Dating app okcupid sells user data, escapes scathing fine

In a move that has privacy advocates howling, OKCupid, the popular dating app owned by Match Group (which also includes Tinder, Hinge, and Plenty of Fish), quietly sold nearly three million users' photos and location data to AI facial recognition firm Clarifai without consent. And, remarkably, the Federal Trade Commission (FTC) has closed the case without imposing a single penalty.

A familiar tale of regulatory weakness

The details, first reported by Ars Technica, are deeply unsettling. According to the FTC's own findings, OKCupid granted Clarifai unfettered access to user data, including photos, locations, and other personal information, with no contractual restrictions on its use. This occurred while OKCupid explicitly assured users their data wouldn't be shared with third parties without prior notification and consent – a promise they flagrantly violated. The irony is particularly sharp when considering the sensitive nature of data shared on a dating platform.

But here's where the story takes a truly bizarre turn. Despite the blatant breach of privacy, the FTC's response is… underwhelming. Instead of a hefty fine, OKCupid has merely been instructed to “never misrepresent information or assist others in doing so” and to refrain from selling user data. It's a slap on the wrist, a promise to behave that carries little weight, especially given the company's previous actions. The FTC effectively rewarded bad behavior with a gentle nudge toward compliance.

The investigation itself was reportedly hampered by OKCupid’s attempts to obstruct it, and the company initially denied any connection to Clarifai – despite evidence to the contrary. Adding another layer of complexity, several OKCupid executives had financial investments in Clarifai. The sheer lack of accountability is staggering, especially when compared to the recent case of an elderly woman wrongly incarcerated for five months due to a facial recognition error.

OKCupid, predictably, is spinning the outcome as a victory. In a statement, they claim the agreement allows them to “move forward” while conveniently omitting any admission of wrongdoing. They’ve doubled down on platitudes about enhanced privacy practices, a claim that rings hollow given the company’s recent history. The reality is this: a company can blatantly disregard user privacy, attempt to cover its tracks, and emerge virtually unscathed.

The incident underscores a disturbing trend: a regulatory environment ill-equipped to protect individuals from the aggressive data harvesting practices of tech giants.