According to the latest court filing in California, Facebook gathered information on users and their friends including some who had not signed up to the social network, reading their text messages, tracking their locations and accessing photos on their phones.
The filing, submitted last week to the superior court in San Mateo, California, is part of a suit brought against the social networking company in 2015 by now-defunct startup Six4Three and has been ongoing for the past two years.
Six4Threeb alleges that Facebook used a range of methods, some adapted to the different phones that users carried, to collect information it could use for commercial purposes.
The developer is suing Facebook over the failure of its app Pikinis, which allowed users to zero in on photos of their friends in bikinis and other swimwear.
It claims the social media company lured developers and investors on to the platform by intentionally misleading them about data controls and privacy settings. As part of the January filing, it claims Facebook tracked users extensively, sometimes without consent.
“Facebook continued to explore and implement ways to track users’ location, to track and read their texts, to access and record their microphones on their phones, to track and monitor their usage of competitive apps on their phones, and to track and monitor their calls,” one court document says.
On Android phones, the company was able to collect metadata and content from text messages, the lawsuit alleges. On iPhones it could access most photos, including those that had not been uploaded to Facebook, Six4Three claims.
Other alleged projects included one to remotely activate Bluetooth, allowing the company to pinpoint a user’s location without them explicitly agreeing to it. Another involved the development of privacy settings with an early end date that was not flagged to users, letting them expire without notice, the court documents claim.
One court filing, referring to a period in 2013 and 2014, alleges: “Facebook made partial disclosures around this time regarding privacy settings, but did not fully disclose that it had caused certain settings to lapse after a period of time.”
The lawsuit claims the ability to read text messages on Android phones was also partially disclosed, presented to users as a way to make logging in easier, but Facebook deployed it to collect a range of other messages and the associated metadata.
It also collected information sent by non-subscribers to friends or contacts who had Facebook apps installed on their phones, the court documents claim. Because these people would not have been Facebook users, it would have been impossible for them to have consented to Facebook’s collection of their data.
“Facebook disclosed publicly that it was reading text messages in order to authenticate users more easily … [but] this partial disclosure failed to state accurately the type of data Facebook was accessing, the timeframe over which it had accessed it, and the reasons for accessing the data of these Android users,” the complaint alleges.
“Facebook used this data to give certain Facebook products and features an unfair competitive advantage over other social applications on Facebook Platform.”
Facebook admitted recently that it had collected call and text message data from users, but said it only did so with prior consent. However the Guardian has reported that it logged some messages without explicitly notifying users. The company could not see text messages for iPhone users but could access any photos taken on a phone or stored on the built-in “camera roll” archive system, the court case alleged. It has not disclosed how they were analysed.
Documents filed draw upon extensive confidential emails and messages between Facebook senior executives, which are currently sealed.
But all details about the mass surveillance scheme have been redacted on Facebook’s request in Six4Three’s most recent filings. Facebook claims these are confidential business matters. It has until next Tuesday to submit a claim to the court for the documents to remain sealed from public view.Facebook has deployed a feature of California law, designed to protect freedom of speech, to argue that the case should be dismissed. Six4Three is opposing that motion.
A Facebook spokesperson said that Six4Three’s “claims have no merit, and we will continue to defend ourselves vigorously”. Facebook did not directly respond to questions about surveillance.