Freezing drizzle and icy travel conditions through Friday morning

MPR News helps you turn down the noise and build shared understanding. Turn up your support for this public resource and keep trusted journalism accessible to all. 

Turn Up Your Support

A privacy watchdog group has filed a complaint with the FTC over Google's system for tracking purchases Internet users make in person, at physical store locations.

 — a way for advertisers to measure the effectiveness of an online ad campaign — in May. It combines Google's search and app records with credit card purchase data acquired from third-party sources. "We invested in building industry-leading privacy protections before launching this solution," the company tells NPR in a statement. "All data is encrypted and aggregated."


The Electronic Privacy Information Center is concerned that Google's methods, the details of which are not public, may not sufficiently safeguard users' privacy. The center, also known as EPIC, is asking the Federal Trade Commission to investigate.

"Google claims that they don't know who the users are, that they are being de-identified," says Marc Rotenberg, the president of EPIC. "We want the FTC to take a closer look."

Google is both a search behemoth and an online advertising powerhouse, and it takes advantage of its vast collection of data to create detailed ad metrics. For several years, the company has been using location data on phones to track store visits — for example, to see how many people clicked on a PetSmart ad and then visited their local PetSmart.


But the new system goes further, and looks at actual purchases, by relying on in-store credit card transactions. Google says it doesn't have access to that data directly. However, the company has "third-party partnerships" that "capture approximately 70% of credit and debit card transactions in the United States," Google 

That data gets cross-referenced with information Google already has, to connect user accounts to in-person purchases. Aggregated data showing the relationship between Google ads and purchases is then delivered to advertisers.



Google has provided few specifics about how this process works, but the company says that it can't identify "particular individuals" and doesn't know what products a person purchased.

Rotenberg says that Google has never identified who its third-party partners are, "what data is acquired or what steps they are taking to de-identify that data." Without those details, he says, there's good reason to be skeptical of the company's claims of anonymity.


He points to examples like Snapchat, the app that said that photos posted on its platform would disappear forever. EPIC challenged that claim in 

. The FTC agreed that Snapchat was being misleading, and the company eventually 

Rotenberg says that if Google's anonymizing practices are as robust as they say, that likely alleviate EPIC's privacy concerns. But without an independent investigation, he says, it's impossible to evaluate Google's claims that the process is fully anonymous.

EPIC also complains that the opt-out process is "opaque and misleading," with most users not realizing that they'd need to opt out of such a system.


Google tells NPR that users have "robust controls" over their data, and can opt out of purchase tracking by removing permission for Google to use their "Web and App activity." (To do so, visit 

in your Google account, select "Activity Controls" and de-select "Web and App activity.")
Google tells NPR the store sales measurement product is currently in beta and only in the United States for certain advertisers.  Copyright 2019 NPR. To see more, visit https://www.npr.org.

Science

Business and Economic News

Crime, Law and Justice

Using search and app data, combined with third-party credit card records, Google can link online ad viewing to purchases at physical stores. User privacy may be at risk, an advocacy group says.

Watchdog group files complaint over Google tracking in-person purchases

Go Deeper.

Like this?