HN user
Seems like you're suggesting that, to establish YOUR trust, either the website does not use any third-party vendors or services (in the delivery of the experience to you), or they use third-party vendors/services but do not send them any data ...? If so, in this age of open web services and distributed systems/infrastructure, are either of these scenarios reasonable to expect?
>Question to that guy: What act specifically would establish that trust?
I'm "that guy", and yeah I feel ya about "most press statements". Anyway, here's what we think would be a good start in establishing trust ... do you agree? 1. Consumer visits a website or app they like. 2. Website/app offers standardized privacy preferences/controls that are easy to understand, and apply globally. 3. Consumer indicates their preferences, realistically based on their inherent trust in the website/app ... could be anything from ghost mode ("no tracking at all") to limited ad targeting ("ok, you can retarget me for 3 days only, that's it") to measurement only ("count me as a distinct user, but no ad tracking, profiling, etc.") 4. those preferences are propagated to any/all downstream parties working on behalf of the website/app or the advertiser, all of whom have to submit system-level log file samples daily (a blood sample, if you will) to a central processing system NOT governed wholly by ad industry 5. ongoing data analysis, with data exhaust, provides for open accountability 6. oh, and consumer empirically sees that their preferences are being respected
We'd also love to see a significant reduction in the amount of JS and third-party requests. But these are all hard problems to solve while also maintaining an open web/ecosystem.