It has been discovered that Google is hiding three Google Pay privacy settings unless you access the service’s Settings screen through a special URL. These settings allow you to restrict whether Google Pay shares your creditworthiness, personal information, or Google Pay account information.
Google Pay is a payment service from Google that allows you to purchase items online and in stores by using stored payment information. Like all online services, Google Pay has a Settings screen in their Google payments center that allows you to configure various settings related to the service.
This Settings page can be accessed using the navigation sidebar, as shown below, or directly through the URL https://pay.google.com/payments/u/0/home#settings. From the Settings screen you can set your address, payment users, some general settings, and other information. There is, though, no privacy settings on this page when accessing it normally.
On the other hand, if you access the same page using a different URL, https://pay.google.com/payments/u/0/home?page=privacySettings#privacySettings, the same settings as the above page will be displayed, but this time with three additional privacy settings.
These new privacy settings allow you to restrict how Google Pay shares your information with other companies owned or controlled by Google or with sites you visit.
Allow Google Payment Corporation to share third-party creditworthiness information about you with other companies owned and controlled by Google LLC for their everyday business purposes.
Allow your personal information to be used by other companies owned and controlled by Google LLC to market to you. Opting out here does not impact whether other companies owned and controlled by Google LLC can market to you based on the information you provide to them outside of Google Payment Corporation.
Allow Google LLC or its affiliates to inform a third party merchant, whose site or app you visit, whether you have a Google Payments account that can be used for payment to that merchant. Opting out may impact your ability to use Google Payments to transact with certain third party merchants.
These settings are all enabled by default. Furthermore, this URL is not linked to from the Google Payment Center navigation links.
The URL was discovered by a user who posted about it on Reddit who saw it on the Google Payment Privacy Notice page in the following paragraph:
“If you don’t want us to share personal information about your creditworthiness between GPC and its affiliates, or if you do not want our affiliates to use your personal information collected by us and shared with them to market to you, or if you do not want Google LLC or its affiliates to inform a third-party merchant, whose site or app you visit, whether you have a Google Payments account that can be used for payment to that merchant, please indicate your preference by logging in to your account, going to the Google Payments privacy settings page, and updating your preferences.”
It is baffling that after all the privacy lapses, congressional hearings, and concerns that users increasingly have regarding the use of their data that Google would intentionally hide or make it difficult to access privacy settings.
EHR Vendor Slapped With HIPAA FineInvestigation Came in Wake of Cyberattack That Affected Millions Federal regulators have smacked a cloud-based electronics health records vendor with a $100,000 HIPAA settlement in the wake of a 2015 cyberattack that affected millions...
‘BlueKeep’ Windows Remote Desktop flaw gets PoC exploitsMultiple researchers created proof-of-concept exploits, including remote code execution attacks, targeting the recently patched Windows Remote Desktop flaw called BlueKeep. Microsoft patched a...
Database with millions of Instagram influencers’ info leaked onlineThe leaked database was discovered on Shodan on May 14th. A huge online database containing private contact information including phone numbers and email IDs of roughly 50 million Instagram profiles...
Stay Up to Date With The Latest News & Updates
Join Our Newsletter
Get weekly tech updates and immediate alerts when there is a zero-day or security issue!