{"id":13038,"date":"2016-09-21T09:33:23","date_gmt":"2016-09-21T13:33:23","guid":{"rendered":"https:\/\/www.kaspersky.com.au\/blog\/?p=13038"},"modified":"2019-09-17T21:12:26","modified_gmt":"2019-09-17T10:12:26","slug":"google-allo-privacy","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com.au\/blog\/google-allo-privacy\/13038\/","title":{"rendered":"Google reverses course on Allo privacy"},"content":{"rendered":"

Today Google releases the Allo app \u2014 a new messaging app that was expected to provide a few cool features as well as privacy for its users. But the company made some changes, and as a result the new app is really not what we expected.<\/p>\n

\"Google<\/a><\/p>\n

When Google announced Allo<\/a> for iOS and Android earlier this year, the app promised a clean interface, cool features including signing up with your phone number, and the built-in Google Assistant. On the one hand, this feature lets you chat with the Google bot and ask it all sorts of questions. On the other hand, it learns how you chat and then offers you quick responses \u2014 or as they call them, \u201csmart replies.\u201d<\/p>\n

This smart replies feature is controversial: If anyone gains access to your Google account (or your phone with Allo installed), they can use smart replies to imitate your conversation style. In other words, smart replies make stealing your identity much, much easier.<\/p>\n

We can also blame smart replies for the lack of privacy in Allo.<\/p>\n

Here\u2019s the thing: Google\u2019s team initially stated<\/a> that all conversations of Allo users would be encrypted so that nobody could read them. Moreover, conversation logs were to be stored on Google\u2019s servers only transiently, and Google promised not to assign identities to the logs.<\/p>\n

But the developers changed their minds. Now Allo will store all non-incognito messages until users manually delete them. Messages are encrypted between the device and Google servers, yes. But they are stored, so Google has access to all chats in the app. It uses the chat logs specifically to make smart replies more accurate, relevant, and whatever else the company wants smart replies to be.<\/p>\n

There is a way to keep your conversation private: Create incognito chats, which are meant to be fully end-to-end encrypted (which means Google can\u2019t read them) \u2014 and it seems they work. Of course, in incognito mode you won\u2019t have smart assistant features.<\/p>\n

Particularly when it comes to marketing, companies often make unpopular decisions. But this one seems rather unfair to users who were looking forward to Allo\u2019s announced privacy policy and features. We would like to see Google provide an alternative<\/a> instead of forcing privacy-minded users to start incognito chats every time if they want to keep their data private. For example, Google could let users turn off the Google Assistant and set message storing off.<\/p>\n

The new Allo reality is not user-friendly, and in fact, it doesn\u2019t seem like fair play. If you feel as betrayed as I do, there are two things that you can do.<\/p>\n