HomeTopics 2Data SecurityBig Brother No More: FTC Cracks Down on InMarket for Selling Users'...

Big Brother No More: FTC Cracks Down on InMarket for Selling Users’ Precise Location Data

Date:

Related stories

spot_imgspot_imgspot_imgspot_img

In a significant victory for consumer privacy, the Federal Trade Commission (FTC) has banned data aggregator InMarket from selling or licensing precise location data collected from millions of Americans without their informed consent. This landmark decision sends a clear message to the data-hungry industry: profiting from people’s privacy without their knowledge and choice will not be tolerated.

A Trail of Tracking:

InMarket operated by collecting location data from various sources, including its own apps and third-party apps embedded with its software development kit (SDK). This data, often accurate down to within feet, painted an alarmingly detailed picture of users’ movements, revealing sensitive information like their homes, workplaces, and frequent haunts. InMarket then sold this valuable data to businesses for targeted advertising and other purposes, all without explicitly informing users about how their data was being collected and monetized.

Crossing the Line:

The FTC’s investigation revealed multiple concerns with InMarket’s practices:

  • Misleading Consent: The company’s consent prompts were deemed vague and confusing, failing to adequately inform users about the extent of data collection and its intended use.
  • Hidden Tracking: InMarket often embedded its SDK in third-party apps without prominently disclosing its presence, leaving users unaware that their location was being tracked.
  • Selling Sensitive Data: The precise nature of the location data collected raised concerns about potential stalking, discrimination, and other privacy violations.

Banishing Big Brother:

The FTC’s order against InMarket imposes a comprehensive set of restrictions, including:

  • Ban on Selling Location Data: InMarket is prohibited from selling or licensing any precise location data to third parties.
  • Deletion of Existing Data: The company must delete all previously collected location data.
  • Transparency and Choice: InMarket is required to clearly and upfront inform users about its data collection practices and obtain their explicit consent before tracking them.

Beyond InMarket:

The FTC’s action against InMarket is not an isolated incident. It reflects a growing awareness of the risks associated with the rampant collection and monetization of personal data. With increasing geolocation capabilities and a booming data broker industry, protecting user privacy has become a critical imperative.

Next Steps for a Secure Future:

The InMarket case highlights the need for:

  • Stronger Data Privacy Laws: Comprehensive legislation like the California Consumer Privacy Act (CCPA) and the proposed federal AI Bill of Rights provide essential frameworks for protecting consumer data.
  • User Awareness and Education: Empowering individuals to understand their privacy rights and make informed choices about their data is crucial.
  • Responsible Data Governance: Businesses must collect and use data ethically, with transparency and respect for user privacy.

A Brighter Digital Horizon:

The FTC’s decision against InMarket is a significant step towards a more secure and privacy-centric digital future. By holding data-hungry corporations accountable and advocating for stronger protections, we can ensure that technology serves humanity, not exploits it. Let this be a turning point in the fight for online privacy, where individuals regain control over their digital footprints and Big Brother remains firmly banished from our devices and lives.

Remember, your data is your own. Be informed, be vigilant, and demand respect for your privacy in the ever-evolving digital landscape.

Ouaissou DEMBELE
Ouaissou DEMBELE
Ouaissou Dembele is a cybersecurity strategist with over 13 years of experience in purple teaming, governance, risk and compliance (GRC), and security program leadership across the Middle East and Africa. He is Director at Sainttly Group, a UAE-based group comprising Saintynet Cybersecurity, Cybercory Magazine, CISO Paradise, and Digitallium Software, and serves as Editor-in-Chief of Cybercory. At Saintynet Cybersecurity, he leads cybersecurity strategy and delivery across consulting, SOC and MSSP services, regulatory compliance, and training, guiding governments, banks, telecoms, and enterprises in identifying and mitigating evolving threats. His work includes national-level SOC initiatives for African governments. His mission is to empower organizations with resilient, scalable, and future-ready cybersecurity. Before Sainttly Group, he held consulting roles across the MEA region, working with global organizations on security architecture, operations, and compliance programs. He is an experienced speaker and trainer, regularly contributing to industry conferences and professional events, and works in English, French, and Arabic. His certifications include CCNP Security, CCNA Security, CCNA R&S, CEH, and ITIL, alongside the CCIE Security written exam. He delivers certification preparation training for CISSP, CISM, CISA, CCSP, PMP, and ISO 27001, and holds a Master's Diploma in Network Security (2013). As Editor-in-Chief of Cybercory.com, he is a trusted voice in the regional cybersecurity community and an advisor to organizations seeking to strengthen their security posture and resilience.

Subscribe

- Never miss a story with notifications

- Gain full access to our premium content

- Browse free from up to 5 devices at once

Latest stories

spot_imgspot_imgspot_imgspot_img