TikTok has taken the social media world by storm, with over 1 billion monthly active users. However, concerns have been raised about how much data the app collects from its users. Several news reports and research studies have suggested TikTok harvests an unprecedented amount of personal data.
This has sparked fears that the data could be obtained by the Chinese government or misused, especially given TikTok’s parent company ByteDance is based in China.
In this article, we will analyze what types of data TikTok collects, how this compares to other social media platforms, examine TikTok’s privacy policies and responses to the controversy, highlight security concerns, and provide perspectives from experts and users.
What Data Does TikTok Collect?
TikTok collects a significant amount of data from its users. According to its privacy policy, TikTok collects information such as age, username, device identifiers, IP address, browser type, operating system, and mobile network information (TikTok Privacy Policy).
TikTok also collects precise location data based on SIM card and IP address, allowing it to track users’ movements and locations (TikTok Privacy Policy). The app accesses users’ address books and can collect information about their contacts.
TikTok collects metadata about users’ activity on the platform, including content viewed, videos liked, shared or commented on, searches, and other interactions (Demystifying TikTok Data). This allows TikTok to understand users’ interests and preferences in order to target content and ads.
How TikTok Uses Data
TikTok uses the data it collects for various purposes like showing targeted ads, recommending content, and improving the user experience. According to their privacy policy, TikTok may use the data collected to:
- Provide, personalize, and improve their services
- Enable personalized ads and content
- Develop new services and features
- Conduct research and analytics
Specifically, TikTok leverages user data like interests, behaviors, demographics, and device information to infer insights and serve targeted advertising. The platform looks at users’ liked videos, shares, comments, and other interactions to understand their preferences and recommend personalized content. User data also allows TikTok to optimize features and tailor the app experience. For example, TikTok may test different interfaces or feeds with subsets of users to determine what works best.
While the use of data for advertising and recommendations is common among social platforms, the granularity of TikTok’s data collection provides an unparalleled ability to micro-target users. This raises concerns about manipulating users or promoting harmful content.
TikTok’s Data Collection vs. Other Platforms
While some are alarmed at the amount of data TikTok collects, research suggests its data harvesting is comparable to other major social media platforms like Facebook, Instagram, and YouTube (1). According to one 2022 study, TikTok actually collects less data than platforms like Facebook and Instagram. However, TikTok does share data with more third party trackers than the other platforms studied.
Specifically, the study found that over a three-week period, TikTok collected 12 megabytes of data, while Instagram collected 30 megabytes and Facebook collected 35 megabytes. All three platforms collected an extensive amount of user data including device information, location data, network information, contacts list, and clipboard content. While TikTok collected less raw data overall, it did share data with over 10 third party trackers compared to just a few for Facebook and Instagram.
So while TikTok’s data collection practices raise valid concerns, they do not appear to be more invasive or comprehensive than data harvesting by other major social media apps. The main difference lies in how much of that data is shared externally, though large platforms like Facebook have also been criticized for partnerships enabling third-party data sharing.
TikTok’s Privacy Policies
TikTok’s privacy policies outline what data the platform collects from users, how it is used, and who it is shared with. Key points from TikTok’s current privacy policy include:
– Users must be at least 13 years old to use TikTok. For younger users, parental consent is required. (https://www.tiktok.com/legal/privacy-policy-row)
– TikTok collects information like usernames, passwords, videos, contacts, and location. They use this data for purposes like recommendations, advertising, and operations. (https://www.tiktok.com/i18n/Privacy/?lang=en)
– TikTok shares limited personal data with vendors and service providers who help deliver the platform. They may also share information with law enforcement agencies or for legal reasons.
– Users can control some data collection in settings, like opting out of personalized ads and limiting data use for profiling. But disabling data collection can limit use of the app.
TikTok’s privacy policy has been updated several times over the years, often to increase transparency around data practices. Earlier versions were more vague about how user data was collected and shared. Recent changes have provided users more control, like the ability to download personal data. (https://www.tiktok.com/legal/page/row/privacy-policy/en)
Security Concerns
There have been long-standing concerns about the Chinese government’s potential access to TikTok user data. Critics allege that ByteDance could be compelled to provide TikTok data to the Chinese government, given China’s national intelligence laws (https://crsreports.congress.gov/product/pdf/IN/IN12131). There is no public evidence that this has occurred, but the possibility remains worrisome to some.
In particular, the type of data TikTok collects could be abused if accessed by the Chinese government. This includes profile data, device information, location data, metadata, and behavioral data based on how users interact with content (https://www.cnn.com/2023/06/08/tech/tiktok-data-china/index.html). Experts argue that this rich collection of data points could be used to train algorithms and build detailed profiles of users.
While there are laws prohibiting ByteDance from providing data to the Chinese government, the opacity of China’s legal system casts doubt on how those laws would be enforced in practice. The potential security risks have raised fears among governments and users alike (https://apnews.com/article/tiktok-ceo-shou-zi-chew-security-risk-cc36f36801d84fc0652112fa461ef140).
TikTok’s Responses
TikTok has responded to concerns about its data collection practices by defending some of its methods while also making changes to its policies. In February 2023, TikTok published a blog post titled “The Facts On Reports About Our Data Collection Practices” to address recent reports.
In the post, TikTok stated that it does not collect sensitive user data like device IMEI, SIM card details, or precise GPS location. The company claims location data is based only on IP address and general device settings. TikTok also emphasized that user data is stored in the US with backups in Singapore.
However, TikTok acknowledged past issues, saying “we recognize that some earlier policy choices we made left room for misinterpretation.” In response, TikTok made updates like:
- Discontinuing a short-lived practice of identifying devices to prevent fraud.
- Updating policies to be more clear about data practices.
- Forming a Data Governance Advisory Committee of leading experts.
While defending some practices, TikTok has attempted to be more transparent and responsive to privacy concerns. But experts say continued vigilance is needed to ensure proper data handling as the platform rapidly evolves.
Expert Perspectives
Many privacy researchers have analyzed TikTok’s data collection practices. While TikTok does gather a significant amount of user data, researchers have found that its practices are comparable to other major social media platforms.
According to a 2022 analysis by cybersecurity company Internet 2.0, TikTok collects a similar amount of data to apps like Facebook, Instagram, and LinkedIn. This includes information like location, contacts, and device identifiers. However, the study found no evidence that TikTok collects more data than necessary for the app to function.
Cybersecurity expert Will Strafach examined TikTok’s code and concluded that concerns about China accessing U.S. TikTok user data are unfounded. He found that data is stored on servers in the U.S. and Singapore, not China. While data could theoretically be accessed from China, there is no evidence this has occurred.
According to researchers, the main privacy concerns with TikTok are transparency and consent, not the amount or type of data collected. TikTok has been criticized for not clearly explaining to users what data is gathered. Experts advocate for stronger data privacy regulations to ensure user awareness and control.
What Users Can Do
There are steps TikTok users can take to protect their privacy and data on the platform:
Adjust privacy settings – TikTok has privacy settings that allow users to control who can view their content, send them direct messages, and see certain account information. Users can restrict settings like these to give them more control over their information.
Be aware of data collection – While TikTok collects user data like other platforms, being informed about what is gathered can help users make educated decisions about what they share. For example, TikTok’s privacy policy states they collect IP address, browsing history, and location data.
Avoid oversharing – Users should be careful not to share more personal information than they feel comfortable with. This could include private contact details, addresses, schedules/routines, and other sensitive information.
Citations:
TikTok Privacy Policy
Wired – All the ways TikTok tracks you and how to stop it
Conclusion
In summary, while TikTok undeniably collects user data like many other social media platforms, the amount and types of data collected are comparable to competitors like Facebook or Instagram. The main concerns around TikTok center on its ownership by a Chinese company, ByteDance, and the possibility of data sharing with the Chinese government. However, TikTok maintains that its US user data is stored outside of China with strict controls.
The TikTok data controversy highlights the broader issue of data privacy and social media. Users should be aware of the extensive data collection taking place across popular apps and decide for themselves if the benefits outweigh the risks. While TikTok’s security practices are still evolving, users can take steps to better protect their privacy, like avoiding connecting third-party apps or services and limiting personal information shared. Overall, more transparency from TikTok and all social media companies around data practices would benefit users.
