๐ค AI Summary
This study investigates whether platforms genuinely reduce user data collection under ad-free subscription models and examines the gap between such practices and user privacy expectations. By analyzing data exports from Instagram, Facebook, and X, alongside a survey of 255 participants recruited via Prolific, the research reveals that even in paid, ad-free tiers, platforms retain certain advertising-related data. While 69% of users expect reduced data collection under these subscriptions, 63% remain skeptical that actual practices have changed, highlighting a significant misalignment with the data minimization principles of the GDPR. The work innovatively integrates empirical analysis of user data exports with large-scale survey evidence to quantify the discrepancy between user privacy expectations and platform behavior.
๐ Abstract
Online platforms increasingly offer"paid"ad-free subscriptions as an alternative to the traditional"free"ad-based model. The transition to ad-free models ostensibly removes advertising as a key justification for data processing under the GDPR. So, normatively, platforms should collect less user data. However, platforms may justify continued data collection as a means to provide an improved, personalized experience. This tension between privacy principles and platform incentives raises a critical underexplored question: do data collection practices vary between ad-free and ad-based subscription models? In this paper, we shed light on this important privacy issue by investigating the alignment between platform data collection practices and related user expectations. With respect to data collection process, our analyses of data exports from three major online platforms - Instagram, Facebook, and X - reveal that these platforms continue to retain or collect some ad-related data, even in ad-free subscriptions. With respect to user expectations, our survey among 255 participants on Prolific reveals that 69% of the participants normatively expect data collection to be reduced, indicating their expectation of improved digital privacy in an ad-free model. However, when asked what they think actually happens, 63% of these participants believed that platforms would still collect about the same amount of data, highlighting skepticism about platform practices. Our findings not only indicate a significant disconnect between data practices and normative user expectations, but also raise serious questions about platform compliance with core GDPR principles, such as purpose limitation, data minimization, and transparency.