Full confession: I do not use TikTok. As a certified Old Millennial, the only places I’ve watched TikTok videos (is that what the kids call them?) is when they’re reposted to Instagram. I chose not to jump on that particular social media bandwagon for a few reasons.

1. I don’t need more mind-numbing, distraction-causing social media in my life.
2. I don’t care for video content.
3. I was pretty convinced the Chinese government was going to spy on me. 

And now, as TikTok has come into its maturity a bit (a.k.a. old people like me are using it), I’m honestly glad that I made that choice. Sure, it seems like there’s lots of funny stuff on there. And yes, I write about the internet for a living. And it seems like the Chinese government probably isn’t spying on TikTok users? But TikTok certainly is. 

Here’s the deal: TikTok has taken the data-sucking model of social media to the nth degree. As you’ll see in this week’s What Does the Internet Know About Me?, TikTok is pretty invasive. Get ready. 

What data does TikTok collect?

TikTok collects… everything. They know what you’re watching, how much time you’re spending there, every single search you make, and so on. And even if you don’t have an account — like me — you can still browse around. And, guess what? According to an investigation by Vice magazine, TikTok is collecting extensive data and sharing it with other apps even if you’re not logged in with them. So, that’s cool. 

Now let’s look at what TikTok’s Privacy Policy says they collect. 

• Information from third parties, including social networks, advertising partners, data providers, and analytics providers
• Technical and behavioral information about your TikTok use
• Everything in your messages
• Info from your phone book, if you connect it
• Information provided about you by other users
• Information from “other publicly available sources”
• Your age, username and password, language, email or phone number, social media account info, profile image
• User-generated content, including comments, photographs, live streams, audio recordings, videos, and virtual item videos that you create on TikTok
• Content, including text, images, and video, found in your device’s clipboard, “with your permission” 
• Payment information
• Information to verify an account such as proof of identity or age
• Any messages you send them. 
• Usage info
• Device info
• Location data
• Image and audio info
• Metadata
• Cookies

As you can see, they’re not holding back. And there are some things that aren’t included here, like the fact that TikTok is now collecting biometric data, including “faceprints” and “voiceprints,” although they don’t define what that means, according to TechCrunch. That “with your permission” to collect information from your clipboard also has some wiggly lines, because it comes with the caveat that they’ll only ask for permission “when required by law.”

Yikes. 

And speaking of privacy laws, TikTok does let you download all of your data — and not just if you’re in Europe or California, which is nice to see. They also let you turn off personalized ads, which is another point in their favor.

What does TikTok do with my data?

TikTok’s explanation of what they do with user data is written pretty clearly and in plain English, so I’ll copy/paste it below. But the TL;DR is that they use it to provide you with the service you want (aka short form videos and a social network) and for advertising. They say they don’t “sell” your data, but they do share it with their business partners, which includes advertisers. So you know, potato/potahto. 

Here’s how uses TikTok your data, in their own words:

• To fulfill requests
• To customize the content 
• To send promotional materials
• To improve and develop
• To measure and understand the effectiveness of the advertising 
• To make suggestions and provide a customized ad experience
• To support the social function
• To use User Content as part of our advertising and marketing campaigns
• To understand how you use the Platform, including across your devices
• To infer additional information about you
• To help us detect abuse, fraud, and illegal activity
• To prove your identity in order to use certain features, such as livestream or verified accounts
• To communicate with you, including to notify you about changes in our services
• To announce you as a winner of our contest, sweepstakes, or promotions
• To enforce our terms, conditions, and policies
• Consistent with your permissions, to provide you with location-based services, such as advertising and other personalized content
• To inform our algorithms
• To combine all the information we collect or receive about you for any of the foregoing purposes
• For any other purposes disclosed to you at the time we collect your information or pursuant to your consent
• To facilitate sales, promotion, and purchases of goods and services and to provide user support

Should I care?

Look, when it comes to online privacy and social media, I’m somewhere between Kara Swisher buying a second phone that only has TikTok installed and your aunt who has never heard the term “privacy settings.” That’s to say, I try to do my best to limit the amount of information that’s collected about me on the sites that I enjoy or that I think provide me with some specific utility. That’s really the whole point of this series: Helping me (and you) figure out what’s worth it and what isn’t.

But here’s the thing: “Worth it” is a subjective value judgement. And, for me, TikTok just isn’t worth it. The amount of data they collect — and the freedoms they give themselves with it — feels bad to me. And as an Old Millennial, I gave up so much of my data without realizing it. Why would I want to go down that route again, now that I do realize it? 

Plus, I’m still not totally convinced the Chinese government isn’t using it for surveillance. I studied Chinese for eight years and worked at a Chinese human rights organization in college. So good luck convincing me otherwise.