I should have been a bit more clear. We should ban retention for any purposes where it is not explicitly required for the intended function and clearly agreed to by all parties. Think somethig like strava or asset tracking. You know it stores gps data, and why.

▲

ryandrake 3 hours ago | parent [-]

There is no such things as "clearly agreed to by all parties" when it comes to end users. Companies provide a one-sided, "take it or leave it" EULA, and if you don't agree to everything in it, you don't use the product. There is no meeting of the minds, there is no negotiation, and there is no actual agreement. It's a rule book dictated by one side.

▲

pocksuppet 3 hours ago | parent | next [-]

Then it's not a valid contract and therefore does not absolve them of criminal liability for stalking you.

▲

kube-system 2 hours ago | parent | next [-]

Contracts of adhesion can be valid contracts. The ability to negotiate or equal bargaining power is not a required element of a contract.

Furthermore, you cannot contract away criminal liability if any exists.

▲

lukeschlather 2 hours ago | parent [-]

Even attempting to use a contract of adhesion to justify selling GPS location data to a third party should be a criminal act.

	▲	kube-system 2 hours ago \| parent [-]
		Yes, the US is in desperate need of better privacy laws.

▲

celeritascelery 2 hours ago | parent | prev [-]

You click on “accept terms and conditions” which means you agree to the contact.

▲

ch4s3 3 hours ago | parent | prev | next [-]

You can't just bury literally anything in an EULA. There's a fair amount of case law establishing that EULAs clauses that are surprising or illegal aren't enforceable.

▲

pwg 3 hours ago | parent [-]

That fact does not change the point of the individual to which you replied. Regardless of whether the clauses in the EULA are 100% legal, some mixture or 100% illegal, the entire EULA is a "one sided rule-book dictated completely by one side". You, the person held to the EULA's rules, do not get to negotiate on the individual points. You simply have a "take it or go away" set of options.

▲

nickburns 2 hours ago | parent | next [-]

https://en.wikipedia.org/wiki/Shrinkwrap_(contract_law)

▲

kube-system an hour ago | parent | prev | next [-]

You're talking about contracts of adhesion and they are overwhelmingly common for B2C agreements. Most red-lining of contracts only happens in high-value B2B transactions where the sums of money involved are enough that it makes sense to bring lawyers into the loop.

▲

rolph 2 hours ago | parent | prev [-]

when you already pay for the device and a contract, then surprise now that you have skin and flesh in the game, you HAVE TO agree to this EULA or your property is a brick and we keep your money.

that is defined as extortion, but labled as onboarding.

	▲	kube-system an hour ago \| parent [-]
		Courts do look poorly upon this -- to have a valid contract of adhesion there is some degree of advanced notice required and ability to reject it.

▲

stavros 3 hours ago | parent | prev [-]

There is the GDPR.