Trustmark Schemes Struggle to Protect Privacy (2008)
9. Penetration
Trustmark schemes have not been successful in penetrating the market. Just 7 out of the global top 50 visited websites have any form of trustmark. This is made up of 7 sites with TRUSTe seals (3 of those are Microsoft brands).[80]
One emerging criticism of trustmarks is that the proportion of legitimate, privacy-friendly websites with trustmarks is diminishing, while the number of scam sites or privacy intrusive websites carrying trustmarks is increasing. There is a risk of guilt by association for legitimate sites, as some commentators have started to warn consumers that a trustmark may actually indicate a higher risk than the absence of a trustmark.
A major cause of this issue is the large number of scam, fake, expired and useless seals that now appear online (discussed above).
A more pressing issue is the number of privacy-intrusive sites who have been certified by TRUSTe – the last high-profile generic privacy trustmark scheme still operating. TRUSTe has listed all of the following sites as certified in recent years, either as part of the privacy seal program or the trusted download program. These organisations are all well known to privacy, security and consumer advocates, as they have been subject to numerous privacy and security breaches, FTC investigations and ongoing consumer campaigns[81]:
Website |
Issues |
coupons.com |
Deceptive installation |
direct-revenue.com |
Non-consensual spyware installation, including deceptive installations and installations through security vulnerabilities. |
eZula.com |
Adware / malware |
focalex.com |
Spyware |
freecreditreport.com |
Consumer protection warnings http://www.ehow.com/how_4502163_cancel-freecreditreportcom-account.html |
freeipods.com (Gratis Internet) |
Spam seller http://cultofmac.com/freeipodscom-sold-private-data-despite-promising-not-to/248 |
funwebproducts.com |
Malware - sends a record of every websearch made, with the user’s IP address |
Idownload (e.g. smartshopper) |
Deceptive practices http://www.edbott.com/weblog/?p=496 Malware |
maxmoolah.com |
Spam seller |
Relevant Knowledge (provisional) |
Tracking / adware |
webhancer.com |
Installs tracking software without informed consent |
wowpapers.com (Hotbar) |
Spyware / adware http://www.spywareinfoforum.com/lofiversion/index.php/t50584.html |
yourgiftcards.com |
Spam seller |
Note that TRUSTe has defended the appearance of many of these sites on its list of sealholders, claiming that they were listed in error:
FunWebProducts, was, by an error in our database listed on our customer list, but it has never been certified, and has never displayed any seals or reference to TRUSTe to consumers.[82]
In total, more than a dozen such errors have been claimed by TRUSTe.[83] Many of the sites were listed in error for over 12 months.[84]
[80] <http://www.alexa.com/site/ds/top_sites?ts_mode=global&lang=none>, accessed on 29 August 2008.
[81] Edelman B, Certifications and Site Trustworthiness, 25 September 2006, <http://www.benedelman.org/news/092506-1.html>.
[82] TRUSTe, TRUSTe Certifications and Online Trust, 25 September 2006, <http://blog.truste.org/?m=200609>.
[83] Porter W, TRUSTe Answers The Challenge and Asks Mr. Edelman To Do The Same..., 2 October 2006, <http://www.revenews.com/wayneporter/truste-answers-the-challenge-and-asks-mr-edelman-to-do-the-same/>.
[84] Edelman B, Certifications and Site Trustworthiness, 25 September 2006, <http://www.benedelman.org/news/092506-1.html>.