Google's Gmail Already Under Fire

Today's Best Tech Deals

Picked by PCWorld's Editors

Top Deals On Great Products

Picked by Techconnect's Editors

The gigabyte storage capacity and long memory of Google's planned Web-based e-mail service are making it a big target for privacy campaigners--and the name, Gmail, could soon be the subject of a trademark dispute, too.

A coalition of 28 privacy and civil liberties groups wrote Google founders Sergey Brin and Larry Page a letter this week urging them to think again about the service, which they say sets potentially dangerous precedents for the automated scanning of private communications. The service may conflict with European privacy laws, and should be suspended until privacy issues are addressed, they wrote.

The letter's signatories include the World Privacy Forum, the Privacy Rights Clearinghouse, Bits of Freedom, the Consumer Federation of America, the Electronic Privacy Information Center, the Foundation for Information Policy Research, and Privacy International.

Message Scanning

Google announced the Gmail service on March 31. The Mountain View, California, company says it will scan the text of all incoming e-mail in order to place appropriate advertisements. This is a bad idea, according to the privacy campaigners, because "The scanning of confidential email violates the implicit trust of an email service provider."

Many e-mail systems already scan message content in an effort to block spam, but inserting ads in incoming e-mail is fundamentally different than removing harmful viruses and unwanted spam, the campaigners say. Inserting ads on the fly requires a chain of directories, databases, and logs, and a long memory. Those auditing trails could be correlated with data collected from Google's search site, or social networking site Orkut, they say.

Google Vice President of Engineering Wayne Rosing is trying to reassure the campaigners: The Gmail user's name is not sent to the ad server, and when the system scans the e-mail, it does not look at the To or From fields, only the subject and body of the mail, he says.

Whatever the details of Gmail's scanning process, it sets dangerous precedents and reduces users' expectations of the privacy of e-mail, the civil liberties groups say.

"These precedents may be adopted by other companies and governments and may persist long after Google is gone," they say.

One of the letter's signatories emphasizes this danger.

"The mail is not just being scanned, it's also being indexed, and governments might want to know if a word is in the index, and if so, who used it," says Maurice Wessling of Bits of Freedom, a civil liberties organization in Amsterdam.

Retaining Data

Gmail will offer users a gigabyte of online storage, enough that they will never need to delete another message, according to the service's Web site. Indeed, the Gmail privacy policy warns that messages, even if "deleted," may still be stored in the system long after users have closed their account--something that bothers the privacy campaigners.

"The unlimited period for data retention poses unnecessary risks of misuse," they write, adding that Google's policies on retaining data and correlating it between business units are problematic, lacking clarity and being too broad in scope. The company should set clear limits on how long it will retain user account, email and transactional data, and provide clear written policies about data sharing, they write.

Setting out these policies clearly and precisely is vital if Google is to remain within the law: As it stands, they say, Gmail may conflict with a European Union directive on privacy that users' consent must be informed, specific, and unambiguous.

Rosing says Google believes its policies are clearly laid out and protect users' privacy. "We're committed to protecting user privacy to the maximum extent that we can do while at the same time abiding by the law," he says.

However good Google's intentions, they're worth nothing if the company folds, says one observer.

"There have already been cases where dot-coms with a sound privacy policy went bankrupt and had to sell their user database to companies with worse privacy policies," says Christian Mock, a spokesperson for Austrian campaign group Quintessenz, which styles itself an association for the re-establishment of the citizen rights in the information age.

No one knows the likelihood of Google going under, since the company is not quoted on the stock exchange and nobody knows about its financial data, Mock writes in an e-mail.

Naming Rights

Google may have some other protecting to do. Days after it announced the details of Gmail, its trademark is already being disputed. Following Google's use of the name Gmail in a press release, financial service provider The Market Age PLC (TMA) registered its interest in the name with the U.S. Patent and Trademark Office, the British company says in a news release.

TMA launched a Web-based e-mail service called Gmail in mid-2002 as part of an online share price and currency exchange rate analysis service offered by subsidiary Pronet, it says. Pronet's Gmail allows subscribers to annotate stock price charts and forward them by e-mail. The company is seeking advice on how to protect its intellectual property, it says.

Stephen Lawson of the IDG News Service contributed to this report.

Note: When you purchase something after clicking links in our articles, we may earn a small commission. Read our affiliate link policy for more details.
Shop Tech Products at Amazon