Does Niantic Sell Your Personal Data?

The short answer is no, Niantic claims not to directly sell users‘ personal data to third parties without consent. However, their privacy practices still raise questions about how user data may be utilized behind the scenes.

As the developer behind smash-hit augmented reality (AR) games like Pokémon GO and Ingress, Niantic has access to an enormous amount of user data. With millions of active users worldwide, Niantic collects a wealth of information that could be extremely valuable for advertisers and data brokers.

This article provides a comprehensive look at what data Niantic collects, what they do with it, and steps you can take to better protect your privacy.

What Types of User Data Does Niantic Collect?

Niantic collects a wide range of user data through their AR games, including:

Location Data

• Precise real-time GPS coordinates showing your movement and locations visited.

• Addresses of homes, workplaces, and frequented locations based on movement patterns.

• Travel routes and modes of transportation used.

This provides incredibly detailed location tracking far beyond what many other apps collect. According to privacy firm Disconnect, within 15 minutes of playing Pokémon GO, the app had already collected and transmitted more location data than most apps gather in an entire week.

Personal and Account Data

• Personal info like your name, email, age, gender, and profile photo.

• Potentially sensitive data like date of birth and payment info if making in-app purchases.

• Account history including usage, activity logs, connections, and more.

Device and Usage Data

• Device brand, model, operating system, screen size, app version and usage logs.

• Session length, frequency, in-app actions, feature usage, and browsing data.

• Crash reports, performance data, and other analytics.

This data allows them to fingerprint devices and better understand user behaviors.

Derived Data and Metadata

• Location metadata like places visited, movement patterns, and frequent locations.

• Behavioral metadata like personality traits, relationships, and more inferred from usage patterns.

• Demographic predictions about age, gender, socioeconomic status, and more based on analytics.

By combining and analyzing all this data, they can make inferences about who you are.

What Does Niantic Do With All This User Data?

Niantic uses the wealth of data they collect for the following purposes according to their privacy policy:

• Develop, operate, improve, and personalize their products and services. User data enables features like adventure sync, maps and locations, lures, friend lists, and more.

• Serve contextualized and relevant content like nearby gameplay opportunities.

• Communicate with you via emails, push notifications, in-app messages about game updates, live events, offers, new features, and other news.

• Show you targeted advertisements within their apps. They partner with ad networks to serve ads based on your usage patterns, location, inferred interests, and more.

• Conduct analytics and research to understand and predict user behavior, improve game economics like monetization, tune gameplay performance, and support business operations.

• Comply with legal obligations like paying taxes or disclosing information to authorities when compelled.

• Create anonymized and aggregated datasets that may be sold to or shared with third parties for broader industry and market analysis, demographic profiling, and other commercial purposes. Even aggregated or anonymized data can provide valuable insights into user behavior.

Clearly, your data is essential for Niantic to maintain and expand their gaming empire. It enables them to improve their products, optimize revenue opportunities, and fuel their continued growth.

Does Niantic Sell Your Personal Data?

Niantic claims not to sell, rent, or share your personal data with third parties for marketing purposes without your explicit consent. However, their privacy policy leaves several potential loopholes:

• They may share data with third party service providers who process data on their behalf to operate their services. These providers could utilize data for their own purposes under their own privacy policies.

• If Niantic goes bankrupt, is acquired, or merges with another entity, your data could be sold or transferred as a business asset.

• While they don‘t sell your direct personal info, they do acknowledge creating aggregated and anonymized data sets that may be sold to third parties for analysis or commercial use. Experts say truly anonymizing granular data like locations can be challenging.

• They state users own their content, but Niantic licenses user content under a non-exclusive, perpetual, irrevocable, royalty-free, sublicensable, worldwide license to use, reproduce, modify, adapt, publish, translate, create derivative works from, distribute, perform and display such content. This allows them broad leeway to utilize photos, screenshots, posts, etc.

So while Niantic pledges not to directly sell your personal profile and data without permission, they still have concerning levels of access and rights to your information.

Controversies and Investigations Around Niantic‘s Data Practices

Despite their public pledges to protect user privacy, Niantic has faced scrutiny from regulators, lawmakers, and privacy advocates around their data collection practices:

• Norway Data Protection Authority Investigation: Norway‘s data protection authority investigated whether Niantic had proper legal basis to gather and use personal data under GDPR guidelines. The agency found Niantic could legally process user data by claiming it was necessary for contractual purposes like delivering game services.

• US Senator Inquiry: Senator Al Franken sent a letter to Niantic CEO John Hanke raising concerns about privacy and data collection from children. He questioned how data may be used for targeted marketing and location tracking of users under 13 years old.

• FTC Complaint: The Electronic Privacy Information Center filed a complaint with the US Federal Trade Commission alleging Niantic was using Pokemon GO to collect, use, and disclose personal data from millions of children without proper parental consent.

• Dutch Privacy Group Investigation: The Privacy First Foundation reviewed Pokémon GO and found concerning practices like enabling broad user tracking by default without consent, accessing contacts, photos, and camera for unnecessary purposes, and obscuring how data is exploited.

• Lawsuit Alleging Violation of BIPA: A class action lawsuit filed in federal court alleges Niantic violated Illinois‘ biometrics privacy law by collecting facial geometry from users‘ mobile device cameras without obtaining informed written consent. The case is still ongoing.

While Niantic maintains their data practices are legal and aim to be transparent, they continue facing backlash from critics arguing they are not doing enough to protect user privacy — especially minors. Their actual data handling may not fully match their public communications.

Niantic‘s Revenues and the Value of User Data

What motivates Niantic‘s extensive data collection? User data powers key opportunities to generate revenue:

• In-App Advertising: By targeting ads based on location, demographics, and interests, Niantic earns money from ads displayed within their apps. Users‘ data makes ads more relevant, valuable, and profitable.

• Sponsored Locations & Events: Companies like McDonald‘s, Verizon, and Samsung pay Niantic to make their locations or events into key spots within games to drive foot traffic. Precise location data on gameplay activity enables this.

• In-App Purchases: By analyzing player profiles and activity, Niantic can better monetize through selling premium items, upgrades, PokéCoins, and more.

• Market Research: While they may not directly sell data, monetizing insights derived from user data is a core part of their business model.

User data is clearly the fuel that powers their entire monetization engine. This gives Niantic tremendous financial incentive to collect, analyze, and retain as much data as possible.

Steps Users Can Take to Better Protect Their Privacy

If you use Niantic apps but have concerns about data privacy, here are some best practices to limit collection and take back some control:

• Only enable location permissions when actively playing and disable background collection in device settings when not using the app.

• Avoid linking social media accounts that provide additional personal info.

• Use a disposable email and unique username that does not reveal your identity.

• scrutinize Niantic‘s privacy policy and opt out of data uses like targeted advertising whenever possible.

• Frequently clear cache and cookies to wipe user activity and some analytics data.

• Minimize sharing of sensitive information like real date of birth or payment info.

• Review profile data Niantic has stored on you and edit or delete any unnecessary personal details.

• For maximum protection, request full account deletion to purge your data from Niantic‘s systems. But know this is irreversible.

• Avoid playing near sensitive locations like home, work, school, or doctor‘s offices that reveal more about you.

• Use prepaid SIM cards not tied to your identity when playing Pokémon GO or Ingress.

• Lobby regulators and lawmakers to investigate Niantic‘s practices and strengthen data privacy protections.

With vigilance and caution, you can still enjoy Niantic‘s apps while taking steps to safeguard your personal information and location history. But ultimately, legal reform and oversight may be needed to force companies to improve data privacy practices.

The Ethics of Collecting and Monetizing Location Data

While some data collection enables positive functionality for users, Niantic‘s practices raise broader ethical questions about individuals‘ rights to:

• Freely explore and move about the world without unwarranted surveillance.

• Control how their personal data is gathered and used for commercial gain.

• Understand, consent to, and constrain how private companies monitor and profile them.

• Avoid manipulative behavioral nudges driven by extensive analytics on their movements and activities.

• Access public spaces without having their presence digitally tracked, recorded, and analyzed.

• Maintain privacy, anonymity, and freedom of association away from a company‘s watchful eyes.

• Push back against the normalization of pervasive data extraction by tech giants seeking profit.

Comprehensive location tracking in particular can feel invasive and undermine personal autonomy. While legal, companies like Niantic should consider ethical obligations beyond just what data they can legally get away with extracting.

Comparisons to Other Apps Collecting Location Data

To put Niantic‘s practices in context, it helps to compare them to other apps tracking user locations:

• Ridesharing apps like Uber and Lyft request location access only while using the app to hail rides and track trips. Niantic collection is far broader.

• Many weather apps only want approximate access to your city, not precise coordinates at all times like Niantic games.

• Fitness apps like RunKeeper justify collecting GPS during workouts to track distance and pace. But Niantic apps track everywhere.

• Mapping apps require location data to provide navigational services. But they typically don‘t track and store history of everywhere you go.

• Even many apps focused on habit formation through location prompts don‘t require the same level of real-time tracking Niantic relies on.

In general, Niantic‘s location data practices significantly exceed what most apps focused on other functions require. Their retention and commercial use of this data at massive scale makes them a uniquely valuable trove for analysis.

Final Thoughts

Niantic certainly isn‘t alone in leveraging user data to power its business model. Many digital companies exploit the data they possess.

But the scale and intimacy of the location tracking and usage data Niantic collects sets it apart as an industry leader in extracting value from user activities. Their actions reveal core tensions around individuals‘ privacy rights coming into conflict with private companies‘ desire for data to enhance profits.

While Niantic states they do not directly sell your personal information, their actual data practices merit extra vigilance and scrutiny. Users should inform themselves and exercise caution sharing their data whenever possible.