Privacy Concerns Surface Following Mozilla Firefox Updated Terms of Service

On February 26, Mozilla updated the Firefox browser’s Terms of Use and Privacy Notice for the first time since its release. The latest update grants the company access to all data processed through its browser. Although the Firefox browser has been a reliable tool for users who care about privacy because of its commitment to protecting personal data, this update has raised concern, particularly for privacy-oriented users.

Terms of Sevice Outlines Firefox Data Ownership

The updated Terms of Service (ToS) granted the company a nonexclusive, royalty-free, worldwide license for any data processed through its browser. The company also removed references to not selling data from the Firefox FAQ and update screen [1]. This change petrified privacy-conscious users, as conspiracies arose that Firefox might join other browsers that sell user data and sell it to third-party advertisers. One critic, Mental Outlaw–a privacy-focused Youtuber–expressed concern about the update. He theorized that the change allows Firefox to cheaply train its AI model, Mozilla.ai., explaining that users could not fight back against the company using their data in court as the Terms of Use gives Mozilla the right to freely use and profit off of user data, among other things [2].

Theo, a software developer and tech YouTuber, also expressed his concern about how Firefox owns data processed through its browser, including search terms, visited pages, and uploaded files. Theo firmly believes that browsers should not have this kind of access despite not being a privacy-focused person [3].

Firefox Clarified Its Terms in Response to Backlash

In response to the backlash, Firefox updated its blog post [4]. Mozilla clarifies that the company needs a license to “make some of the basic functionality of Firefox possible.” They continued that the new terms do not give the company ownership of the data for any purpose outside of the scope of the Privacy Notice. For instance, Reddit and Firefox user Critical_Phantom argued that it’s impossible to be invisible to the Internet as users can search for themselves and see that their data is already out there [5]. However, critics maintained that the only data that Firefox should get is only data typed on the websites users visit.

Although many Firefox users were concerned about how Firefox owns user data, some users argue that the backlash is an overreaction. As Reddit user Saphkey puts it, Firefox users must give the browser permission to do its essential functions by processing their data. They also note that Firefox lets users choose whether to store/send data, such as credit card information [6]. Thus, they asserted that the reaction is purely speculative.

Firefox also explained that the ToS was updated in accordance with the California Consumer Privacy Act (CCPA), giving consumers more control over the personal information that companies collect about them [7]. The act defined “sale” as “selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating… a consumer’s personal information by the business to another business or a third party for monetary or other valuable consideration.” Users claimed that this clarification reveals that Firefox admits to selling user data. Thus, the update makes Mozilla look even worse than before.

Why The Firefox Update Matters in Terms of Privacy

User privacy has become a sensitive topic in the contemporary era, where data is the new oil. User data gathered by apps like Firefox plays a key role in digital advertising. This data reflects a person’s preferences, and because of this, data brokers such as Acxiom and Oracle prefer to buy it to create personalized ads for consumers [8]. Customized ads have a higher click-through rate (CTR) than their counterparts, resulting in increased revenue for advertisers [9]. These ads could also convince users to buy products they don’t need.

Another concern is how Mozilla could utilize data to train its AI model to be more effective. This model could analyze browsing behaviors by delving into personal data and then use that to provide individual recommendations on which websites to visit or to quickly answer questions without additionally searching. Such a feature could improve user experience; however, like targeted ads, the feature invades a user’s privacy to do this. Resulting in the model, and subsequently, Mozilla and anyone else with the data, knowing everything about you: your likes, dislikes, shopping habits, etc.

Users need to be aware of how they interact with applications in the digital space. Anytime you allow a company to collect your data, you risk your data later being used for nefarious purposes, such as scams and identity theft. Users must be concerned regarding the ethics of how companies collect data. Protect yourself from malicious companies and promote privacy by demanding transparent data usage and processing.

References

[1] https://github.com/wen-2018/bedrock/commit/
[2] https://www.youtube.com/watch?v=E4JOnQY_qboe948089ced38c263b1c3ae9fe27bd7936587292f#diff-5c93e7e7cbfacf0d6a8b3bc6d46b345019653051089e00d6fe5e09a531a79442
[3] https://www.youtube.com/watch?v=W1kE3qA8FcA
[4] https://blog.mozilla.org/en/products/firefox/update-on-terms-of-use/
[5] https://www.reddit.com/r/firefox/comments/1j0l55s/an_update_on_our_terms_of_use/
[6] https://www.reddit.com/r/firefox/comments/1iyuvjf/introducing_a_terms_of_use_and_updated_privacy/
[7] https://blog.mozilla.org/en/products/firefox/update-on-terms-of-use/
[8] https://www.newamerica.org/oti/reports/special-delivery/the-role-of-data-in-the-targeted-advertising-industry/
[9] https://www.adlucent.com/resources/blog/71-of-consumers-prefer-personalized-ads/