Survey: Facebook, Google privacy policies are incomprehensible

Survey: Facebook, Google privacy policies are incomprehensible

Summary: Facebook and Google privacy policies have been found to be more confusing than complex documents such as government notices, credit card agreements, and bank reward-program rules.


Facebook and Google privacy policies are so confusing to users, they have been compared to, and found to be worse than, credit card agreements and government notices. After reading the privacy policies, 33 percent of respondents felt less comfortable with how Facebook collects and stores information about activity, and only 47 percent of Google users felt comfortable. The documents result in consumers having a very poor understanding of how Facebook and Google track and store user information and activity, and how information is shared and with whom.

In similar studies, 70 percent of respondents correctly answered comprehension questions for government notices and 68 percent of respondents provided the right answers for credit card agreements. The data comes from a survey of more than 400 respondents conducted by global strategic branding firm Siegel+Gale. On a scale of 0 to 100 (a score of 80 indicates good comprehension), respondents scored 39 and 36 for Facebook's and Google's privacy policies, respectively.

After reviewing the policies and answering Siegel+Gale's questions, 36 of Facebook respondents and 37 percent of Google respondents said they would change their online behavior by using these sites less, adjusting their privacy settings and clearing their search histories. Despite Google's recent consolidation of its various privacy policies, respondents still expressed more discomfort after reading the new, condensed policy.

Here are three key findings for Facebook:

  • A major comprehension issue is requiring users to leverage an Application Programming Interface (API) to understand how their information is used. Less than 40 percent of Facebook users understood how an API can be used to access and view public information.
  • Only 15 percent correctly understood what happens to their accounts after they're deleted on Facebook.
  • Just 20 percent could correctly identify how to block outside apps and websites from accessing their information on Facebook.

Here are three key findings for Google:

  • 23 percent of Google users understood that their profile is visible to anyone online.
  • More than half were not aware that the privacy policy also applied to their use of Google Talk, Google Maps, YouTube, and Blogger.
  • Only 38 percent understood that Google connects search activity to a user's IP address whether or not they sign into a Google account.

Siegel+Gale suggests the two Web giants improve online privacy policy documents by:

  • Succinctly conveying what information is collected, how the information is stored and shared, and how a user can manage their privacy. Consolidation is not the answer, nor is asking users to read detailed information intended for web developers, as Facebook does when it directs users to information about the Graph API.
  • Standardizing policies so that users can more easily understand privacy implications. A good example is the nutrition facts labels used on food and beverages. Using a standard model, people would more quickly understand privacy implications and compare services. Current policies take dedicated readers hours to review because of their length, numerous links, and complex wording.
  • Designing a feedback loop into digital interfaces. This would inform users instantaneously of potential privacy issues as they occur and enable users to make wiser choices about sharing information.
  • Allowing users to opt in to share and publicize information. By setting the most conservative privacy settings as the default and letting users decide to expand how their information is tracked, shared and stored, service providers would meet the stated needs of users. Between 70 and 80 percent of respondents agreed with the Obama administration's plan to make it easier for users to control online tracking of consumer personal information.

"This complexity erodes trust and jeopardizes online privacy," Irene Etzkorn, executive director of simplification of Siegel+Gale, said in a statement. "Clearly, Facebook, Google and other online service providers operate based on consumer trust, and failure to address privacy concerns in a meaningful way will lead to consumer disenchantment and additional regulatory restrictions."

The full survey results are available in an 11-page document titled "Knowing more about privacy makes users share less with Facebook and Google" (PDF).

See also:

Topics: Google, Social Enterprise

Emil Protalinski

About Emil Protalinski

Emil is a freelance journalist writing for CNET and ZDNet. Over the years,
he has covered the tech industry for multiple publications, including Ars
Technica, Neowin, and TechSpot.

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.


Log in or register to join the discussion
  • i say...

    Want in one hand and crap in the other, see which one fills up first. There has been outrage about these policies for a long time and very little changes. But by all means, keep conducting meaningless surveys
  • Should have had the German divisions write the privacy policy

    "All your base are belong to us" is far easier to understand and concise.
    Your Non Advocate
  • Those Google and Facebook Privacy Policy Issues

    So I totally boycotted both entities; they could not care less, but it makes me feel good. As in so many other arenas, with great power comes great confusion and the ability to operate in that state even though rational people object to such mind-numbing legalese and pseudolegalese.
  • Idiot Users!!

    That's right.. Idiots! Does any one of these users pay to use Facebook or Google? No. Why? Cause they're FREE! Free to use, free to post, free to abuse, blah blah blah, FREE! And to read about users constantly complaining about privacy just baffles me to no end. You're posting personal information on a free, public site and don't expect people to read it or see it? Really? What in that elementary formula don't they get?
    Your kids' are on it? Tell them to cancel it? Buck up and be a parent.
    Workers are using it on the clock? Block it?
    But.. But.. But.. Who gives a rats' behind about the "buts"? Big buts, little buts, their buts, your buts, everyone has buts. Just make another excuse, right? People don't need it as much as they think they do. It's another wasted and abused want. Whatever happened to the good ol' telephone where you actuallly heard the person you want to chat or text to? With as much energy as it takes to type that message out, you could have used less in punching in their phone number on the same instrument you're texting on. Amazing isn't it.
    (sigh) Ok, I got that out of my system. Thanks.
  • Huh?

    Have these users read Google's new policies? If they have, they wouldn't be confused at all, they are very well written.

    That being said, Facebook's privacy policy is poorly written and hard to understand.
    • Yes, these users have read the policies

      These survey results report on how well people comprehend the policies. Google's policy is written in relatively plain English using short sentences, but clearly, it doesn't communicate. After reading it, the vast majority of people still aren't able to correctly answer questions about how Google uses their personal information. And Google knows it.