BBC: "TikTok Is Tracking You, Even If You Don't Use The App"

Sigh. First the bad news:

TikTok keeps track of everything you do on its app – no surprises there. What's less obvious is how the company follows you around other parts of the internet that have nothing to do with TikTok. 

In fact, TikTok collects sensitive and potentially embarrassing information about you even if you've never used the app. Over the past week, I've watched websites sending TikTok data about cancer diagnoses, fertility and even mental health crises. It's part of a tracking empire that extends far beyond the social media platform. Now, thanks to a new set of features, TikTok is poised to expand its network and see even more details about your life.

The change comes just weeks after the sale of TikTok's US operations to a group of companies with ties to US President Donald Trump. The deal has led to fresh privacy concerns from some human rights experts and users, though TikTok says it has transparent guidelines on how it responds to government requests for data.  

Fortunately, this is a privacy story with a positive note. Some easy steps you can take in about five minutes will help you keep your information out of TikTok's hands. 

The core of this invasive annoyance? Glad you asked:

The issue centres around major changes to TikTok's "pixel", a tracking tool that companies use to monitor your online behaviour. I asked a cybersecurity company called Disconnect to analyse it. They found the updated TikTok pixel collects information in unusual ways compared to its competitors. 

"It's extremely invasive," says Patrick Jackson, chief technology officer at Disconnect. "This expanded data sharing, when you do analysis of the actual pixel code, you see things that look really bad."

And what is a pixel?

Here's how it works. TikTok, for example, encourages companies to put pixels on their websites to help the social media giant harvest more data. Let's say I have an online shoe store. If I use a pixel, it lets TikTok collect lots of data about my customers in order to show them targeted ads. Plus, it helps TikTok figure out whether people who see those shoe ads end up making a purchase. That way, I know the ads I paid for are working, and maybe I'll pay for more. (Like most news organisations, the BBC uses analytics tools and shares data with advertising partners in accordance with our privacy policy. The BBC does not use TikTok tracking pixels on its website or place advertising pixels on third-party sites.)

Suffice to say, Tik Tok (now under American ownership) is not really concerned:

TikTok says its users are informed about its data practices in privacy policies and notifications in some cases. The company also says it gives people privacy settings to take control.

"TikTok empowers users with transparent information about its privacy practices and gives them multiple tools to customise their experience," a TikTok spokesperson says. "Advertising pixels are industry standard and used widely across social and media platforms, including by the BBC."

Sucks, right? Fear not; there is a light at the end of this tunnel:

The best option? Use a more private web browser. I know switching seems like a pain, but it's easy to import your bookmarks. Try it.

Something like 71% of people use Google Chrome, which has been found in preliminary academic research to leak more information than many competitors. Privacy experts often recommend the DuckDuckGo browser and Brave, which are specifically built to safeguard data. Firefox and Safari are considered better options than Chrome, though they're less strict about privacy by default.

If switching browsers is too much, install a browser extension that blocks these trackers. I asked Disconnect and DuckDuckGo to help with this article because they both make tracker blockers, but there are other options, including Privacy Badger and Ghostery. Certain ad blockers also block some data harvesting, including AdBlock Plus and uBlock Origin. DuckDuckGo has a chart comparing which ad blockers do it best. Just don't install browser extensions that aren't recommended by reputable sources – it's just like installing an app. Some are dicey.

Oh and one more warning about all this:

Now the bad news. Following those two steps will block the TikTok pixel and lots of other privacy invasions. But I won't pretend your data problems are solved.

If only we could get better privacy laws...