Saturday, May 23, 2015

Flipkart and Focus 3 - There’s Something (Profitable) About Your Privacy

The third in my series on Flipkart and focus appeared in DNA on April 18th, 2015.



Part III – There’s Something (Profitable) About Your Privacy
Why do so many companies hanker after apps? Smartphone apps, tablet apps, iOS apps, Android apps, app-this, app-that….
Leave aside for a moment the techno-pubescent excitement that accompanies the launch of every new technology (if you are not old enough to remember words like “client-server[1]”, then “soa[2]” will surely sound familiar enough). Every Marketing 101 course drills into its students that acquiring a new customer is way costlier than retain an existing. Loyal customers (leaving aside the pejorative connotation the word “loyal” carries, implying that customers who shop elsewhere for a better deal are of dubious moral character) are what you should aspire to – that keep buying from you for a longer period of time[3] – and which allows you to refocus your marketing and advertising dollars towards the acquisition of newer customers, faster. If you spend less on unnecessary discounts and expensive retention schemes then margins from existing customers are automatically higher.



Customers can stay loyal if you can build a bond of affinity with them. You should aspire to be more like the local kirana owner (only infinitely richer), who in a perfect world knew everything about you – your likes, dislikes, which festivals you celebrated, and therefore which sweets you would buy, when your relatives came over to stay and what their likes were, what exotic food items you wanted, and so on. And who knew your name. Hence the marketer’s love for loyalty programs[4], no matter that customer loyalty is notoriously difficult to guarantee[5].

In the world of online retailing (actually, it applies just as well to any kind of retailing), how do you get to acquire a deep level of intimacy with your customer? Smartphone apps provide this degree of intimacy that desktop / laptop browsers cannot. This is by simple virtue of the fact that the smartphone travels with the user, the user is constantly logged on to the app, and the app knows where you go and where you are. So no wonder that in December 2011, Amazon offered a “brazen[6]” deal to its customers in brick-and-mortar stores to do an “in-store” price-check of items using the Amazon Price Check app[7], and if the same product was available on Amazon, get it at a discount off the store’s price. Though termed “not a very good deal[8]”, it nonetheless angered[9] the Retail Industry Leaders Association, and elsewhere was described as “Evil But It's the Future[10]”. The combination of availability – the app was installed on the smartphone that was with the user – and the integrated capabilities in the device – a camera that fed into a barcode scanner app –made this possible. The appeal of apps is undeniable.

The magical answer is – “app”. Your best-thing-since-sliced-bread app is installed on the customer’s smartphone (or tablet or phablet), is always running (even when it is not supposed to be running), knows everyone in your contacts (from your proctologist to the illegal cricket bookie), can hear what you speak (even your TV can do this now[11]), knows where you are, who you call, what text messages you send and receive, knows what other apps you have installed on your smartphone (presumably so it can see how potentially disloyal you could be), which Wi-Fi networks you connect to, access what photos and videos you have taken (naughty!) and so on and so forth. All this the better to hear you with, the better to see you with, and ultimately the better to eat you (your wallet) with – with due apologies to Little Red Riding Hood[12]. You may want to take a closer look at the permissions your favorite app wants when you install it – like Amazon India[13], eBay[14], Flipkart[15], Freecharge[16], HomeShiop18[17], Jabong[18], MakeMyTrip[19], Myntra[20], SnapDeal[21]. Great minds do seem to think alike, don’t they?

[Technical aside: I covered the red herrings thrown in favour of apps in the first part, but here is some more… You can store more data, more effectively, and process that data better using an app than you can with a plain browser-based approach. True. But not quite. The ever-evolving world of HTML5 (the standard that underpins how information is structured and presented on the web) has progressed to make both these points moot – with offline storage[22] and local SQL database support[23]. Yes, there are arguments to be made about handling large amounts of data offline with browser-based mechanisms, but these are for the most part edge-cases. To be fair, there are some high-profile cases of companies switching to native apps after experimenting with HTML5-based apps (hybrid apps that wrapped a browser-based UI with a native shell), like LinkedIn[24] and Facebook[25]. The appeal of apps therefore is undeniable. But, as I argued earlier, the appeal of apps does not negate the utility of browser-based interfaces.]

What is all this useful for? Your app now knows that you Ram, Shyam, and Laxman in your contacts have birthdays coming up, and it can suggest an appropriate gift for them. Convenient, isn’t it? While driving to work, you can simply tell your app – speak out the commands – to search for the latest perfume that was launched last week and to have it gift wrapped and delivered to your wife. The app already has your credit card details, and it knows your address. Your app knows that you are going on a vacation next week (because it can access your calendar, your SMS-es, and perhaps even your email) to Sikkim; it helpfully suggests a wonderful travel book and some warm clothing that you may need. The imagined benefits are immense.

But, there is a distinctly dark side to apps – as it relates to privacy – that should be a bigger reason of concern for customers and smartphone users alike. Three sets of examples should suffice.
You get a flyer from your favourite brick-and-mortar store, letting you know that you can buy those items that your pregnant daughter will need in the coming weeks. You head over to the store, furious – because your daughter is most certainly not pregnant. Later you find out that she is, and that the store hadn’t made a mistake. It turns out the truth is a little more subtler than that[26], and a little more sedate than what tabloid-ish coverage - with headlines like “How Companies Learn Your Secrets[27]” - made it out to be (the original presentation made at the PAW Conference is also available online[28]).

There are enough real dangers in this world without making it easier to use technology to make it even more unsafe. Considering how unsafe[29] air travel can be for women[30] and even girls[31], one has to question the wisdom of making it even[32] more so[33]. If this does not creep you out, then perhaps the Tinder app – which uses your location and “displays a pile of snapshots of potential dates in a user’s immediate area”[34], to as close as within 100 feet[35] - may give you pause for thought.

Do apps need all the permissions they ask for? No. But, … no! Would they work if they didn’t have all those permissions? 99% of the time, yes – they would work without a problem. For example, an app would need to access your camera if you wanted to scan a barcode to look up a product. The app would need access to your microphone if you wanted to speak out your query rather than type it in the app. What if you don’t particularly care about pointing your camera at the back of books to scan their barcodes, or speaking like Captain Kirk into your phone? Sorry, you are out of luck. You cannot selectively choose to not grant to certain privileges to an app – at least on a device running the Android mobile operating system. In other words, it is a take-it-or-leave-it world, where the app developer is in control. Not you. And wanting to know your location? Even if you are a dating app, it’s still creepy.

But surely app makers will ask you before slurping your very personal, very private information to its servers in the cloud? Yes, of course – you believe that to be true, especially if you are still in kindergarten.

A few weeks before its IPO[36], JustDial’s app was removed from the Google Play Store[37]. It was alleged that the updated version of the JustDial app had “started retrieving and storing the user’s entire phone book, without a warning or disclaimer. [38],[39]” Thereafter, JustDial’s mobile “Terms and Conditions” were updated to include the following line: “You hereby give your express consent to Justdial to access your contact list and/or address book for mobile phone numbers in order to provide and use the Service.[40]

In 2013, US-based social networking app Path was caught as it “secretly copied all its users’ iPhone address books to its private servers.”[41] Action was swift. The FTC investigated and reached a settlement with Path, which required “Path, Inc. to establish a comprehensive privacy program and to obtain independent privacy assessments every other year for the next 20 years. The company also will pay $800,000 to settle charges that it illegally collected personal information from children without their parents’ consent.”[42] In the US, a person’s address book “is protected under the First Amendment[43].” When the controversy erupted, it was also reported that “A person’s contacts are so sensitive that Alec Ross, a senior adviser on innovation to Secretary of State Hillary Rodham Clinton, said the State Department was supporting the development of an application that would act as a “panic button” on a smartphone, enabling people to erase all contacts with one click if they are arrested during a protest[44].” Of course, politics is not without its dose of de-rigueur dose of irony. That dose was delivered in 2015 when it emerged that Hillary Clinton had maintained a private email account even as she was Secretary of State in the Barack Obama presidency and refused to turn over those emails[45].

So what happened to Just Dial for allegedly breaching its users’ privacy? Nothing. No investigation. No fine. No settlement. No admission. No mea-culpa. In short, nothing. It was business as usual.
Apps can be incredibly liberating in eliminating friction in the buying process. But hitching your strategy to an app-only world is needless. It is an expensive choice – from many, many perspectives, and not just monetary. The biggest costs are of making you look immature should you have to reverse direction. As a case-in-point, one can point to the entirely avoidable brouhaha over Flipkart, Airtel, and Net Neutrality[46]. In this battle, no one came smelling like roses, least of all Flipkart, which attracted mostly negative attention[47] from the ill-advised step, notwithstanding post-fact attempts to bolt the stable door[48].

Let me end with an analogy. The trackpad on your laptop is very, very useful. Do you then disable the use of an externally connected mouse?

Disclaimer: views expressed are personal.


[1] "Computerworld - Google Books", https://books.google.co.in/books?id=c2t_-WWE1VAC&pg=PA109&lpg=PA109&dq=client-server+hype&source=bl&ots=SJGHWFM-M5&sig=g6sagoJV_xVSvp22-rgOonfLpNY&hl=en&sa=X&ei=x1ExVb3NKYeumAX2_IGICQ&ved=0CDYQ6AEwBA#v=onepage&q=client-server%20hype&f=false
[2] "SOA: Hype vs. Reality - Datamation", http://www.datamation.com/entdev/article.php/3671061/SOA-Hype-vs-Reality.htm
[3] "How Valuable Are Your Customers? - HBR", https://hbr.org/2014/07/how-valuable-are-your-customers/
[4] "Loyalty programmes: Are points that consumers stockpile juicy enough to keep them coming back? - timesofindia-economictimes", http://articles.economictimes.indiatimes.com/2013-06-30/news/40272286_1_loyalty-programmes-loyalty-card-loyalty-management
[5] "What Loyalty? High-End Customers are First to Flee — HBS Working Knowledge", http://hbswk.hbs.edu/item/6679.html
[6] "Amazon's Price Check App Undercuts Brick-and-Mortar Stores Prices | TIME.com", http://business.time.com/2011/12/08/use-amazons-price-check-app-and-save-15-this-saturday/
[7] "Amazon.com Help: About the Amazon Price Check App", http://www.amazon.com/gp/help/customer/display.html?nodeId=200777320
[8] "Amazon pushing Price Check app with controversial online discounts | The Verge", http://www.theverge.com/2011/12/10/2626703/amazon-price-check-app-competition-discount
[9] "Retail association pissed about Amazon.com's Price Check app - GeekWire", http://www.geekwire.com/2011/retail-association-pissed-amazoncoms-price-check-app/
[10] "Amazon Price Check May Be Evil But It's the Future - Forbes", http://www.forbes.com/sites/erikkain/2011/12/14/amazon-price-check-may-be-evil-but-its-the-future/
[11] "Samsung smart TV issues personal privacy warning - BBC News", http://www.bbc.com/news/technology-31324892
[12] "Little Red Riding Hood - Wikipedia, the free encyclopedia", http://en.wikipedia.org/wiki/Little_Red_Riding_Hood
[13] https://www.dropbox.com/s/63zk6oyt9tqad4p/AmazonIndia_app.png?dl=0
[14] https://www.dropbox.com/s/g4tj1k5d5yfbqex/ebay_app.png?dl=0
[15] https://www.dropbox.com/s/wq0spvgzo9il6rx/Flipkart_app.png?dl=0
[16] https://www.dropbox.com/s/jxvur4g1jqdb03k/freecharge_app.png?dl=0
[17] https://www.dropbox.com/s/7aza8ipjvqhn6m1/HomeShop18_app.png?dl=0
[18] https://www.dropbox.com/s/jgel7ltka5u5ogr/Jabong_app.png?dl=0
[19] https://www.dropbox.com/s/wkqhewbizxpcw7w/MakeMyTrip_app.png?dl=0
[20] https://www.dropbox.com/s/pcp6hoy38pfkiw3/Myntra_app.png?dl=0
[21] https://www.dropbox.com/s/0gngd11rz2fpu3q/snapdeal_app.png?dl=0
[22] "Web Storage", http://dev.w3.org/html5/webstorage/
[23] "Offline Web Applications", http://www.w3.org/TR/offline-webapps/#sql
[24] "Why LinkedIn dumped HTML5 & went native for its mobile apps | VentureBeat | Dev | by J. O'Dell", http://venturebeat.com/2013/04/17/linkedin-mobile-web-breakup/
[25] "Mark Zuckerberg: Our Biggest Mistake Was Betting Too Much On HTML5 | TechCrunch", http://techcrunch.com/2012/09/11/mark-zuckerberg-our-biggest-mistake-with-mobile-was-betting-too-much-on-html5/
[26] "Did Target Really Predict a Teen’s Pregnancy? The Inside Story", http://www.kdnuggets.com/2014/05/target-predict-teen-pregnancy-inside-story.html
[27] "How Companies Learn Your Secrets - NYTimes.com", http://www.nytimes.com/2012/02/19/magazine/shopping-habits.html?_r=0
[28] "Predictive Analytics World Conference: Agenda - October, 2010", http://www.predictiveanalyticsworld.com/dc/2010/agenda.php#day1-8a
[29] "Federal judge upholds verdict that North Bergen man molested woman on flight ‹ Cliffview Pilot", http://cliffviewpilot.com/federal-judge-upholds-verdict-that-north-bergen-man-molested-woman-on-flight/
[30] "Man accused of groping woman on flight to Newark - NY Daily News", http://www.nydailynews.com/new-york/man-accused-groping-woman-flight-newark-article-1.1709952
[31] "Man jailed for molesting girl, 12, on flight to Dubai | The National", http://www.thenational.ae/uae/courts/man-jailed-for-molesting-girl-12-on-flight-to-dubai
[32] "Virgin is Going to Turn Your Flight Into a Creepy Bar You Can't Leave", http://mic.com/articles/37807/virgin-is-going-to-turn-your-flight-into-a-creepy-bar-you-can-t-leave
[33] "KLM Introduces A New Way To Be Creepy On An Airplane - Business Insider", http://www.businessinsider.com/klm-introduces-a-new-way-to-be-creepy-on-an-airplane-2012-2?IR=T
[34] "Tinder Dating App Users Are Playing With Privacy Fire - Forbes", http://www.forbes.com/sites/anthonykosner/2014/02/18/tinder-dating-app-users-are-playing-with-privacy-fire/
[35] "Include Security Blog | As the ROT13 turns….: How I was able to track the location of any Tinder user.", http://blog.includesecurity.com/2014/02/how-i-was-able-to-track-location-of-any.html
[36] http://en.wikipedia.org/wiki/Justdial, accessed April 11, 2015
[37] "Updated: JustDial App Pulled From Google Play Store; Privacy Concerns? - MediaNama", http://www.medianama.com/2012/09/223-justdial-app-pulled-from-google-play-store-privacy-concerns/
[38] "Updated: JustDial App Pulled From Google Play Store; Privacy Concerns? - MediaNama", http://www.medianama.com/2012/09/223-justdial-app-pulled-from-google-play-store-privacy-concerns/
[39] "Bad App Reviews for Justdial JD", http://www.badappreviews.com/apps/147872/justdial-jd-search-anything, accessed April 09, 2015
[40] "Terms Of Use”, http://www.justdial.com/MobileTC, accessed April 09, 2015
[41] "The Path Fiasco Wasn't A Privacy Breach, It Was A Data Ownership Breach - The Cloud to Cloud Backup Blog", http://blog.backupify.com/2012/02/09/the-path-fiasco-wasnt-a-privacy-breach-it-was-a-data-ownership-breach/
[42] "Path Social Networking App Settles FTC Charges it Deceived Consumers and Improperly Collected Personal Information from Users' Mobile Address Books | Federal Trade Commission", https://www.ftc.gov/news-events/press-releases/2013/02/path-social-networking-app-settles-ftc-charges-it-deceived
[43] "Anger for Path Social Network After Privacy Breach - NYTimes.com", http://bits.blogs.nytimes.com/2012/02/12/disruptions-so-many-apologies-so-much-data-mining/?_r=0
[44] Ibid.
[45] "Hillary Clinton deleted 32,000 'private' emails, refuses to turn over server - Washington Times", http://www.washingtontimes.com/news/2015/mar/10/hillary-clinton-deleted-32000-private-emails-refus/
[46] "Flipkart Pulls Out of Airtel Deal Amid Backlash Over Net Neutrality", http://www.ndtv.com/india-news/flipkart-pulls-out-of-airtel-deal-amid-backlash-over-net-neutrality-754829
[47] "Flipkart's stand on net neutrality - The Hindu", http://www.thehindu.com/business/flipkarts-stand-on-net-neutrality/article7106072.ece

[48] "Our Internet is headed in the right direction: Amod Malviya - Livemint", http://www.livemint.com/Companies/1J4CaeGnXvKCbwvWW76J6H/Our-Internet-is-headed-in-the-right-direction-Amod-Malviya.html



© 2015, Abhinav Agarwal (अभिनव अग्रवाल). All rights reserved.