Post

https://twitter.com/ProtonMail/status/1245682393320751106

More from @ProtonPrivacy

Proton

@ProtonPrivacy

Aug 20

Ever had someone give you something and not want to give it back? Data brokers feel the same…

An investigation by The Markup found that 35 registered Californian data brokers have noindex code on opt-out & data deletion pages.

Why? To keep them off search engines.

1/6

That's not the only way that brokers create obstacles to user privacy.

An analysis of 750 US-based data broker groups revealed that 100s of brokers registered in one state but failed to register in another, despite the legal requirement.

Most of them operate nationally...

2/6

Another study found that 43% of data brokers fail to respond to requests; the California Consumer Privacy Act (CCPA) requires them to do so within 45 days.

Even when responding, many impose extra hurdles, such as requiring people to share even more personal data.

3/6

Read 6 tweets

Proton

@ProtonPrivacy

Aug 18

Perplexity’s $34B bid for Chrome is still not nearly as perplexing as what they’re planning to do with your browsing data.

Let’s take a look. 👇 🧵

1/7

For context, earlier this year, when Perplexity CEO @AravSrinivas confronted us, we asked him to vow that his company would never monetize user data.

He unfortunately never got back to us, and instead went on to create Comet, a privacy-invasive AI browser.

2/7

According to their privacy policy, Comet sees:

• URLs of the websites you visit
• The number of windows and tabs you have open
• Your search queries
• What you download
• Cookies from websites

…and can even read your emails.

3/7

Read 7 tweets

Proton

@ProtonPrivacy

Aug 5

Europe outsourced its digital backbone for decades.

Today, that choice has become a strategic liability.

Our new study shows how deep that dependency runs — starting with email, the gateway to every company’s stack.

Let's unpack it 👇
1 / 8

Over 74% of all publicly listed European companies run their email, and therefore cloud, docs, AI workflows, on Google or Microsoft.

That puts strategy decks, budgets, daily ops, and sensitive client data on servers governed by foreign laws.

2 / 8

When your company relies on US tech companies, you're not just outsourcing tech.

You're exposing your organization to strategic risks that are out of your control:

→ AI models trained on your company’s data
→ CLOUD Act–enabled surveillance
→ No say over data location
→ Critical sectors exposed to geopolitics

3 / 8

Read 8 tweets

Proton

@ProtonPrivacy

Jul 28

A popular dating safety app has recently spilled more than just the tea ☕

User data from Tea, a platform which claims to have upwards of 1.6 million users, has ended up on 4chan.

The app exists to share information between women about possible matches on dating platforms.

1/8

According to the attackers, data used to verify users, such as driver’s licenses and selfies, was publicly accessible without authentication.

Tea confirmed that 72k images had been exposed, including 13k selfies and photo identification submissions.

2/8

The breach also included 59,000 images from posts, comments, and DMs.

The online dating industry is a privacy nightmare; fortunately, there are ways to limit your exposure when using these apps.

When signing up for any service like this, you have to be mindful...

3/8

Read 8 tweets

Proton

@ProtonPrivacy

Jul 22

Proton has completed a SOC 2 Type II attestation.

It adds to our ISO 27001 certification and compliance with GDPR and the Swiss DPA.

What does that mean, and why should you care?

Let’s break it down 👇

🧵1/6

SOC 2 Type II is one of the most widely recognized standards for operational security.

It doesn’t just look at your policies, it audits how well you actually follow them over time.

🧵2/6

For Proton, this wasn’t a shift; it was a validation.
We already had strong controls in place. The audit confirmed it.

Zero-access architecture

Open-source apps

Strict access and incident management

Real-world enforcement

🧵3/6

Read 6 tweets

Proton

@ProtonPrivacy

Jun 27

What are data brokers, and why should you care?

They collect your information from apps, websites, credit reports, and public records, selling it to whoever is willing to pay.

All without your knowledge.

Let's learn about a $270 billion industry...

1/8 👇🧵

Data brokers collect, process, and sell or share personal information about people.

They gather data from:

📁 public records
🌐 online activity
🛍️ retail and loyalty programs
📱 mobile apps and location data
💳 credit reporting
🏦 financial institutions

2/8

If a behavior or preference can be quantified, a data broker is likely monitoring that data and selling it.

However, the most commonly collected data includes:

📛 names
📍 locations
🏪 shopping habits
👫 friends
🗳️ political leanings
🍎 health data

3/8

Read 8 tweets

Share this page!

Enter URL or ID to Unroll

Proton

Try unrolling a thread yourself!

More from @ProtonPrivacy

Proton

Proton

Proton

Proton

Proton

Proton

Did Thread Reader help you today?

Don't want to be a Premium member but still want to support us?

Send Email!