TikTok is a popular social media platform that allows users to create and share short videos. It has over 1 billion monthly active users worldwide. However, TikTok has faced scrutiny over its data collection practices and privacy policies.
Specifically, critics argue that TikTok collects an excessive amount of personal data from its users, including location, contacts, and other sensitive information. There are also concerns that TikTok’s parent company, ByteDance, could share data with the Chinese government, given China’s broad surveillance laws.
In this article, we’ll explore what types of data TikTok accesses, how it uses that data, and the privacy implications for users. We’ll also look at recent policy changes and steps users can take to better secure their information on the platform.
What Data Does TikTok Collect?
According to research from the Journal of Information Processing and Management, TikTok collects a substantial amount of data from its users (https://www.jstor.org/stable/10.2307/resrep26120.7). This includes:
- User profiles data such as age, username, profile photo and bio
- Contacts and connections
- Likes, shares, comments on videos
- Content of videos uploaded or created
- Metadata on videos watched such as duration and interactions
- Device data like OS version, mobile carrier, screen resolution
- Precise location data if location services enabled
- Browsing and search history within TikTok app
According to Identity Review, TikTok also collects data on messages sent within app, login and account activity, and ad interaction data (https://identityreview.com/tiktok-data-collection-privacy/).
How TikTok Uses Data
TikTok uses the data it collects from users for targeted advertising, content recommendations, and improving the user experience. According to a report by LinkedIn, TikTok’s ability to analyze user data helps advertisers identify the right audience for their products and services, making the platform highly attractive for brands [1]. TikTok builds detailed user profiles based on viewing habits, interests, device data, and more. Using artificial intelligence and machine learning algorithms, it can deliver customized content and ads to each user.
A key way TikTok leverages user data is through its recommendation engine, which analyzes user behavior to determine preferences and recommend videos likely to keep a user engaged. Factors like video completion rates, likes, shares, and searches are used to refine recommendations and keep users watching more content. By understanding audience interests and preferences, TikTok can maximize time spent on the app and drive further data collection for more targeted advertising.
User data also allows TikTok to optimize the user experience by personalizing options, layouts, and features. Tests of different interface designs on user groups help TikTok determine the most effective formats and interfaces for engagement. The collection of biometric data like keystroke patterns and touchscreen gestures may also help TikTok refine and improve its mobile app design.
In summary, data is core to TikTok’s services for establishing detailed user profiles, enabling personalized recommendations, attracting advertisers, and optimizing app experiences. The platform’s access to user data provides significant value for its growth, while also raising concerns about data privacy.
TikTok’s Access to Private Data
TikTok does not have access to highly sensitive private data like passwords, credit card information, or financial account details. According to TikTok’s privacy policy, the app collects a wide range of data points about its users including location information, browsing and search history, and device identifiers, but does not access private financial information or account passwords.
Researchers have analyzed TikTok’s data collection practices and confirmed that the app does not gather financial data, passwords, or other highly sensitive information. While TikTok gathers extensive data on users’ interests, demographics, and online behaviors to serve targeted ads and recommend content, it does not access users’ private accounts, finances, or identity credentials.
Some concerns have been raised about whether TikTok could theoretically access clipboard data containing sensitive information temporarily stored on mobile devices. However, there is no evidence that TikTok has systematically collected such private clipboard data. The app cannot directly access banking credentials, financial accounts, or identity passwords stored exclusively on users’ devices or with third parties.
In summary, while TikTok’s data collection is broad, the app’s access is limited when it comes to highly sensitive private data like financial information and passwords securely stored outside of TikTok itself. TikTok gathers data to boost ad targeting and recommendations, not to directly access users’ private accounts or finances.
Data Storage
TikTok stores user data in data centers located in the United States and Singapore. In June 2022, TikTok announced that 100% of all U.S. user traffic is now routed to Oracle Cloud servers located in the United States. TikTok leveraged Oracle’s cloud infrastructure to store and process U.S. user data separately from the rest of its global user base.
According to TikTok, U.S. user data is stored on servers in data centers in Virginia and California. The data is segmented from the rest of TikTok’s global operations. TikTok claims that the Oracle Cloud partnership adds an extra layer of privacy and security to U.S. user data.
For users outside of the United States, TikTok stores data in Singapore and other approved jurisdictions. However, TikTok has announced plans to migrate European user data to servers located in Europe to comply with EU data protection laws.
Sharing Data with Third Parties
TikTok’s privacy policy states that they share user data with third party services and partners. This includes sharing data with social media platforms like Facebook, Instagram, Twitter, and Google to enable connecting accounts across services.
According to TikTok’s January 2023 privacy policy update, “If you choose to allow a third-party service to access your account, we will share certain information about you with the third party.” This includes your profile information, user-generated content, and other data stored by TikTok.
A February 2022 study by CNBC found that TikTok shares user data with third party tracking services at a higher rate than other major social platforms. Much of this data sharing happens without direct consent from users.
However, TikTok claims they only share user data with third parties as necessary to provide services and with appropriate consent. Recent policy changes in early 2023 restricted some third party data access.
Data Access from Chinese Government
There has been significant concern that the Chinese government may be able to access TikTok user data due to the app’s parent company ByteDance being based in China. TikTok has repeatedly stated that Chinese authorities do not have access to TikTok data and that data on US users is stored in the US and Singapore TikTok and US national security. However, China’s 2017 National Intelligence Law requires Chinese companies to support and cooperate with national intelligence efforts, leading some experts to believe ByteDance would be legally compelled to provide data access if requested by authorities.
In 2020, then President Trump threatened to ban TikTok in the US over data security concerns unless ByteDance sold TikTok’s US operations to an American company. This ultimately led to a deal for Oracle and Walmart to take minority stakes in a newly created company called TikTok Global, which would host US user data An FCC Commissioner Wants TikTok Removed From App Stores, Citing New …. However, the deal still raised bipartisan concerns in Congress over ongoing ties between TikTok Global and ByteDance.
While TikTok claims it would refuse any unlawful data access requests, experts argue the legal authority of Chinese agencies and opacity around data practices means risks cannot be ruled out. TikTok’s efforts to minimize data access have not fully assuaged fears of Chinese authorities ultimately leveraging the platform’s data trove.
Securing Your Data
There are steps TikTok users can take to better secure their data and protect their privacy within the app settings:
- Go to your account settings and toggle off “Personalized ads” to limit data collection for ad targeting.
- Disable your “Profile” from being public to control who can view your content.
- Toggle off “Suggest your account to others” in settings to prevent TikTok from recommending your profile.
- Turn off data sharing with third-party websites and services that aren’t required for using TikTok.
- Set your account to “Private” to approve followers and limit your content’s reach.
- Regularly clear your watch history, search history, and other tracked app activity.
- Avoid connecting your TikTok account to third-party platforms like Facebook or Twitter.
- Be cautious about what personal information you add to your bio or account details.
Users should be thoughtful about the content they post and interact with. You can take proactive steps like these to better secure your data within TikTok’s platform and settings.
Recent Policy Changes
TikTok has made several updates to its privacy policy over the past couple years in an effort to be more transparent about data collection and use. In January 2022, TikTok introduced a new section called “How We Use Your Information”, explaining how data is used for recommendations, ads, and more (TikTok Privacy Policy).
In June 2021, TikTok updated its privacy policy to be more clear about the types of data collected, including network, hardware, location, and app information. TikTok also now discloses when information may be shared with corporate affiliates (Zulkifli, 2022).
Other changes have clarified data retention practices. For example, TikTok now says it may retain data until it is no longer necessary for business or legal purposes, rather than keeping it indefinitely.
While TikTok’s privacy policy has improved, privacy advocates argue there is still a lack of transparency around China-based access and algorithms. But recent policy updates show TikTok is aiming to share more specifics on how data is handled.
Conclusion: Key Takeaways About TikTok’s Data Access
To summarize, TikTok has access to a significant amount of personal data when you use the app, including information from your videos, profile, and interactions on the platform. This data helps TikTok serve relevant advertising and recommendations. However, TikTok’s data privacy and security measures have come under scrutiny, especially concerns around its parent company ByteDance and data access from the Chinese government. Recently, TikTok has updated its privacy policies to be more transparent and give users more control. While risks remain, users can take steps like adjusting privacy settings, avoiding linking sensitive accounts, and being cautious about what they share.
Overall, while TikTok gathers a vast array of user data, its collection and use of data is quite similar to other major social media platforms. With proper precautions regarding privacy and security, users can enjoy TikTok while attempting to minimize risks to their personal information.
