TikTok is a popular social media app that allows users to create and share short videos. With over 1 billion monthly active users, TikTok has become one of the world’s fastest growing social media platforms. However, TikTok’s massive growth has raised concerns over its data collection practices and privacy policies.
TikTok collects a vast amount of data from its users in order to power its recommendation algorithm and target advertising. Information collected includes user profiles, in-app activities, device data, locations, interactions, and more. TikTok has come under scrutiny for how much data it gathers, especially from younger users, and how that data may be shared with the Chinese government.
This article provides an overview of the various ways TikTok collects user data and the privacy concerns surrounding its data practices. It aims to inform users about what information TikTok gathers from them and how their data may be used.
User Profiles
When creating a TikTok account, users are required to provide a username, password, phone number, email address, and date of birth. Additional profile information like a profile photo, bio, and profile URL are also collected. According to TikTok’s privacy policy, they collect information including name, profile image, username, account passwords, and any other content users submit in their profile like bios or external links.
TikTok specifically says they collect “the content you create, such as the videos you post.” Users have full control over the content they post on their profile. TikTok does analyze user profile information, along with other activities on the platform, to make recommendations and display relevant ads.
In-App Activities
TikTok collects extensive data on user activities within the app. According to CNN, TikTok tracks all in-app activity including which videos are viewed, liked, shared, and commented on. The app monitors how long users spend watching each video as well as their interactions through likes, comments, and shares. Searches within TikTok are also tracked and associated with user profiles.
As reported by PIRG, TikTok compiles data on the specific videos and content that holds a user’s attention. This allows them to fine-tune the recommendation algorithm to keep users engaged. By monitoring in-app activity patterns, TikTok can infer user interests, relationships, and habits over time.
Device Information
TikTok collects a significant amount of data from the device you use to access the app. This includes details about your device’s operating system, hardware model, disk space, memory capacity, advertising IDs, IP address, network provider, battery level, signal strength, timezone settings, installs, uninstalls, app launches, crashes, browsers, and more.
TikTok is able to gather extensive technical information about your device through their SDKs and APIs embedded within the app. This allows them to fingerprint your device and track you across apps. Device identifiers like your IP address, IMEI, Android ID, and MAC address can be used to connect your activity across multiple devices and services you use.
The depth of device data collected by TikTok provides them significant insights into your habits, interests, and demographics. It also aids their ability to troubleshoot issues and optimize performance. However, the amount of device information extracted has raised privacy concerns given its potential uses for invasive targeted advertising and tracking. Users have limited control over the device data TikTok gathers by simply having the app installed.
Locations
TikTok collects location data through various methods in order to personalize and target content and ads. The app accesses the device’s GPS to pinpoint the user’s exact location if location services are enabled. It also collects location data based on nearby WiFi networks and cell towers. Additionally, TikTok gathers IP addresses which can reveal a user’s city or zipcode.
According to this Reddit user, TikTok collects “Location data, IP address, device information (think make/model), what videos you watch, what is in your clipboard…” [1]
So TikTok has various methods to determine location, even if a user has disabled location services. This allows the app to serve geographically relevant content but also raises privacy concerns.
Interactions
TikTok collects data on the profiles you interact with and the content you view or engage with in the app. When you view someone’s profile, like or comment on a video, or follow an account, TikTok logs that interaction. Your profile view history can be seen by you if enabled in Settings, but is otherwise private. However, creators can see aggregate stats on profile views and interactions with their content.
TikTok states in their Privacy Policy that they collect information about your interactions with other users, including “people you follow, views and likes, comments, messages you send and receive.” They analyze these interactions to recommend content and accounts that may interest you. So TikTok logs when you view, like, comment on, or otherwise engage with any profile or content in order to improve their recommendation algorithm. The more you interact, the more data they collect to refine your “Taste Profile.”
Sources:
https://www.businessinsider.com/guides/tech/does-tiktok-tell-you-who-viewed-your-profile
Advertising
TikTok allows advertisers to target users with ads based on information collected from user profiles and activities. This includes data like age, gender, location, device, and interests (TikTok Privacy Policy). TikTok states that they do not provide personal information like names or contacts to advertisers, but they do use aggregated demographics, interests, and behaviors for ad targeting purposes.
For example, if a user engages frequently with cooking and food content, they may be categorized into an “amateur chef” interest segment. Advertisers can then choose to display ads to users in this segment. TikTok combines data points about users to infer interests and likely responsiveness to different types of advertising (Demystifying TikTok Data). Users have some ability to control these advertising settings under “Ads Manager” in their account settings.
Permissions
TikTok requests a broad range of permissions from users to access data on their devices. According to their privacy policy, TikTok collects information like internet or network activity, unique device identifiers, location data, contacts, user content and metadata. They also request access to the camera, microphone, calendar, and sensors on your device.
Specifically, on iOS TikTok requests permission to access the camera, microphone, calendar, contacts, location and photos. On Android, requested permissions include identity, contacts, location, microphone, camera, storage, and network access. While some of these permissions are reasonable for functioning of the app, the broad access raises concerns about data collection.
Users must accept all these permissions for the app to work properly. There is no option to limit permissions to only what is necessary. Experts recommend reviewing requested app permissions and only allowing what you’re comfortable sharing.
Sharing Practices
TikTok shares certain types of user data with third party services and vendors in order to provide and improve the app experience. According to TikTok’s Privacy Policy, they may share information like your user ID, device ID, login info, and limited profile data with third party service providers that help with targeted advertising, analytics, content moderation, and site operations.
TikTok also shares non-identifying aggregated data with third parties like advertisers, measurement partners, researchers, and others. This includes info about general user demographics, interests, behavior, and content views. However, they claim not to share any identifiable user data externally for these purposes without consent.
When you interact with social sharing features or third party apps/services linked through TikTok, you may enable sharing of certain profile info like your username, profile photo, and posted videos. TikTok’s updated 2023 Privacy Policy now clarifies they may also share precise location data, contacts, and other sensitive information with third parties if you enable those permissions.
According to media reports, TikTok shares more granular user data with third party trackers compared to other major social apps. However, TikTok claims they only share the minimum data required for app functionality and do not sell or share data for non-TikTok advertising or marketing.
Data Security
TikTok takes numerous steps to protect the data of its users. According to The SSL Online, TikTok stores user data securely through encryption and by restricting access to protect information. The company employs robust cybersecurity measures, protocols, and software to safeguard user data against breaches, unauthorized access, and other threats.
User videos, messages, and profile information are stored on servers that are separated from the public internet. TikTok also has internal controls to limit employee access to user data based on business necessity. Only authorized employees can access user data for legitimate purposes.
In terms of physical security, TikTok stores user data in secured facilities with restricted access. The company conducts audits and training to ensure compliance with its cybersecurity policies and procedures. Overall, TikTok leverages industry-standard encryption, firewalls, and other tools to keep user data as secure as possible.
