Better teen privacy in Google's Buzz

Google's Buzz, which makes its Gmail much more social, didn't get off to a great start, where kids' privacy was concerned. But Google has made serious strides toward fixing that, and the "Buzz Teen Safety Tips" video it just put on YouTube takes 2 minutes to show you what I mean. If your teens are using Buzz (the minimum age is 13, as with most social Web services), you might watch the video to see if there are privacy features you'd like to talk with your kids about. The five key points are 1) they can choose to make only their first and last name visible on the public profile they have to set up to use Buzz (they don't have to include a photo), 2) whatever they post is not only visible to all their followers but could also appear in Google search results; 3) BUT they can edit and delete their own posts, delete any comments on their posts, and delete comments they've made on other people's posts; 4) Buzz sends them an alert whenever someone starts following them, and they can choose to block that person (it's good to know that Buzz doesn't let the person know if they do block him or her); and 5) they can disable Buzz altogether or hide it in Gmail but still use it on their phones. Here's my last post on Buzz and a little more detail on the subject from my ConnectSafely co-director Larry Magid at CNET.

Foursquare & other geolocation apps: For young adults, not kids

More and more, I'm seeing tweets about people becoming mayors of coffee shops in my Twitter stream. They're playing Foursquare on their phones, which pushes their "checkins" or location disclosures out to their Twitter followers. Foursquare is part cellphone social-mapping game, part Yelp (another way to find food, drink, or friends using your phone's geolocation technology). "A large number of foursquare users send their checkins to Twitter and/or Facebook, and therefore make their location available to an audience much larger than just their foursquare friends," says Foursquare. It's not for everybody. Someone over at eModeration in the UK (a company that helps keep kids safe in virtual worlds) thinks it's kind of dumb. It's really not for children. But there's a safer way to play it, if they insist. If yours do, ask them not to use their real photo; you don't want them identified by their photo in shops or restaurants where they "check in." They can just post a face shot of their avatar or dog or favorite cartoon character in their profile. One of the appeals for kids (young and old) is that, like kids' virtual worlds that sell real-world plush toys, Foursquare has real-world objects that serve as awards or "nerd merit badges" representing "the virtual achievements you get for checking in to places using Foursquare," Mashable reports. In other words, you get points for showing up at your favorite Starbucks, points which can add up to becoming its "mayor."

This morning I testified at a US House of Representatives joint-subcommittee hearing on "The Collection and Use of Location Information for Commercial Purposes" – the privacy and safety implications of just this sort of technology. There definitely seemed to be a consensus in the hearing room that consumer privacy law needs to be updated and that, to be effective over the long term, the updating shouldn't focus on any single technology. I completely agree with that because the people who used to have control over how cellphone users' location information is used – the mobile carriers – no longer always do. More and more, control is spread out across the spectrum: carrier, operating system provider (e.g., Apple, Google, Microsoft), app developer, and consumer (because, with apps like Foursquare, we're disclosing our own location). It's all becoming a mashup - which is why parents need to know that all these apps on iPhones and iPod Touches allow kids to share their location.

So – if your child's phone is on a family plan behind your password with, say, AT&T or Verizon Wireless, and if you don't use the parental control that blocks app downloads (something to consider if they're not telling you what they download) – it's a good idea periodically to check what apps your kids have on their phones and ask them what these apps do. If they share your child's location with anyone besides you, you'll want to have a conversation about who's on their contact list. Make sure it's only friends they know in "real life." Certainly all this goes, too, for iPod Touches, which are not on family cellphone plans. As for Google Buzz, which is both phone- and computer-based, see my post on that; parents will want to help their kids see the value of making their conversations "private," or just among friends, which points to a negotiation: All participants in the conversation need to agree that it's just for them and adjust privacy features accordingly.

[BTW, Foursquare isn't the only location-based cellphone app. Others are Brightkite and Whrrl (see this blog post); Gowalla, which isn't a social game (see this blog post); and the cellphone service loopt, which is becoming more app-like (see Mashable.com).]

Google Buzz & kids' privacy

Because Buzz is brand-new and a hybrid of Gmail, micro-blogging, cellphone social mapping, and social networking, we're all at the early stages of figuring out its implications for kids – a lot of whom use Gmail. Yesterday Charlene Li, a mom and well-known social-media-industry analyst, blogged that she had discovered her 9-year-old daughter was using and really enjoying Buzz. Using it from her computer (people can also use Buzz on Apple iPhones and Google Android phones), the child had had one conversation on it with her friends. The problem was that the kids didn't know their conversation was public. Li wrote that "the easiest thing to do as a parent is to simply disable Buzz, meaning that the Google profile and all followers are deleted – permanently" (go to the bottom of your child's Gmail page and click "turn off Buzz," which will take you to where you can disable it). But because Li's daughter enjoyed Buzz so much, she seems open to "managing groups, privacy settings, etc." so her child can continue using the service. "We’ll give it a try," she writes, "but unless her friends also keep the conversation private, it will all be for naught." Ensuring that with all the other kids and their parents could be quite a project. Privacy is now a collective effort – by users too, not just providers (see "Collaborative reputation protection").

Last summer Google agreed, in response to a complaint by one of the FTC's "safe harbors" (organizations that help it enforce the Children's Online Privacy Protection Act, or COPPA), to require a birth date at registration to Gmail and, if a user indicates he or she is under 13, a session cookie to block the user from re-registering with an earlier birthdate. That's a start, but what this issue points to is the impact on children's privacy of combining social-media products within companies and connecting them across networks such as Facebook Connect. Perhaps the FTC's forthcoming review of COPPA rules and enforcement will address this emerging issue. But we feel the brilliant software engineers and project managers who develop these products need to wear their parent hats more, companies need to be thinking through children's privacy from the earliest developmental stages, and industry best practices need special sections or clauses addressing child privacy and safety. [See also "Google Buzz isn't exactly humming along" in the Wall Street Journal; "Does Google Buzz violate COPPA?" by Marquette University law Prof. Bruce Boyden (the jury's still out, he indicates); and my post at Buzz's launch, "Major buzz about Buzz, but not about its safety."]

Major buzz about Buzz, but not about its safety

Google's Buzz, which it unveiled today, means to make Gmail much more social – adding updates and photo- and video-sharing; turning emailers into Twitter-like "followers"; and making all of that local to you (and you to it) via your cellphone, according to hundreds of news articles including PCWorld's. That last bit concerning geolocation raises some safety concerns, writes ConnectSafely.org co-director Larry Magid in CNET, where he posted an audio interview with Google co-founder Sergey Brin. Writing also in the Huffington Post, he says "Mobile Buzz, which will work initially on the Apple iPhone and Google Android phones," taking advantage of their GPS tech "so that users will not only be able to update their status but their location as well." Of course Buzz will work with Google maps. Will that social pinpointing capability be something people have to consciously turn on? I hope so, because young people don't always stop for safety or privacy reality checks in the rapid-fire back-'n'-forth of teen texting and socializing. But how much will that help even so? These products like Buzz are all just social convenience tools to teens. Teens don't think as much as we do about separate stand-alone products, services, or devices, each with its own privacy policy, set of terms of service. It's all much more of a means to the much more important end of staying connected and maintaining mindshare with peers. That's a challenge when companies just want to throw these various tasks at the lawyers and be done with it. The good news is, Google's integrating all of its Buzz-related products for fixed and mobile use; maybe they'll have integrated safety and privacy too.