FaceApp's viral success proves we will never take our digital privacy seriously

CNN's Hadas Gold looks at the security concerns surrounding "FaceApp," a smartphone app made by a small company in Russia that allows users to age their selfies by decades, because it's user terms grant "full access" to personal photos and data.

Posted: Jul 18, 2019 1:36 PM
Updated: Jul 18, 2019 7:00 PM


In early 2017, a service called FaceApp received a wave of press for using artificial intelligence to transform pictures of faces, making them look older or younger, male or female, or adding a smile to appear happier.

This week, FaceApp once again made headlines as celebrities, including the Jonas Brothers, Drake and Dwayne Wade, appeared to use the app to show what they might look like when they get much older. Enough people rushed to download the app and see their own selfies turn gray that FaceApp is currently the top free app in Apple's App Store.

By Wednesday morning, however, there were growing privacy concerns about the app. As one breathless headline in a New York tabloid put it: "Russians now own all your old photos."

The fears came from stitching together scary sounding but unfortunately not uncommon wording in the app's terms of service with an unverified -- and now deleted -- claim from a developer on Twitter about the app "uploading all your photos" and the simple fact that the company is based in St. Petersburg, Russia.

The FaceApp episode highlights how, after more than a year of high-profile privacy scandals in the tech industry, consumers still don't adequately scrutinize services before handing over their sensitive personal data. At the same time, it's a reminder of how little we understand how companies collect our information and what rights they have to it.

Joshua Nozzi, the developer who first raised alarms about FaceApp, and other security researchers later knocked down the initial fear that FaceApp is covertly harvesting your entire smartphone camera roll. Likewise, the fact that a company is based in Russia doesn't automatically mean it's a tool of the Russian government.

"Most images are deleted from our servers within 48 hours from the upload date," the company said in a lengthy statement provided to TechCrunch addressing the privacy concerns. (Representatives for FaceApp did not immediately respond to our request for comment.)

What remains concerning, however, is the language in the app's terms of service. In one densely-worded section, the company informs users that they "grant FaceApp a perpetual, irrevocable, nonexclusive, royalty-free, worldwide, fully-paid, transferable sub-licensable license to use, reproduce, modify, adapt, publish, translate, create derivative works from, distribute, publicly perform and display your User Content and any name, username or likeness provided in connection with your User Content in all media formats and channels now known or later developed, without compensation to you."

Translation: FaceApp can effectively do what it wants with your selfie. But this puts FaceApp in pretty good company. Other prominent tech companies have inserted similarly concerning language into terms of service over the years to assert their rights to use names, pictures and other content shared by users as they please.

"If you share a photo on Facebook, you give us permission to store, copy, and share it with others," Facebook says in its own terms of service.

And yet, we keep sharing first and asking questions later, if we ask them at all.

In between FaceApp's first brush with virality and its explosion in popularity this week, there have been a number of tech privacy scandals, any one of which should arguably have been enough to make people at least reconsider how much information they share with tech companies.

Data collected through a seemingly benign personality test on Facebook was provided to Cambridge Analytica, a controversial data firm that worked for Donald Trump's presidential campaign. A popular period tracking app was found to be sharing data with Facebook. Amazon reportedly employs a global team to listen when you speak to its Echo smart speakers.

But the moment we hear about a flashy new service that can make our selfies look older, or match them with a famous painting, we are quick to throw caution to the wind and hand over the photo of our face, without knowing for sure where it's stored or what it may be used for.

Tech companies certainly deserve criticism for their data privacy practices, but so do we.

Article Comments

Mason City
Overcast
68° wxIcon
Hi: 85° Lo: 67°
Feels Like: 68°
Albert Lea
Overcast
68° wxIcon
Hi: 84° Lo: 66°
Feels Like: 68°
Austin
Overcast
70° wxIcon
Hi: 86° Lo: 68°
Feels Like: 70°
Charles City
Clear
72° wxIcon
Hi: 84° Lo: 67°
Feels Like: 72°
Rochester
Overcast
68° wxIcon
Hi: 84° Lo: 66°
Feels Like: 68°
Today kicks off somewhat of an active pattern with low severe weather risks for the work week
KIMT Radar
KIMT Eye in the sky

Latest Video

Image

The ongoing need for blood donors

Image

Rochester Salvation Army store to close

${article.thumbnail.title}

StormTeam 3: Tracking returning rain

Image

KoMet volleyball sweeps Byron 3-0

Image

Latest Iowa AP football poll

Image

Dover-Eyota gets past St. Charles

Image

Talking about homelessness

Image

Getting to see the new electric bus

Image

Chris' PM Weather Forecast 9/17

Image

Float therapy to reset your brain

Community Events