Privacy/Reviews/PhonebookAPI: Difference between revisions

Privacy/Reviews/PhonebookAPI (view source)

Revision as of 17:18, 24 October 2012

518 bytes added , 24 October 2012

→‎Alignment with Privacy Operating Principles

Sidstamm

canmove, Confirmed users

1,537

edits

@@ Line 158: / Line 158: @@
 ====Principle: Transparency / No Surprises====
+Contributors give explicit consent by opting-in for profile sharing when they register for the service.  They need to be able to see how the data is being used.
-* This appears to have no surprises as the user has to actively opt-in to the profile sharing
+''Recommendations'': It would also be helpful to show the user how their data is being shared/used via the api -- perhaps by sending them a message when a new site access the API (including a list of sites accessing their data through the api).
-''Recommendations'': (what can be improved)
+{{ResolutionBox|{{new|Provide way for users to see which sites are accessing their data through the api and perhaps also what is being accessed}}}}
-* A specific message that enumerates each property of a user's profile and what potential web sites the profile may appear on would also be re-assuring.
 ====Principle: Real Choice====
-* The obvious real choice is in the active opt-in required to allow profile sharing.
+Users have an opportunity to opt-in at registration, but should have control if they change their minds later.
-''Recommendations'':
+''Recommendations'': Expose an option in the user's "edit profile" screen to allow them control over whether their data is exposed via the API.
-* none
+{{ResolutionBox|{{new|Expose setting/checkbox to enable/disable sharing via this api}}}}
 ====Principle: Sensible Defaults====
@@ Line 183: / Line 182: @@
 ====Principle: Limited Data====
-* As all users are logged in and vouched by other Mozillians to view profile data beyond name, this limits web/data scrapers from collecting these profiles.
+* As all users must be logged in and vouched by other Mozillians to view profile data that is more than beyond name.  This limits web/data scrapers from collecting these profiles.
 ''Recommendations'':