TikTok has exploded in popularity in recent years, becoming one of the most widely used social media platforms globally. With over 1 billion monthly active users, TikTok’s reach is massive. However, concerns have emerged around how much user data the app collects, and what it does with that information.
According to Forbes, TikTok was the most downloaded app of 2022, accumulating over 175 million downloads in a single quarter. With so many people using the platform, TikTok has access to a huge amount of user data.
In this article, we’ll take an in-depth look at what types of data TikTok collects, who they share it with, and how it’s used. Given growing data privacy concerns, it’s important to understand how TikTok handles user information.
What Data Does TikTok Collect?
TikTok collects a wide range of user data, including basic personal information and user content. According to OCHOLAVENUE, TikTok collects information such as a user’s age, username, device type and settings, and location data [1]. TikTok also collects any videos that users upload as well as data on how users interact with content through likes, comments, and more. Device identifiers like IP address, MAC address, and mobile advertising IDs are also collected by TikTok [2].
Does TikTok Share User Data?
TikTok is owned by ByteDance, a Chinese company headquartered in Beijing. This relationship has raised concerns that TikTok may be sharing user data with the Chinese government. According to TikTok, American user data is stored on servers in the US and Singapore, not China. However, some experts caution that while the data may not be stored in China physically, ByteDance could still potentially access it if compelled by Chinese authorities (1).
In June 2022 congressional testimony, TikTok executives stated that the app has never shared US user data with the Chinese government. They also noted TikTok does not operate in China and stores American user data in Virginia, with strict controls. However, TikTok admitted that some employees in China can access US user data, but are subject to “robust cybersecurity controls” (2).
In November 2022, TikTok reiterated that the Chinese government has not asked for any US user data, and if it did, TikTok would deny the request. TikTok claims US user data is isolated from ByteDance through security barriers. However, cybersecurity experts note there are still potential risks, as ByteDance could override controls under Chinese laws (3).
Sources:
(1) https://www.cnn.com/2023/06/08/tech/tiktok-data-china/index.html
(2) https://www.forbes.com/sites/alexandralevine/2023/06/21/tiktok-confirms-data-china-bytedance-security-cfius/
(3) https://www.theguardian.com/technology/2022/nov/07/tiktoks-china-bytedance-data-concerns
How TikTok Uses Data
TikTok uses the data it collects about users for various purposes, with the main goals being to provide personalized recommendations and target advertising. Some of the ways TikTok leverages user data include:
Personalized ads: TikTok relies heavily on advertising revenue, so serving users targeted ads based on their interests and activity is a priority. TikTok tracks user behavior, content interactions, device info, and more to build detailed profiles and user segments that can be leveraged by advertisers.
Recommendations: The algorithm behind TikTok’s “For You” feed analyzes user data and activity to determine preferences and recommend content accordingly. Factors like videos liked, shared, or commented on, search history, and device/account info inform recommendations.
Analytics: TikTok analyzes user data to derive insights it likely uses to optimize user experience and feed relevance. Understanding usage patterns helps TikTok determine the timing, frequency, and positioning of content served to each user.
TikTok’s Data Policies
According to TikTok’s privacy policy, the company collects various types of data from its users.
Some of the key data points TikTok collects include:
- User content like photos, videos, livestreams, comments, messages (Source: TikTok Privacy Policy)
- Device data like IP address, device settings, operating system, browser information (Source: TikTok Privacy Policy)
- Usage data like videos watched, accounts followed, interactions with content (Source: TikTok Privacy Policy)
- Location data if location services are enabled (Source: TikTok Privacy Policy)
TikTok states they collect this data to “deliver, maintain, and improve” their services. However, privacy advocates have raised concerns about the extent of data collection.
Data Security Concerns
There have been ongoing controversies around the potential for the Chinese government to access TikTok user data. TikTok is owned by ByteDance, a Chinese company that moved its headquarters to Singapore in 2020. However, TikTok’s operations and user data storage for U.S. users were separated from the rest of ByteDance’s operations in 2019, with U.S. user data now stored on servers in the U.S. and Singapore.
Despite this, U.S. government officials and agencies have continued to voice concerns over potential data access by the Chinese government. In 2019, the Pentagon advised military personnel to avoid using TikTok due to data security concerns. More recently, in 2022, FCC commissioner Brendan Carr called for Apple and Google to remove TikTok from their app stores, citing concerns that U.S. user data could be accessed and manipulated by China.
TikTok has repeatedly denied these allegations and claims that Chinese government officials do not have access to U.S. user data. However, the ongoing concerns have resulted in some actions to restrict TikTok use, including bans on government devices and calls for broader bans in the U.S.
How Users Can Protect Their Data
There are several steps TikTok users can take to better protect their privacy and security on the platform:
First, review your account’s settings and toggle on the most restrictive options. Go to “Privacy and Safety” and enable all privacy settings like private account, control comments and duets, and disable “Suggest your account to others.” Turn off data sharing with third parties. Also check your security settings and turn on two-factor authentication.
Second, be selective in the information you provide to TikTok. Avoid sharing your real name, birthdate, contact info, location, or other personal details. Also consider not linking other social media accounts.
Additionally, be mindful of what you post. Avoid oversharing personal stories or private moments. Remember that anything shared on the platform can potentially be seen by millions.
Experts also recommend parents monitor underage users and utilize TikTok’s Family Pairing feature to supervise accounts. Setting screen time limits can also help manage usage.
While no social media is 100% private, taking precautions allows TikTok users to better control their information and digital footprint. Regularly checking settings and being cautious in sharing can help maximize privacy.
Recent Developments
In January 2023, TikTok introduced a new feature called “Privacy Control” that allows users to choose who can see their content. Users can limit their audience to “Friends Only”, “Acquaintances”, or “No One”. This gives users more control over their privacy settings.
TikTok also made changes to their privacy policy in January 2024, stating that they rely on user consent for public distribution of personal data when accounts are set to “Public Profile”. Users can now change their profile setting at any time to control their privacy.
In addition, the TikTok Privacy Policy was updated to give users more transparency into how their data is collected and used. The policy provides details on the types of data collected, how it is used for advertising purposes, when data may be shared with third parties, and more.
While some privacy concerns remain, these recent developments indicate TikTok is taking steps to give users more control over their data and provide them with clearer information on how their data is handled.
Expert Perspectives
Privacy experts have weighed in on the data collection practices of TikTok and whether a ban is warranted. According to security expert Bruce Schneier, banning TikTok will not prevent the app from collecting data, and is an ineffective approach (source). He argues that more effective privacy protections involve comprehensive federal privacy legislation covering all tech companies.
Other advocates note that while TikTok’s data collection is concerning, its practices are comparable to other major social media platforms (source). They recommend users be informed about data collection risks and exercise caution in what they share. Overall, privacy experts emphasize the need for thoughtful policy changes rather than reactive bans.
Conclusion
In summary, while TikTok collects a substantial amount of user data like many social media platforms, their data collection and use policies remain quite opaque. It seems clear that TikTok captures extensive information about users’ interests, behaviors, locations, devices, and more in order to serve personalized content and ads. However, details on how exactly this data is analyzed and leveraged, as well as who may access this data, are vague at best.
TikTok claims they store U.S. user data in the U.S. and Singapore only, and do not share data with the Chinese government. But U.S. authorities have repeatedly voiced concerns over potential data sharing with China and security vulnerabilities. Several investigations remain ongoing.
For users concerned about data privacy, experts recommend scrutinizing privacy settings, minimizing shared personal information, and avoiding logging in through third-party apps. While TikTok seems to capture more data than many platforms, their lack of transparency raises questions users should continue pressing the company to answer.
