Privacy

Norway’s consumer authority has spoken out against Tinder’s current terms and conditions by filing a formal complaint against the company.

The Norwegian Consumer Council insists that the popular dating app is not protecting its users, granting sweeping ownership rights and control over users’ data. Some of the terms and conditions Tinder users agree to when downloading the app include allowing Tinder change its terms without notifying users, and allowing the app to delete users’ accounts without justification. The Council also points out that users aren’t allowed to delete their own accounts if they want to (which could allow Tinder to inflate their own numbers by potentially counting inactive profiles).

While these policies are spelled out in Tinder’s current terms and conditions, most people aren’t taking the time to read through or really understand how their data could be used. And Norwegian authorities want to call the company out on the practice.

Another sticking point for Tinder according to the Council is that the minimum user age is listed at 13, which country officials consider too young, especially when it comes to understanding complicated online privacy issues.

While Tinder is arguably the most successful dating app, its popularity soared in part because the app was free for those who downloaded it. Access to data from its user base is one of the ways Tinder can make money. A revenue model they use includes offering targeted (data-driven) marketing.

According to a recent article in Fortune, this isn’t the first complaint about app and social media privacy policies from governments outside the U.S. In France earlier this year, the consumer organization UFC-Que Choisir asked French data protection authority CNIL to investigate dating app Happn over its data-collection practices. And the German antitrust authority launched a complaint against Facebook over its “unfair” terms and conditions, on the premise that it is dominates the social networking market and has an unfair competitive advantage.

While Tinder doesn’t have a European operation, it does offer the app in Norwegian language and it is available in Norway’s app store, so it does have to abide by the country’s regulations when selling to its market.

If Norway’s officials consider the case against the company, it may order Tinder to change its terms and conditions or face penalties. Tinder said it makes every effort to comply with local and national regulations. The company released a statement that read: “If and when authorities bring up larger privacy concerns, we always take them into consideration and, if applicable to our users, take steps to implement any necessary changes. We are committed to protecting our users’ privacy and strive to uphold a fair and trusted privacy policy.”

For more information on this dating app please read our review of Tinder.

It’s no secret that scammers flock to dating sites. Lovelorn singles are easy targets for con artists looking to lure victims into financial fraud, and over and over again, we hear tales of hackers stealing sensitive personal information to sell to the highest bidder.

What we don’t hear about nearly as often are infractions from the dating sites themselves. In fact, many popular dating services have a poor track record of security vulnerabilities and privacy violations.

Signing up for anything online puts you at risk, but dating services may be some of the most dangerous online destinations. Dating sites regularly collect data on users, then sell the information to marketers. Profiles can remain on company servers for years after subscriptions are canceled. Profiles may also be indexed by search engines, allowing services like Google Image Search to link photos on your profile with your real identity.

Even well-known, trusted dating sites have been guilty of privacy violations over the years. Here are some breaches:

Just when you get comfortable with the Internet again, a new story about a hacking disaster makes headlines. This time, a hacker on a dark web forum called “Hell” claims to have sold the email addresses and plaintext passwords of over 27 million users of dating site Mate1.com.

Last year, Hell made headlines when a hacker posted the personal details and sexual preferences of almost 4 million users of the hookup site Adult Friend Finder. The data dump was discovered months after the hack actually happened, forcing Adult Friend Finder to fess up about the breach.

Motherboard obtained a small sample of the stolen email addresses and passwords. Out of 500 addresses, 498 were linked to accounts on Mate1.com. According to its website, Mate1 has over 36.5 million users.

“Their server was compromised and the MySQL database was dumped,” the anonymous hacker told Motherboard. “I had shell/command access to their server.” The hacker claims to have obtained 40 million accounts initially, then whittled that number down by weeding out the bot logins. “They all had a common password pattern,” they said.

The database of poached user info was offered for 20 bitcoin on Hell (around $8,700) although it’s not clear if that was the actual selling price.

How did it happen? Motherboard found that Mate1 was shockingly open to such an attack. A reporter for the site clicked “forgotten password” on the login page and was sent a full, plaintext password via email. Mate1 made no attempt to conceal the password in any way.

The threat here isn't just that users’ dating accounts may now be compromised. A second danger comes from the fact that victims may have used the same passwords across multiple websites, potentially leaving accounts on Gmail, Amazon - anything, really - now open to attack. Anyone who purchased the database could test their newly-acquired passwords on more valuable accounts, and given the high number of credentials the hacker claims to have obtained, there’s a real chance that a significant number will indeed compromise accounts on other websites.  

The first step, if you have an account with Mate1.com, is to change your password there. You’ll also want to update any accounts that share the same password and check to make sure they haven’t been tampered with.  

This hack won’t make news the way the Ashley Madison hack did (catch up here, here, and here if you missed that story), but it serves as yet another reminder that digital security is a subject to be taken seriously.

For more information on this dating service you can read our full review of Mate1.

Online daters – especially women – often complain about unwanted and lude messages they get from potential matches on dating apps. Some guys are so aggressive with initial contact that they send intimate photos of themselves - the so-called “d*ck pic” - which is offensive to many women, if not even a bit scary. But there is little control dating apps have over messages between two people who swiped right and started communicating, which is why many find it such a frustrating experience.

Dating app The Grade aims to change that. Back in October, they launched the controversial “Peer Review” feature on their dating app, essentially letting other users provide direct feedback for online and offline experiences with other singles on the app.  This move was met with skepticism, with some wondering if angry and jilted matches might lash out and tarnish the reputation of someone else on the site, simply because there was no third party witness. Essentially, users could say whatever they wanted about a date.

The Grade surveyed its users to see how they actually felt about the new feature, and according to the company’s findings, 71% of people believe that Peer Review helps weed out the creeps.

Case in point: the majority of The Grade’s female users believe Peer Review provides a safer and better-informed dating experience. And according to a statement released from the company… it finally eliminates the "d*ck pics." Of the 11% of men who admitted to sending an unsolicited photo of their private parts, 90% reported that they would stop if they knew a match could review them.

Could this lead to better dating behavior – knowing that other people are watching and reviewing you?

It seems likely. The Peer Review feature provides feedback from other singles, mainly to help inform users’ decisions to swipe right or left. In fact, The Grade reports that 78% of singles are more likely to “like” (or swipe right) someone with a good Peer Review grade, while 88% are less likely to “like” someone with a bad Peer Review grade.

Ninety-five percent of The Grade’s users are pro-Peer Review, and 85% of the 15,000 peer reviews submitted so far have been positive. Results show that the most common reason a user would give someone a negative review is if that person was already in an existing relationship or lied about their profile details.

Despite the controversy, The Grade might be on to something – accountability for behavior in online dating. That is something most of us can get behind.

Snapchat put ephemeral communication on the map. Now Buzz is taking it to the next level with a more conversation-focused app.

Buzz dumps self-destructing messages in favor of self-destructing connections. All connections made on the app automatically expire after 72 hours, unless both parties choose to continue chatting. Frequent online daters will immediately see the value in the service.

It's nerve-racking to give your digits to a stranger, even if their profile is perfect and your conversation is going well. Apps like Burner or kik alleviate some fears but aren't perfect solutions. Some only offer paid accounts. Others allow people to find you by username, even though your phone number is private.

Buzz attempts to solve these problems for daters who are extremely conscientous about safety. Users only have to add a photo, name and gender to sign up. Afterwards, the app provides a temporary, unique identifier called a 'Buzz Code.'

Users can add each other in the app using the code. After connecting, a conversation expires after 72 hours unless both users indicate that they would like to continue talking. If both say no, or only one says yes, the connection self-destructs and the parties can no longer communicate.

If users do want to keep the conversation going, it can continue within the app. And, of course, conversations can also stop at any point before the 72 hours if things take a creepy or boring turn.

For now, your Buzz Code is not permanent and can be changed whenever you want. Changing your code does not affect your existing connections. Buzz also plans to offer disposable “vanity” codes as an in-app purchase in the future, which would allow users to create their own handles.

Buzz is the brainchild of Matthew Groves, Brian Albright and Hanna Xu. The three co-founders met while working at the messaging app Tango, where they honed their skills before leaving to launch their own venture.

Buzz has been tested with a small group of beta users, but its real test begins now that it is available to the public. The app's creators hope that online daters’ increased concerns about privacy, combined with the weak points of other messaging apps, will allow Buzz to stand out in its niche.

It's still too early to tell if Buzz will catch on, but its hard not to be intrigued by an app that eliminates the need for fake phone numbers, spam-only email addresses and disposable account information.

Buzz is free to download on iOS and Android.

Let’s face it – our information is out there digitally for all the world to see, or at least those who are interested in Googling our names. But we like to know what kind of privacy controls are still in place for our social media accounts. We don’t want Facebook sharing our posts with just anyone, and perhaps you keep your Instagram account private, too.

But what happens when Facebook starts to encroach on what you like to keep separate? For example, Facebook has a “suggested friends” page where it connects you with people in your social circles – maybe someone you knew back in high school or through a previous employer, and you would like to friend him/her. But what happens when the suggested friend is someone you don’t care to see again – say a Tinder date gone wrong?

Apparently, this is happening more and more, but strangely, no one really knows why. News website Motherboard investigated the link between Facebook and dating apps like Tinder and OkCupid, to see where the connection lies and if they are sharing information unbeknownst to their users.

According to Motherboard, Tinder, OkCupid and Facebook all deny sharing information with each other. Plus, most of these unwanted contacts that are suggested to Facebook users share no Facebook friends nor do they have a shared workplace history or any other connection besides being a potential or previous date.

So exactly how are these apps and Facebook tracking movement (and connections) we don’t necessarily want them to see? Shouldn’t your online dating life be kept separate from your social media circles until you meet someone special and YOU want to include them in your circles? Probably the last person you want to see as a Facebook friend suggestion is your one-night stand from two weeks ago or the date who stood you up.

So why does this keep happening? The answers are unclear. As the companies deny sharing information, there are other ways that your connections can leave a digital trail that makes its way to Facebook.

One such way is through your phone. If you message one of your dates, even if you don’t save the contact information, depending on your Facebook settings the service is able to pull contacts you have messaged and called on your phone to help expand your social circles. Motherboard found one such notice from Facebook while testing this out. The article says: “Facebook does say it bases its suggestions in part on ‘imported contacts,’ but this is something users have to opt into on the mobile app or desktop... I don’t ever remember agreeing to import my contacts, and yet when I checked my “invite history” page I had 900+ contacts saved, apparently were continuously syncing and updating, that I promptly removed. Facebook warned this could make my friend suggestions ‘less relevant.’”

Another reason could lie in Facebook searches. Chances are before a date you want to look up some information about a person over social media, doing due diligence to get to know the person you were about to meet. Perhaps you searched for them on Facebook, which would mean they could show up as a suggested friend – after all, Facebook knows you looked for them, not that you were interested in dating them.

At any rate, these digital connections will continue to increase, so it’s important to be prepared to see people you may not want in your suggested circles. If nothing else, just delete.