Facebook, Instagram, and Twitter Provided Data Access for a Surveillance Product Marketed to Target Activists of Color

The ACLU of California has obtained records showing that Twitter, Facebook, and Instagram provided user data access to Geofeedia, a developer of a social media monitoring product that we have seen marketed to law enforcement as a tool to monitor activists and protesters.

We are pleased that after we reported our findings to the companies, Instagram cut off Geofeedia’s access to public user posts, and Facebook has cut its access to a topic-based feed of public user posts. Twitter has also taken some recent steps to rein in Geofeedia though it has not ended the data relationship.

Further steps are required if these companies are to live up to their principles and policies by protecting users of all backgrounds engaging in political and social discourse. So today the ACLU of California, the Center for Media Justice, and Color of Change are calling on Twitter, Facebook and Instagram to commit to concrete changes to better protect users going forward. Read our letters here and here.

We first learned about these agreements with Geofeedia from responses to public records requests to 63 California law enforcement agencies. These records revealed the fast expansion of social media surveillance with little-to-no debate or oversight.

But as we continued to comb through thousands of pages of documents, we saw emails from Geofeedia representatives telling law enforcement about its special access to Twitter, Facebook, and Instagram user data.

In one message, a Geofeedia representative tells police that the company has arrangements with Twitter and Instagram for user data. Right after that, the representative promotes a product feature that “covered Ferguson/Mike Brown nationally with great success.

In another email from May 2016, a Geofeedia representative touts a “confidential legally binding agreement with Facebook.

We now know the following about these agreements:

  • Instagram had provided Geofeedia access to the Instagram API, a stream of public Instagram user posts. This data feed included any location data associated with the posts by users. Instagram terminated this access on September 19, 2016.
     
  • Facebook had provided Geofeedia with access to a data feed called the Topic Feed API, which is supposed to be a tool for media companies and brand purposes, and which allowed Geofeedia to obtain a ranked feed of public posts from Facebook that mention a specific topic, including hashtags, events, or specific places. Facebook terminated this access on September 19, 2016.
     
  • Twitter did not provide access to its “Firehose,” but has an agreement, via a subsidiary, to provide Geofeedia with searchable access to its database of public tweets. In February, Twitter added additional contract terms to try to further safeguard against surveillance. But our records show that as recently as July 11th, Geofeedia was still touting its product as a tool to monitor protests. After learning of this, Twitter sent Geofeedia a cease and desist letter.

Because Geofeedia obtained this access to Twitter, Facebook and Instagram as a developer, it could access a flow of data that would otherwise require an individual to “scrape” user data off of the services in an automated fashion that is prohibited by the terms of service (here and here). With this special access, Geofeedia could quickly access public user content and make it available to the 500 law enforcement and public safety clients claimed by the company.

Social media monitoring is spreading fast and is a powerful example of surveillance technology that can disproportionately impact communities of color. Using Geofeedia’s analytics and search capabilities and following the recommendations in their marketing materials, law enforcement in places like Oakland, Denver, and Seattle could easily target neighborhoods where people of color live, monitor hashtags used by activists and allies, or target activist groups as “overt threats.” We know for a fact that in in Oakland and Baltimore, law enforcement has used Geofeedia to monitor protests.

Social media companies and their executives have expressed support for activists, movements, and free speech. Mark Zuckerberg endorsed Black Lives Matter and expressed sympathy after Philando Castile’s killing, which was broadcast on Facebook Live. Twitter’s CEO Jack Dorsey went to Ferguson. Above all, the companies articulate their role as a home for free speech about important social or political issues.

Yet there is a severe disconnect between these positions and the data access they have provided.

Beyond the agreements with Geofeedia, we are concerned about a lack of robust or properly enforced anti-surveillance policies. Neither Facebook nor Instagram has a public policy specifically prohibiting developers from exploiting user data for surveillance purposes. Twitter does have a “longstanding rule” prohibiting the sale of user data for surveillance as well as a Developer Policy that bans the use of Twitter data “to investigate, track or surveil Twitter users.” Publicly available policies like these need to exist and be robustly enforced.

Here is what we’re asking of the social networks:

  • No Data Access for Developers of Surveillance Tools: Social media companies should not provide data access to developers who have law enforcement clients and allow their product to be used for surveillance, including the monitoring of information about the political, religious, social views, racial background, locations, associations or activities of any individual or group of individuals.
     
  • Clear, Public & Transparent Policies: Social media companies should adopt clear, public, and transparent policies to prohibit developers from exploiting user data for surveillance purposes. The companies should publicly explain these policies, how they will be enforced, and the consequences of such violations. These policies should also appear prominently in specific materials and agreements with developers.
     
  • Oversight of Developers: Social media companies should institute both human and technical auditing mechanisms designed to effectively identify potential violations of this policy, both by the developers and end users, and take swift action for violations.

The government should not have preferred access to social media speech for surveillance purposes. We are confident the companies agree. Facebook and Instagram have already cut off access to Geofeedia and Twitter should do the same. It’s also time for all three of the companies to live up to their words by taking the additional concrete steps outlined in our letters.

Note: The CEO of Geofeedia has asked to meet with us, and we look forward to hearing what he has to say.

Update (10/11/16)
At 11:06 am EST Twitter today (10/11/16) announced the following:

"Based on the information in the ACLU's report, we are immediately suspending Geofeedia’s commercial access to Twitter data."

Cross-posted from the blog of the ACLU of Northern California.

Learn more - explore the new batch of public records we're releasing today:

Geofeedia email to Riverside Police Department discussing data arrangements with Twitter and Instagram (October 20, 2015)

Geofeedia email to San Diego District Attorney’s Office discussing data arrangement with Facebook (May 11, 2016)

Geofeedia email to Sacramento County District Attorney’s office discussing “monitoring for protests” (July 11, 2016)

Geofeedia email to Sacramento District Attorney discussing Geofeedia’s “work with over 500 law enforcement and public safety agencies.” (June 14, 2016)

Geofeedia 'Case Study' regarding the Baltimore County Police Department' sent to the Glendale Police Department

Geofeedia Product Update email discussing “sentiment” analytics (May 18, 2016)

Geofeedia email to Ventura County Sheriff’s Office discussing ability to create emoji-based alerts (January 13, 2016)

Geofeedia product update email to the Glendale Police Department, noting Vine/Periscope and image recognition (January 27, 2016)

Geofeedia email to Stanislaus Sheriff’s Office discussing “user track” feature (March 16, 2016)

Geofeedia email to Glendale Police Department discussing “Instagram map widget” (June 25, 2015)

Add a comment (8)
Read the Terms of Use

Anonymous

In the County of Carson City Nevada, which includes the city of Carson City, last week the Board of Supervisors approved without putting it to a vote of the People of the County, 2 measures: One merges the jurisdiction of the County Sherriff's office with that of the Washoe tribe police department and several other previously distinct law enforcement entities. This measure will enable all these agencies to operate on Washoe tribal reservation land, and to my knowledge this action was taken by Board of Supervisors fiat, without the prior knowledge and or support of Washoe tribal leaders. Since said officers frequently go into private Washoe homes ostensibly to combat meth issues, and often/ I

Relosa

It is still up to those that know how to protect themselves from the social networks like instagram and such.
https://followers-like.com

Anonymous

Please excuse the subtext here of blaming the victim, I am being lazy and phrasing this in a way that perhaps implies that, but it is not what I mean:

What the hell do people expect when you use these services?

Give these for-profit organisations information, anti-social by their raison d'etre, and it will be used against people. The only way to stay safe is to not use these things at all and to use non-centralised (lets call it peer-to-peer) communication methods.

When even the ACLU or pro-people organisations seem to welcome these centralised, non-interoperable systems it is no surprise they get used. And then the publishers put themselves first, as is the way with proprietary software (users first cannot be assured when software is closed).

This web page alone has this malware blocked:
###block-menu-menu-social-links
##.share-icons
smetrics.aclu.org/b/ss/aclumain/1/H.27[editted]
aclu.org/sites/default/files/styles/blog_index_thumbnail_130x110/public/field_image/nsa_twitter_0.[editted]
aclu.org/sites/default/files/styles/blog_index_thumbnail_130x110/public/field_image/social_media_by_jason_howie_[editted]

I run no JS but a look at the page source and these seems to be loads of corporate-style web behaviours. This article cannot be on the side of people when you implement basically the same things as what underpins FB etc.'s shitty behaviour. Whether ACLU realises it or not, you are promoting their paradigms, and those paradigms do not align with humanity.

People need to learn that the IT industry presents computers as they wish them to be, not what they actually are. The establishment shits itself so hard about "hackers" because they have a view where they treat computers as they are and not as some kind of "consumption appliance". A machine that does nothing without a middleman providing software and counting out the bytes one-by-one for granular billing. Stupid thinking, you need no reliance on middlemen and people should not humour the idea that data is a commodity.

Anonymous

Since the inception of Modern Policing, Law Enforcement has continually played catchup to apprehend criminals using new and modern "techniques." With limited resources, funding, training, and personnel shortages it is a wonder that Law Enforcement is able to even maintain an even strain.

It's apparent that the ACLU would be perfectly comfortable allowing criminals to run at large unabated; with law enforcement unable to do surveillance of any kind.

With dwendling numbers of law enforcement and recruitment of new law enforcement officers at an all time low your would think the ACLU would be paying attention. Unless of course, your motivation was to continue the pursuit of chaos and anarchy in this country.

Anonymous

I can understand the point for privacy. But why the race baiting and fear mongering in your article? Such negative rhetoric as you openly bully and harass with your twisted view of "justice".

Anonymous

If an individual pays for data, regardless of what it is, then they have every right to do with it what they want...God forbid we try to stop people from attacking our police and looting the streets. Additionally, any individual involved in the heinous acts that they individuals in Charlotte were involved in should have been smarter than to post it to social media IN A PUBLIC POST for the world to see...as soon as they did that they gave up all rights to privacy.

GiftCodesGiveAway

You can easily acquire free amazon gift card generator online. You can generate unlimited amazon free card codes completely free of cost.

GiftCodesGiveAway

You can easily acquire free amazon gift card generator online. You can generate unlimited amazon free card codes completely free of cost.

Sign Up for Breaking News