Are we sure this isn’t the text for the “consent to process health data” toggle that is on the same screen? I don’t have a Samsung phone handy to check
Something I appreciate about Samsung phones is that having a Samsung account is completely optional. I've never had one. If I accidentally click on one of the dumb AI features I'm not even allowed to use it without an account.
Am I reading this wrong? It sounds like, short of self-hosting your health data, this is the best of both worlds. Avoiding zombie data retention and avoiding AI? Where do I sign?
> The company plans to grab four categories: your sleep, your medications, your medical records, and your cycle tracking details
So you buy a device but you can't effectively use half of its features because you'd also have to agree to send them your medical records? Ok then if I refuse, will they refund 50% of the device price since now it's not usable any more?
I really feel like "grab" is quite condescending to a company (Samsung) that provides services at scale (upon/after consent) to help you.. "be better" (simplified..), with direct customization and tailoring.
Versus like "watch out, they are going to strip/rob you regularly -- stop it now!" without even mentioning the product/service that the end user initially signed up for themselves...
> I really feel like "grab" is quite condescending
By all means, let's use a more appropriate term, like "abuse" or "misappropriate". It's not sufficiently condescending for a company that's trying to train AI on people's private health data.
We are not required to permit every possible business model to exist. Companies are desperately trying to get their hands on every piece of data they can get to train AI, hence the abominable use of "opt out", which is already horrible even without the added bait-and-switch coercion of "or we'll make the device you already purchased worse".
"pay or consent" stunts have already been ruled illegal under the GDPR. This goes even further than that, where you don't even have the option to pay.
> I really feel like "grab" is quite condescending to a company (Samsung) that provides services at scale (upon/after consent) to help you.. "be better" (simplified..), with direct customization and tailoring.
The headline as described sounds to me like they're violating GDPR by tying to force "consent" for a not-strictly-necessary-for-functionality use of health data. The European Data Protection Board has repeatedly stated that consent is (generally) not considered to be "freely given" if there is a significant detriment for refusing it or if the user has no genuine choice.
Note however that caveat: as described. There may be some more details which make this not unlawful. Also, actually deleting your data if you don't consent is the kind of thing GDPR requires.
And file a complaint... As that breaches a dozen or more EU laws. If a lot of people do it in all the countries, it becomes a national issue.
That is the only way you fix things, and yes, we have had multiple successes with companies taking the piss. Even Samsung can not escape as their have officies in the EU and sell products there.
For the folks outside the EU, ... Its a harder fight and you need to look up your local agencies.
Really quick that leads to not being able to buy anything though.
Sony has done a bunch of evil things (deleting paid media, hiding rootkits in music CDs). Apple abuses their monopoly to force using their web browser and extort a 30% cut of all purchases. Every car manufacturer is tracking every car they sell and selling that data. Retailers are tracking store visits using everything from face recognition to MAC addresses on cell phones.
Boycotting can only do so much. We need regulations to protect people and steep fines for violating them.
I had a ~2008 vintage Samsung phone with a fingerprint sensor that gave your blood oxygen level (SpO2). One day it told me something similar, I had to agree to send them data or I couldn’t use it. So I never used it again, but yeah they have been abusing their costumers a long time.
This is they same company whose tvs take pictures of what you are watching and send them back to Samsung.
Every TV might do this, not every single one does. Buy TVs which allow you to opt out (at least in one case it was several opt-ins, no opt out per SE).
I don't really want to ask for permission to be excused from this vile monitoring. I don't want it to be in there at all. But I'm not aware of any brand which doesn't do this.
At the moment usually just a nag popup on power on.
Annoying but not a huge deal. I imagine this will slowly get worse as more people learn to not connect it to WiFi.
Also of course all the smart tv features don’t work, and a lot more folks than I ever imagined actually use the built in controller (usually some form of Android or built in Roku) to watch Netflix and whatnot. It seems very few people buy an additional device like an Apple TV or Nvidia Shield.
I heard on another forum that the latest Samsungs just don't progress through the setup wizard without internet. And someone noticed they retain WiFi passwords even after a factory reset.
You can still set up a temporary WiFi and just kill it after but it's getting pretty insane now.
Buying a device doesn't mean vendor-hosted services are included, unless explicitly stated. This is the kind of thing why they can get away with taking unsolicited actions on people's devices whenever they want. CUT THAT CORD!
Apple has default E2EE on health data, which I respect. But they need to take iMessage backup out of Advanced Data Protection and make it default E2EE. Messages are just as sensitive, iMessage is effectively not E2EE if most users are using it with server-side encrypted backups to iCloud. Apple of all companies should be able to make a reliable E2EE that wont cause data loss.
I was under the assumption that because of GDPR (which is in effect..).. or current "end-user metadata storage" best practices.. if you (a website/or app) didn't immediately disclose to the user what data is being used,stored, and why it is -- then you shouldn't store it at all.
If you agree that the world needs better examples today, then Samsung has definitely showed one.
In some way they are telling that they respect your privacy. Or they have your data (and then do something with it, now or later), or no one will.
They could provide some Google-style takeout to get your data before deletion, but that may not have any meaning or practical use without their devices and software.
That reminds me of a story by a former coworker of mine, who had a xing account and repeatedly asked them to not send me him ads and spam e-mails. They ultimately closed his account.
Some companies are so dead set on doing this shit, that they don't even have mechanism in place that would enable them to act upon you opting out. It is a sign of dysfunctional companies. You can also observe this, when you send companies a GDPR request for deletion and they do eeeeverything to not have to go into their shitty system and delete the data, because that would require them to do manual work.
Yes, please - delete my health data. I want my health data - I didn't want Samsung or anyone else to have it unless I provide it. And even then, you can't keep it - you can look at it. It's mine.
This is like Google Ultra for personal accounts. I signed up to see what it was like and then assumed I would be able to disable training on my data as a paid customer. The only way to disable training on paid personal accounts is to disable history (no chat logs) which makes the service much less useful for me.
For Google Workspace accounts that use the Ultra plan you can disable training while retaining history. I didn't bother signing up again. It is user-hostile.
I'm not an expert on the matter, but to my knowledge Samsung aren't health practitioners and aren't beholden to HIPAA laws for data that was (presumably) voluntarily provided to them. Is this scummy? Abso-fucking-lutely. But as far as I'm aware they have a lot of freedom when it comes with data collected with permission from users. Obviously this is something that should be addressed/regulated.
Bought a Galaxy Watch 7 two years ago, the hardware is good and One UI on the watch itself is also quite good (and the last major update improved it) but Samsung Health is such a shit app. Constant ads for some "courses" or videos and things I don't care about. Downloading my personal data doesn't even work, it sends me right to the browser with an error message that I'm "not logged in correctly" and it wants access to all my pictures & videos (seems like a wrong permission prompt there but when I decline it it also fails with "we need access to all your photos & videos". Why? Just send me a download link via email or use SAF and let me pick a download location).
Thanks to this article I also noticed the UI was redesigned. At least I could keep my layout but it didn't work like it should, it added some useless cards. It also asked about new "optional" data sharing which I of course declined. There is now a notice that my data wasn't backupped to my Samsung account the last 3 days (???) and the data synchronization doesn't work, the buttons do nothing, it just says "disabled" even though everything is enabled... typical Samsung shitware. Haven't noticed anything with AI training (there is no option) but I'm also in the EU.
>You will not be able to sync health data with your Samsung account and your health data will be deleted unless retained pursuant to applicable law. If retention is required, we will erase it as soon as the required retention period ends.
Don't threaten me with a good time.
I'm so tired of tech companies shoving AI into everything, everywhere.
I actually don’t know why people are always surprised when this happens, it’s not your data anymore no matter whatever regulations are there. The other day I reactivated my apple music to get a specific shazam song (I don’t use it anymore or any SaaS for that matter, have my navidrome server for years), but little to my surprise, all my playlists and songs are gone, deleted, everything as if it’s a new account! I thought it’s a glitch and googled it, turned out there are a LOT of people who had all their years of music wiped out for not having the subscription for two weeks only.. so yeah, always own your stuff, especially if you pay for it.
88 comments
[ 3.9 ms ] story [ 59.0 ms ] threadSo you buy a device but you can't effectively use half of its features because you'd also have to agree to send them your medical records? Ok then if I refuse, will they refund 50% of the device price since now it's not usable any more?
I really feel like "grab" is quite condescending to a company (Samsung) that provides services at scale (upon/after consent) to help you.. "be better" (simplified..), with direct customization and tailoring.
Versus like "watch out, they are going to strip/rob you regularly -- stop it now!" without even mentioning the product/service that the end user initially signed up for themselves...
By all means, let's use a more appropriate term, like "abuse" or "misappropriate". It's not sufficiently condescending for a company that's trying to train AI on people's private health data.
"pay or consent" stunts have already been ruled illegal under the GDPR. This goes even further than that, where you don't even have the option to pay.
How can you be "condescending" to a company?
The headline as described sounds to me like they're violating GDPR by tying to force "consent" for a not-strictly-necessary-for-functionality use of health data. The European Data Protection Board has repeatedly stated that consent is (generally) not considered to be "freely given" if there is a significant detriment for refusing it or if the user has no genuine choice.
Note however that caveat: as described. There may be some more details which make this not unlawful. Also, actually deleting your data if you don't consent is the kind of thing GDPR requires.
https://www.europe-consommateurs.eu/en/who-we-are/about-us/e...
And file a complaint... As that breaches a dozen or more EU laws. If a lot of people do it in all the countries, it becomes a national issue.
That is the only way you fix things, and yes, we have had multiple successes with companies taking the piss. Even Samsung can not escape as their have officies in the EU and sell products there.
For the folks outside the EU, ... Its a harder fight and you need to look up your local agencies.
People need to step out of this abusive relationship instead of trying to improve it. You will never be happy with a device you don't own.
now that you've done that, which ones are cheap, cuz most people are broke af
Sony has done a bunch of evil things (deleting paid media, hiding rootkits in music CDs). Apple abuses their monopoly to force using their web browser and extort a 30% cut of all purchases. Every car manufacturer is tracking every car they sell and selling that data. Retailers are tracking store visits using everything from face recognition to MAC addresses on cell phones.
Boycotting can only do so much. We need regulations to protect people and steep fines for violating them.
This is they same company whose tvs take pictures of what you are watching and send them back to Samsung.
It's definitely not just Samsung. As bad as this is. The problem is bigger than just them.
Annoying but not a huge deal. I imagine this will slowly get worse as more people learn to not connect it to WiFi.
Also of course all the smart tv features don’t work, and a lot more folks than I ever imagined actually use the built in controller (usually some form of Android or built in Roku) to watch Netflix and whatnot. It seems very few people buy an additional device like an Apple TV or Nvidia Shield.
You can still set up a temporary WiFi and just kill it after but it's getting pretty insane now.
If you agree that the world needs better examples today, then Samsung has definitely showed one.
They could provide some Google-style takeout to get your data before deletion, but that may not have any meaning or practical use without their devices and software.
Some companies are so dead set on doing this shit, that they don't even have mechanism in place that would enable them to act upon you opting out. It is a sign of dysfunctional companies. You can also observe this, when you send companies a GDPR request for deletion and they do eeeeverything to not have to go into their shitty system and delete the data, because that would require them to do manual work.
- Samsung deletes your sensitive health data
- Samsung does not use this data to train some AI
:-)
For Google Workspace accounts that use the Ultra plan you can disable training while retaining history. I didn't bother signing up again. It is user-hostile.
Tracking-free link: https://www.neowin.net/news/samsung-will-delete-your-health-...
Thanks to this article I also noticed the UI was redesigned. At least I could keep my layout but it didn't work like it should, it added some useless cards. It also asked about new "optional" data sharing which I of course declined. There is now a notice that my data wasn't backupped to my Samsung account the last 3 days (???) and the data synchronization doesn't work, the buttons do nothing, it just says "disabled" even though everything is enabled... typical Samsung shitware. Haven't noticed anything with AI training (there is no option) but I'm also in the EU.
Don't threaten me with a good time.
I'm so tired of tech companies shoving AI into everything, everywhere.