Paying for Chrome with Personal Data

Already king of the U.S. search engine hill, Google branched out into browser software with the recent release of Chrome. Unfortunately, Chrome's improvements, while alluring, come at a considerable cost in private information. Two data collection mechanisms, "Google Suggest" and usage statistics gathering, will collect massive amounts of data whenever we use the browser.

Chrome does provide some options that give users the ability to opt out of most data collection, but the value of these options is limited by the lack of disclosure about the actual extent to which private information is captured. Better yet, a free open source alternative, Iron, provides most of the features of Chrome while disabling all data collection.

How Chrome Collects Information About You

Google Suggest

Google Suggest is a new Chrome feature that suggests possible completions for partial search queries, such as when you misspell a Web address or otherwise encounter an error. This feature comes at a high price paid with personal data, however. Every keystroke typed into a Google Suggest-enabled area is sent to Google, along with your IP address and any Google account information stored in cookies on the user's computer.

While Google Suggest is found in several products, it is particularly problematic in Chrome because Chrome features only a single input area, called the OmniBox, for entering both URLs and search queries. Chrome users are thus likely to send information about all of their Internet activity to Google, not just search queries.

Usage Statistics and Crash Reporting

Users who volunteer to "help make Google Chrome better" may be giving up more than they realize. Checking this box causes Chrome to send "usage statistics and crash reporting" information, which may include data about Web pages visited and even other programs running on the computer if Chrome crashes. This information is accompanied by a unique ID tied to the user's installation of Chrome, creating yet another record that could be tied to a specific person.

How to Avoid Paying for Chrome with Your Private Information

#1: Vote with Your Mouse and Try Iron

Show companies that you don't want to pay for a browser with your private information by trying Iron, an open source modification to Chrome which removes all of the reporting and data collection functions. Iron can be downloaded here.

Developed by a German company, SRWare, Iron has almost all of the functionality of Chrome, but has removed the code that causes Chrome to "phone home" with usage information or Google Suggest data. While Iron's location/search box does not make suggestions as you type and Iron does not provide a (Google-generated) list of suggestions, this is a relatively small price to pay to keep control of your data.

#2: Opt Out of Google Suggest

After not initially disclosing its privacy policy concerning Google Suggest statistics, Google has responded to some privacy criticisms by stating that that it would (1) retain only 2% of all statistics gathered from Google Suggest and (2) anonymize these statistics within 24 hours after collection. There are still questions as to how thoroughly Google will anonymize this data, however. Until these questions are resolved, take advantage and opt out of Google Suggest and show Google that you care about how your data is collected and stored.

To disable the Google Suggest function (and prevent Chrome from reporting keystrokes as they are typed):

• Right-click in the OmniBox.
• Select "Edit search engines."
• Clear the check box beside "Use a suggestion service to help complete searches and URLs typed in the address bar."

#3: Don't Send Usage Stats and Crash Reports

The "usage statistics and crash reporting" collection requires users to opt in, clearly labeling it as "optional" on the download screen and providing an interface by which users can disable (or enable) the functionality. Unfortunately, Google does not clearly disclose the full extent of information that might be collected, nor that a unique ID that could be traced back to you would be included. Until Google cures these problems, opt out of statistics reporting so that you are not giving Google more than just a hand with improving Chrome.

To disable usage statistics and crash reporting:

• Select the Tools menu (the wrench in the upper right hand corner.
• Select "Options."
• Select "Under the Hood."
• Clear the check box beside "Help make Chrome better by automatically sending usage statistics and crash reports to Google."

Our private information should stay private. As internet users, we deserve the right to control access to our personal information and activities online. So, think before you click on Chrome and stay tuned to this blog for more ways that you can retain – or regain – control over your personal information.

Chris Conley is the Technology and Civil Liberties Fellow with the ACLU of Northern California.