Vodafone: Yes, we slurp data on customers' network setups, but we do it for their own good

MyPr0nStash might not have been the wisest name for that file server after all

Seeking to improve its pisspoor customer service rating, UK telecoms giant Vodafone has clarified just how much information it slurps from customer networks. You might want to rename those servers, m'kay?

The updates are rather extensive and were noted by customers after a headsup-type email arrived from the telco.

One offending paragraph gives Vodafone an awful lot of information about what a customer might be running on their own network:

For providing end user support and optimizing your WiFi experience we are collecting information about connected devices (MAC address, Serial Number, user given host names and WiFi connection quality) as well as information about the the WiFi networks (MAC addresses and identifiers, radio statistics).

More accurately, it gives a third party that information. Airties A.S. is the company responsible for hosting information that Vodafone's support drones might use for diagnostics.

With Vodafone topping the broadband and landline complaint tables, according to the most recent Ofcom data (PDF), the company would naturally want to increase the chances of successfully resolving a customer's problem. However, there is no way to opt out.

One customer shared a transcript of a chat with a support minion who fingered industry watchdog Ofcom: "These changes have been done mandatory by the of-com itself, otherwise we would have surely not done that." [sic]

We asked "the of-com" if the slurpage was now mandatory. Ofcom took a look and directed us to the Information Commissioner's Office (ICO). The ICO told us it would "not require a company to do this".

The ICO also dropped some praise on Voda, telling us: "It's important that organisations are transparent with what they are doing with people's data and it would seem in this instance that Vodafone has updated its privacy information to say what they are now doing."

A Vodafone spokesperson told us: "We are investing to improve the home broadband Wi-Fi experience for our customers."

Not a bad idea, looking at those grim Ofcom statistics.

The spokesperson continued: "The speed and reliability of a Wi-Fi connection can suffer as more devices are connected in the home and from increased interference from similar devices in neighbouring houses and flats. Our service helps overcome these issues."

As well as fiddling with a customer's home router in order to "optimise" Wi-Fi performance, the service also means the company's agents have the tools to work out why things might be going awry.

Ominously, the spokesperson added: "They also have the ability to fix them remotely."

As for the change itself: "We have taken appropriate steps to ensure that only the relevant customer data required to optimise and troubleshoot Wi-Fi is shared securely with Airties."

The company also told us that its in-house teams and "an independent specialist" had tested the service to ensure that customer data isn't accidentally spaffed anywhere.

It added: "We are not providing an opt out mechanism because this is an essential service to give customers an improved home broadband experience." The company insisted it had merely "clarified" its policy, because "transparency is important to us".

By our reckoning, that "clarification" has seen the policy jump from just over 300 words last November to more than 2,000.

As for how one might avoid the slurpage, it could be tricky. In a chat transcript seen by The Register, a Vodafone support operative said there was likely no escape: "Even if you switch to other provider they will also tell you the same thing. We all providers are bound under the rules and regulations of the of-com, so even you change the provider the scenario will be the same."[sic]

For its part, Vodafone raised an eyebrow and told us "The advisor is incorrect and we will send out a reminder to them."


Thanks to Reg reader Jeff Sault for the tip. ®

Similar topics

Other stories you might like

  • How to keep a support contract: Make the user think they solved the problem

    Look what you found! Aren't you clever!

    On Call Let us take a little trip back to the days before the PC, when terminals ruled supreme, to find that the more things change the more they stay the same. Welcome to On Call.

    Today's story comes from "Keith" (not his name) and concerns the rage of a user whose expensive terminal would crash once a day, pretty much at the same time.

    The terminal in question was a TAB 132/15. It was an impressive bit of kit for the time and was capable of displaying 132 characters of crisp, green text on a 15-inch CRT housed in a futuristic plastic case. Luxury for sure, unless one was the financial trader trying to use the device.

    Continue reading
  • Apple kicked an M1-shaped hole in Intel's quarter

    Chipzilla braces for a China-gaming-ban-shaped hole in future results, predicts more product delays

    Intel has blamed Apple's switch to its own M1 silicon in Macs for a dip in sales at its client computing group, and foreshadowed future unpleasantness caused by supply chain issues and China's recent internet crackdowns.

    Chipzilla's finances were robust for the third quarter of its financial year: revenue of $19.2 billion was up five per cent year over year, while net income of $6.8 billion was up 60 per cent compared to 2020's Q3.

    But revenue for the client computing group was down two points. CFO George Davis – whose retirement was announced today – was at pains to point out that were it not for Apple quitting Intel silicon and Chipzilla exiting the modem business, client-related revenue would have risen ten per cent.

    Continue reading
  • How your phone, laptop, or watch can be tracked by their Bluetooth transmissions

    Unique fingerprints lurk in radio signals more often than not, it seems

    Over the past few years, mobile devices have become increasingly chatty over the Bluetooth Low Energy (BLE) protocol and this turns out to be a somewhat significant privacy risk.

    Seven boffins at University of California San Diego – Hadi Givehchian, Nishant Bhaskar, Eliana Rodriguez Herrera, Héctor Rodrigo López Soto, Christian Dameff, Dinesh Bharadia, and Aaron Schulman – tested the BLE implementations on several popular phones, PCs, and gadgets, and found they can be tracked through their physical signaling characteristics albeit with intermittent success.

    That means the devices may emit a unique fingerprint, meaning it's possible to look out for those fingerprints in multiple locations to figure out where those devices have been and when. This could be used to track people; you'll have to use your imagination to determine who would or could usefully exploit this. That said, at least two members of the team believe it's worth product makers addressing this privacy weakness.

    Continue reading

Biting the hand that feeds IT © 1998–2021