DuckDuckGo Fights Data Brokers to Protect User Privacy

DuckDuckGo Launches Privacy-Focused VPN and Personal Information Removal Tool

Taking on the Data Broker Industry

In a bold move to protect user privacy, DuckDuckGo has introduced a personal-information-removal tool aimed at combating the extensive data broker industry. This $200-plus billion market thrives on collecting, buying, and selling personal information, often without the knowledge or consent of individuals. DuckDuckGo’s tool specifically targets people-search websites, which allow users to look up names, addresses, and family member details.

Ensuring User Privacy

DuckDuckGo has engineered its removal tool to prioritize user privacy. When users enter their personal information, such as name, year of birth, and addresses, the data is stored in an encrypted database on their local computer. Importantly, this sensitive information is not sent to DuckDuckGo’s servers, ensuring that the company does not have access to it.

Navigating the Complexities of Data Broker Websites

The removal tool scans 53 data broker websites for results linked to the user and requests the removal of those records. Each website has its unique URL structure, which DuckDuckGo has carefully studied to construct search queries accurately. Greg Fiorentino, a product director at DuckDuckGo, explains:

Each of the 53 sites we cover has a slightly different structure. We have a template URL string that we substitute the data in from the user to search. There are lots of different nuances and things that we need to be able to handle to actually match the data correctly.

Widespread Presence of Personal Information Online

During testing, DuckDuckGo discovered that most people have between 15 and 30 records on the data broker sites it checks, with the highest being around 150. Even DuckDuckGo’s founder, Gabriel Weinberg, found his personal information, including old and current addresses, scattered across these websites, highlighting the pervasive nature of the issue.

Automated Removal Requests and Future Enhancements

Once the scan for records is complete, DuckDuckGo’s system automatically makes requests for the data to be removed from the respective websites. The removal process can take anywhere from hours to weeks, depending on the website. Looking ahead, DuckDuckGo plans to expand the tool’s capabilities to remove data from more websites and potentially include sensitive information like financial details.

Protecting User Privacy with Subscriptions and Identity Theft Restoration

DuckDuckGo offers its removal tool as part of a subscription service, ensuring that user payment information remains private. Subscriptions are purchased through Apple’s App Store, Google Play, or Stripe, and DuckDuckGo does not receive any personal details. For identity theft restoration, DuckDuckGo has partnered with Iris, an identity protection service that assists with fraudulent banking activity, document replacement, emergency travel, and more, without sharing information between the two companies.

Introducing a Privacy-Focused VPN

In addition to the removal tool, DuckDuckGo has launched its own VPN service, built in-house using the WireGuard protocol. The VPN is designed to protect user privacy by not storing any logs of online activities, including website visits, DNS requests, IP addresses, or session lengths. Users can connect up to five devices simultaneously, and the VPN shields all internet traffic passing through the user’s phone or computer. DuckDuckGo is conducting a third-party audit of the VPN to validate its privacy claims.

A Commitment to User Privacy

DuckDuckGo’s introduction of the personal-information-removal tool and privacy-focused VPN demonstrates the company’s unwavering commitment to protecting user privacy in an increasingly data-driven world. By empowering individuals to take control of their personal information and offering secure browsing solutions, DuckDuckGo is positioning itself as a leader in the fight for online privacy.