How search engines compare on privacy
Published: 13 Aug 2007 16:36 BST
Price wars are public blessings. Ask anyone who has comparison shopped between AMD and Intel microprocessors, or bought a cheap Harry Potter novel thanks to fierce bookseller price battles.
In the last few months, the search-engine business has experienced its own version of cut-throat competition: a privacy-policy war, with Google, Ask.com and Microsoft vying to outdo one another in protecting their users' personal information.
But it's been difficult to make direct comparisons, in part because privacy policies tend to be written by lawyers for lawyers. So ZDNet.co.uk's sister site CNET News.com did some of the work for you by surveying the five leading search companies.
Starting on 6 August, the search companies were asked eight questions, including how long they retain search data, how they eventually dispose of it, whether they engage in behavioural targeting, and whether they use information they have from user sign-ups to guide which ads are displayed. Follow-up questions were asked where necessary for clarification.
The verbatim results of the survey are posted in an accompanying story.
The answers suggest that, based on the questions asked, Ask.com was the most protective of user privacy. In fact, only Ask.com said it would not record what users type into its search engine. (Smaller search engines, including ixquick, have said this as well, but the survey was limited to the five largest engines.) Ask.com also said it did not engage in behavioural targeting, which refers to the practice of offering advertisements based on previous searches.
As for the rest, results were mixed. Google avoids behavioural targeting, but, after 18 months, it performs a partial anonymisation of users' internet protocol addresses — an action that's not terribly privacy protective. Google dominates the search market: 53 percent of US web searches in June were performed on its site, according to Nielsen/NetRatings.
Microsoft is better on the anonymisation front. Peter Cullen, the company's chief privacy strategist, said users' internet addresses and cookie values are "permanently and irreversibly" disassociated from the search terms after 18 months. But Microsoft does engage in behavioural targeting, while Google doesn't. Yahoo and AOL were similarly mixed.
These were, nevertheless, remarkable improvements. Google, Microsoft and Yahoo told News.com, in response to an earlier survey conducted in February 2006, that they kept search records for as long as the data proved useful. Now they've set expiration dates, and Ask.com has gone further by promising to stop recording user search histories starting later this year. Google also has shortened the lifespan of its cookies — from expiring in 2038 to expiring two years from the last visit.
Search privacy is important because our Googling (and Yahooing, and MSNing and so on) provides a unique glimpse into our personalities and private lives. Search terms have been used to convict a wireless hacker and lock up a man charged with killing his wife. Search-engine activity is also a fertile growth area for nosy divorce lawyers and employment disputes.
One relatively simple way to protect your privacy when using search engines is to configure your browser to not permit them to place cookies on your computer. Another way is to route all your connections through a proxy server such as Anonymizer, Tor or Black Box Search.
Market rivalry and regulatory threats
What all this amounts to is that the best search engine to use, from a privacy perspective, depends on what's most important to you.
Are you worried about a company publishing even anonymised search terms, as AOL did last year? Then use one that deletes your data sooner, or disable cookies for that site (at the price of not being able to use features like web-based email). Do you dislike seeing ads presented according to a computer-generated profile that was crafted based on your search terms? Then use Ask.com or Google, because the other three companies we surveyed employ behavioural targeting. Worried about someone perusing your search history in person? Use software like PGP or Mac OS X's FileVault to encrypt part or all of your hard drive.
In addition to the normal forces of marketplace rivalry, another recent factor has been government regulatory threats. A group of European bureaucrats, called the Article 29 Data Protection Working Party, has been pressuring search companies to store information for a shorter period of time. Last year, there was even a bill introduced in the US Congress that would have forced websites to delete personal information if not required for "legitimate" business purposes.
Behavioural targeting is another growth area — not only for search companies, but for bureaucrats and politicians as well.
Google's proposed $3.1bn (£1.5bn) acquisition of the DoubleClick ad company is being investigated by US regulators after the purchase was challenged on competition and privacy grounds. Microsoft has received regulatory approval to buy online ad firm aQuantive, and Yahoo acquired online ad exchange Right Media. More recently, AOL said it was planning to acquire behavioural-targeting firm Tacoda.
The companies say they're following industry standards, with both Microsoft and Yahoo noting in our survey that they perform behavioural targeting only in accordance with Network Advertising Initiative principles. But liberal groups are becoming increasingly vocal, and the US Federal Trade Commission last week announced it would hold a two-day forum in November to address behavioural-advertising concerns.
Did you find this article useful?
8 out of 8 people found this useful
- Share this article:
