TechCrunch:
Everyone knew the MoviePass deal is too good to be true — and as is so often the case these days, it turns out you’re not the customer, you’re the product. And in this case they’re not even attempting to camouflage that. Mitch Lowe, the company’s CEO, told an audience at a Hollywood event that “we know all about you.”
I didn’t imagine that the app would be tracking your location before you even left your home, and then follow you while you drive back or head out for a drink afterwards. Did you?
It sure isn’t in the company’s privacy policy, which in relation to location tracking discloses only a “single request” when selecting a theater, which will “only be used as a means to develop, improve, and personalize the service.” Which part of development requires them to track you before and after you see the movie?
When this story first broke yesterday, I didn’t post about it because I thought, “Naw. He didn’t say that. No one would be that stupid.”
Well, guess what? Looks like MoviePass is exactly that stupid.
“Which part of development requires them to track you before and after you see the movie?”
The part where they sell that data to companies interested in that kind of information (restaurants, etc.). Not that that excuses the incomplete privacy policy.
You didn’t read the linked article, did you? 🙂
Gee, I don’t have the app. Maybe I should get it. It sounds like just the thing I want to use in my life.
There ain’t no such thing as a free lunch.
He sounds so charismatic. I don’t know how I can resist.
Yes, I did and there’s really no disconnect.
Move Pass’ privacy policy is quite complete: it explicitly states that the app will capture your location exactly once, when you are within sight of a theater and request a ticket. They are violating their own policy. Expect that Movie Pass’ executive team is consulting their personal lawyers (civil and criminal) right about now.
But what does that say about someone like Eric Schmidt? Seemingly no charisma, yet Google charms nearly everyone out of their pants.
The thing is, why is this a surprise? When someone chooses to “always allow” an iOS app to track their location, what do they think is going to happen? Users don’t have to allow it, and it won’t happen. Simple as that.
Even Dracula needed a Renfield.
It’s less simple when the app’s developer deliberately tries to mislead the user into believing the app is less intrusive than it actually is. Don’t blame the user for having been deceived.
“MoviePass® requires access to your location when selecting a theater. This is a single request for your location coordinates (longitude, latitude, and radius) and will only be used as a means to develop, improve and personalize the service. MoviePass® takes information security very seriously and uses reasonable administrative, technical, physical and managerial measures to protect your location details from unauthorized access. Location coordinate data is transmitted via Secure Socket Layer (SSL) technology into password-protected databases.”
From the linked story:
“I’ve also asked for information on what location data specifically is collected, for how long before and after a movie users are tracked, and where these policies are disclosed to users.”
It’ll be interesting to see the answer.
A single request in which it seems the access never is discontinued. Or at least not discontinued until they feel it to be necessary.
Is the initial search for the theater location logged and then the arrival at the theater location only logged? No in between?
P.S. I don’t use the Movie Pass app, but if someone does, you could check what it is doing with a web proxy..