https:\/\/www.transcend.org\/tms\/2019\/02\/googles-sidewalk-labs-plans-to-package-and-sell-location-data-on-millions-of-cellphones\/","title":{"rendered":"Google\u2019s Sidewalk Labs Plans to Package and Sell Location Data on Millions of Cellphones"},"content":{"rendered":"<blockquote><p><a target=\"_blank\" href=\"https:\/\/theintercept.com\/2019\/01\/29\/google-quer-vender-dados-celulares\/\" >Leia em portugu\u00eas <\/a><\/p><\/blockquote>\n<div id=\"attachment_127082\" style=\"width: 610px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/www.transcend.org\/tms\/wp-content\/uploads\/2019\/01\/Intercept_Replica_02b_MAP_anon-1548187081.gif\" ><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-127082\" class=\"wp-image-127082\" src=\"https:\/\/www.transcend.org\/tms\/wp-content\/uploads\/2019\/01\/Intercept_Replica_02b_MAP_anon-1548187081-1024x512.gif\" alt=\"\" width=\"600\" height=\"300\" srcset=\"https:\/\/www.transcend.org\/tms\/wp-content\/uploads\/2019\/01\/Intercept_Replica_02b_MAP_anon-1548187081-1024x512.gif 1024w, https:\/\/www.transcend.org\/tms\/wp-content\/uploads\/2019\/01\/Intercept_Replica_02b_MAP_anon-1548187081-300x150.gif 300w, https:\/\/www.transcend.org\/tms\/wp-content\/uploads\/2019\/01\/Intercept_Replica_02b_MAP_anon-1548187081-768x384.gif 768w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/a><p id=\"caption-attachment-127082\" class=\"wp-caption-text\">Illustration: Yotam Hadar for The Intercept<\/p><\/div>\n<p><em>28 Jan 2019 &#8211; <\/em>Most of the data collected by urban planners is messy, complex, and difficult to represent. It looks nothing like the smooth graphs and clean charts of city life in urban simulator games like \u201cSimCity.\u201d A new initiative from Sidewalk Labs, the city-building subsidiary of Google\u2019s parent company Alphabet, has set out to change that.<\/p>\n<p>The program, known as <a target=\"_blank\" href=\"https:\/\/www.sidewalklabs.com\/blog\/introducing-replica-a-next-generation-urban-planning-tool\/\" >Replica<\/a>, offers planning agencies the ability to model an entire city\u2019s patterns of movement. Like \u201cSimCity,\u201d Replica\u2019s <a target=\"_blank\" href=\"https:\/\/replica.sidewalklabs.com\/\" >\u201cuser-friendly\u201d tool<\/a> deploys statistical simulations to give a comprehensive view of how, when, and where people travel in urban areas. It\u2019s an appealing prospect for planners making critical decisions about transportation and land use. In recent months, transportation authorities in Kansas City, Portland, and the Chicago area have signed up to glean its insights. The only catch: They\u2019re not completely sure where the data is coming from.<\/p>\n<p>Typical urban planners rely on processes like surveys and trip counters that are often time-consuming, labor-intensive, and outdated. Replica, instead, uses real-time mobile location data. As Nick Bowden of Sidewalk Labs has <a target=\"_blank\" href=\"https:\/\/medium.com\/sidewalk-talk\/introducing-replica-a-next-generation-urban-planning-tool-1b7425222e9e\" >explained<\/a>, \u201cReplica provides a full set of baseline travel measures that are very difficult to gather and maintain today, including the total number of people on a highway or local street network, what mode they\u2019re using (car, transit, bike, or foot), and their trip purpose (commuting to work, going shopping, heading to school).\u201d<\/p>\n<p>To make these measurements, the program gathers and de-identifies the location of cellphone users, which it obtains from unspecified third-party vendors. It then models this anonymized data in simulations \u2014 creating a synthetic population that faithfully replicates a city\u2019s real-world patterns but that \u201cobscures the real-world travel habits of individual people,\u201d as Bowden told The Intercept.<\/p>\n<p>The program comes at a time of growing unease with how tech companies use and share our personal data \u2014 and raises new questions about Google\u2019s encroachment on the physical world.<\/p>\n<blockquote><p><strong><em>If Sidewalk Labs has access to people\u2019s unique paths of movement prior to making its synthetic models, wouldn\u2019t it be possible to figure out who they are, based on where they go to sleep or work?<\/em><\/strong><\/p><\/blockquote>\n<p>Last month, the New York Times <a target=\"_blank\" href=\"https:\/\/www.nytimes.com\/interactive\/2018\/12\/10\/business\/location-data-privacy-apps.html\" >revealed<\/a> how sensitive location data is harvested by third parties from our smartphones \u2014 often with weak or nonexistent <a target=\"_blank\" href=\"https:\/\/www.nytimes.com\/2018\/12\/10\/technology\/prevent-location-data-sharing.html?rref=collection%2Fbyline%2Fnatasha-singer&amp;action=click&amp;contentCollection=undefined&amp;region=stream&amp;module=stream_unit&amp;version=latest&amp;contentPlacement=8&amp;pgtype=collectio\" >consent<\/a> provisions. A Motherboard <a target=\"_blank\" href=\"https:\/\/motherboard.vice.com\/en_us\/article\/nepxbz\/i-gave-a-bounty-hunter-300-dollars-located-phone-microbilt-zumigo-tmobile\" >investigation<\/a> in early January further demonstrated how cell companies sell our locations to stalkers and bounty hunters willing to pay the price.<\/p>\n<p>For some, the Google sibling\u2019s plans to gather and commodify real-time location data from millions of cellphones adds to these concerns. \u201cThe privacy concerns are pretty extreme,\u201d Ben Green, an urban\u00a0technology expert and author of \u201cThe Smart Enough City,\u201d wrote in an email to The Intercept. \u201cMobile phone location data is extremely sensitive.\u201d These privacy concerns have been far from theoretical. An Associated Press <a target=\"_blank\" href=\"https:\/\/www.apnews.com\/ef95c6a91eeb4d8e9dda9cad887bf211\" >investigation<\/a> showed that Google\u2019s apps and website track people even after they have disabled the location history on their phones. Quartz found that Google was <a target=\"_blank\" href=\"https:\/\/qz.com\/1131515\/google-collects-android-users-locations-even-when-location-services-are-disabled\/\" >tracking Android users<\/a> by collecting the addresses of nearby cellphone towers even if all location services were turned off. The company has also been <a target=\"_blank\" href=\"https:\/\/www.wired.com\/2012\/05\/google-wifi-fcc-investigation\/\" >caught<\/a> using its Street View vehicles to collect the Wi-Fi location data from phones and computers.<\/p>\n<p>This is why Sidewalk Labs has instituted significant protections to safeguard privacy, before it even begins creating a synthetic population. Any location data that Sidewalk Labs receives is already de-identified (using methods such as aggregation, differential privacy techniques, or outright removal of unique behaviors). Bowden explained that the data obtained by Replica does not include a device\u2019s unique identifiers, which can be used to uncover someone\u2019s unique identity.<\/p>\n<p>However, some urban planners and technologists, while emphasizing the elegance and novelty of the program\u2019s concept, remain skeptical about these privacy protections, asking how Sidewalk Labs defines personally identifiable information. Tamir Israel, a staff\u00a0lawyer at the Canadian Internet Policy &amp; Public Interest Clinic, warns that re-identification is a rapidly moving target. If Sidewalk Labs has access to people\u2019s unique paths of movement prior to making its synthetic models, wouldn\u2019t it be possible to figure out who they are, based on where they go to sleep or work? \u201cWe see a lot of companies erring on the side of collecting it and doing coarse de-identifications, even though, more than any other type of data, location data has been shown to be highly re-identifiable,\u201d he added. \u201cIt\u2019s obvious what home people leave and return to every night and what office they stop at every day from 9 to 5 p.m.\u201d A landmark <a target=\"_blank\" href=\"https:\/\/www.nature.com\/articles\/srep01376\" >study<\/a> uncovered the extent to which people could be re-identified from seemingly-anonymous data using just four time-stamped data points of where they\u2019ve previously been.<\/p>\n<p>There are also lingering questions about how Sidewalk Labs sets limits about the type and quality of consent obtained. As the past year\u2019s tsunami of privacy breaches has shown, many users do not understand how closely they are being tracked and how often their data is being resold to advertisers or third parties or programs like Replica. \u201cWe need to do a better job in ensuring the type of express consent commensurate with sensitivity of data is actually being enforced when data is collected,\u201d Israel noted. Consent has historically been defined by broad and vague terms of service, leveraging companies\u2019 knowledge of intricate technical details at the expense of users too pressed for time to read \u2014 let alone understand \u2014 their jargon-laden privacy policies. The Times investigation found, for instance, that \u201cthe explanations people see when prompted to give permission are often incomplete or misleading.\u201d Even while they may retain a broad right to sell or share location data in an opaque privacy policy, many apps do not explicitly tell their users that they are doing so.<\/p>\n<p>It\u2019s difficult to evaluate who might be consenting when it\u2019s not clear where the data comes from. Sidewalk Labs explains that Replica\u2019s data is purchased from telecommunications companies and companies that aggregate mobile location data from different apps. \u201cWe audit their practices to ensure they are complying with industry codes of conduct,\u201d said Bowden. \u201cNo Google data is used. This extensive audit process includes regular reporting, interviews, and evaluation to ensure vendors meet specified requirements around consent, opt-out, and privacy protections.\u201d<\/p>\n<p>Yet because the exact sources of data have not been revealed, it is unclear whether Replica draws from the ranks of unregulated apps that profit from indefinite privacy policies to continuously collect users\u2019 precise whereabouts. Publicly available documents from cities piloting or purchasing Replica offer conflicting information about Replica\u2019s exact sources of data. A <a target=\"_blank\" href=\"https:\/\/webapps.dot.illinois.gov\/WCTB\/ConstructionSupportNotice\/ViewDocument\/5df5fcc7-c74e-425b-a2d2-eafe51620b39\" >document<\/a> from the Illinois Department of Transportation describes Replica\u2019s data sources as \u201cmobile carrier data, location data from third-party aggregators and Google location data, to generate travel data for a region.\u201d This data sample, it adds, \u201cis not limited to Android devices\u201d and \u201cis collected from individuals for months at a time, allowing for a complete picture of individual travel patterns.\u201d In Portland, documents filed with its\u00a0city council state that the data is sourced from \u201cAndroid Phones and Google apps.\u201d Officials at the Portland Bureau of Transportation <a target=\"_blank\" href=\"https:\/\/www.opb.org\/news\/article\/cellphone-location-data-portland-google-privacy\/\" >told<\/a> Oregon Public Broadcasting that some of the sources of Sidewalk Lab\u2019s mobile location data may also come from other sources, not yet known to them. <a target=\"_blank\" href=\"http:\/\/www.marc.org\/Transportation\/Committees\/agendas\/TTPC\/TTPCMeetingPacket_11202018.aspx\" >Minutes<\/a> from a regional transit planning meeting for Kansas City suggest that it\u2019s possible for Replica \u201cto get data on things like Uber &amp; Lyft,\u201d while a city <a target=\"_blank\" href=\"http:\/\/ridekc.org\/assets\/uploads\/documents\/June11_Presentation.pdf\" >PowerPoint<\/a> states that the tool is \u201cbased off of Google data.\u201d<\/p>\n<p>At stake with Replica is the value that can be produced by aggregating data about our movements and then selling it back to governments. The program was <a target=\"_blank\" href=\"https:\/\/medium.com\/sidewalk-talk\/introducing-replica-a-next-generation-urban-planning-tool-1b7425222e9e\" >originally<\/a> pitched by Sidewalk Labs \u201cto support the development\u201d of Quayside, the controversial <a target=\"_blank\" href=\"https:\/\/theintercept.com\/2018\/11\/13\/google-quayside-toronto-smart-city\/\" >\u201csmart\u201d city<\/a> planned for Toronto\u2019s eastern waterfront. (A Sidewalk Labs spokesperson told The Intercept that there are no plans to bring Replica to Toronto.) Yet Torontonians <a target=\"_blank\" href=\"https:\/\/www.thestar.com\/news\/gta\/2018\/10\/12\/sidewalk-labs-use-of-cellphone-data-in-proposed-us-deal-raises-concern-in-toronto.html\" >have been watching<\/a> Replica\u2019s plans closely. Some see the project as an example of the way the proprietary tools and techniques developed by Sidewalk Labs at Quayside might be exported \u2014 or imported \u2014 to other cities, without creating any additional economic\u00a0benefits for the residents who have produced this data.<\/p>\n<p>\u201cReplica is a perfect example of surveillance capitalism, profiting from information collected from and about us as we use the products that have become a part of our lives,\u201d said Brenda McPhail, director of the Canadian Civil Liberties Association\u2019s Privacy, Technology, and Surveillance Project. \u201cWe need to start asking, as a society, if we are going to continue to allow business models that are built around exploiting our information without meaningful consent.\u201d<\/p>\n<p>______________________________________________________<\/p>\n<p style=\"padding-left: 30px;\"><a href=\"https:\/\/www.transcend.org\/tms\/wp-content\/uploads\/2018\/11\/avakofman_ttw-e1543403551897.jpg\" ><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-123072\" src=\"https:\/\/www.transcend.org\/tms\/wp-content\/uploads\/2018\/11\/avakofman_ttw-e1543403551897.jpg\" alt=\"\" width=\"100\" height=\"100\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p style=\"padding-left: 30px;\"><em><a target=\"_blank\" href=\"https:\/\/theintercept.com\/staff\/ava-kofman\/\" >Ava Kofman<\/a> &#8211; <a href=\"mailto:kofman.ava@gmail.com\">kofman.ava@\u200bgmail.com<\/a><\/em><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><a target=\"_blank\" href=\"https:\/\/theintercept.com\/2019\/01\/28\/google-alphabet-sidewalk-labs-replica-cellphone-data\/\" >Go to Original \u2013 theintercept.com<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>28 Jan 2019 &#8211; Google&#8217;s sibling company Sidewalk Labs offers planning agencies the ability to model an entire city&#8217;s patterns of movement. <\/p>\n","protected":false},"author":4,"featured_media":127082,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[62,60],"tags":[],"class_list":["post-127081","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-media","category-whistleblowing-surveillance"],"_links":{"self":[{"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/posts\/127081","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/comments?post=127081"}],"version-history":[{"count":0,"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/posts\/127081\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/media\/127082"}],"wp:attachment":[{"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/media?parent=127081"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/categories?post=127081"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.transcend.org\/tms\/wp-json\/wp\/v2\/tags?post=127081"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}