The incidents vary widely in severity, with some affecting a limited group of users or promptly addressed by Google. However, collectively, the range of incidents reported by 404 Media today is both intriguing and troubling.
Privacy concerns involving children and YouTube users were prominent. For instance, following an acquisition, Google allegedly exposed over one million email addresses from Socratic.org users, potentially including minors, along with IP addresses and geolocation data. Additionally, a Google speech service reportedly logged audio, including information from around 1,000 children, despite a supposed child voice detection filter. During the launch of the YouTube Kids app, pressing the microphone button on an Android keyboard inadvertently logged children’s audio.
Other incidents implicated YouTube, including a breach involving Nintendo’s private videos by a Google employee, who inadvertently leaked upcoming announcements. YouTube also suggested videos based on deleted watch histories, contrary to its policies. Furthermore, YouTube’s blurring feature occasionally failed to censor images, and videos uploaded as “Unlisted” or “Private” were briefly publicly viewable.
Beyond YouTube, general privacy and security issues included Waze leaking trip information and user addresses, manipulation of affiliate tracking codes through AdWords, and instances where Google Drive and Google Docs on iOS mistakenly treated “Anyone with the link” settings as “Public.”
Among the most concerning incidents, Google’s Street View reportedly transcribed and stored license plate numbers alongside geolocation data without consent, a significant breach of privacy.
Google responded to these reports, emphasizing that they were addressed years ago and part of its ongoing process for handling product issues. While acknowledging that issues can arise in any large-scale operation, Google asserted its commitment to promptly addressing and resolving such issues.
Given Google’s pervasive presence and influence, from internet services to data collection through products like Street View, ensuring robust privacy protections remains crucial, even for those not actively using Google services.