After TikTok’s Sale Are we Really Safer? Privacy Analysis

Hello everyone,

I wanted to share my analysis regarding the changes in TikTok’s privacy policy after the sale of a large portion of the company to American firms. The change was justified as improving user safety, but the documents show a different picture.

Location Collection:

Before the sale: Approximate location was collected (e.g., based on IP address or SIM).

After the sale: A new clause allows TikTok to collect precise GPS location if the user enables it. Approximate location is still collected.

Regular and Sensitive Personal Data:

Before the sale: There was uncertainty regarding sensitive data (ethnicity, gender, immigration status); it was not always explicitly listed.

After the sale: It is explicitly stated that this sensitive data is collected, without any option for the user to opt out.

AI Usage:

Before the sale: General, unclear if TikTok collected user prompts or AI interactions.

After the sale: Clearly stated that interactions with AI are collected to improve algorithms and personalization.

External Advertising:

Before the sale: External advertising usage was unclear.

After the sale: Explicit - data is shared with third-party partners for personalization and advertising, without user control.

Data Storage (Data Residency):

Before the sale: Data was stored globally, mostly outside the U.S., with uncertainty regarding government access.

After the sale: Most U.S. users’ data is stored on U.S. servers. Under the CLOUD Act, the U.S. government can access this data via legal orders - creating a higher privacy risk.

Summary:

Although the new policy appears more transparent, users are not actually safer. In several areas, the situation may be worse, especially concerning sensitive personal data and government access.