Does Honey Compromise Your Privacy? - The Most Popular Online Coupon Finder - YouTube

Channel: TritoxHD

[0]
Hey everyone, welcome to another video.
[2]
I’m sure y’all have heard of the Chrome extension Honey, a program designed to find
[6]
promo codes and coupons across the Internet and automatically apply them to your shopping
[11]
cart on whatever website you’re using.
[13]
They sponsor countless YouTubers [clip of Cody Ko’s “Imagines Part 2”] and it
[15]
has been downloaded over 17 million times since its release.
[19]
I’ve even started using it after seeing so many ads on YouTube and it’s saved me
[24]
money.
[25]
The reason it took me so long to start using it after having seen so many of these ads
[29]
is that I’m usually pretty skeptical about these types of programs.
[33]
But their marketing team did their job really well and I folded and got the app.
[38]
Like I said, it’s saved me money.
[40]
As I do with most apps, I simply clicked through the user agreement and threw it onto my Chrome
[45]
browser, not thinking twice about it.
[47]
A few days ago, I was watching a Cody Ko video as I sat in my coronavirus-induced isolation,
[52]
and sure enough Honey had sponsored one of his videos.
[55]
For some reason, this time I began wondering how Honey makes money.
[59]
I’ve wondered that before but wasn’t curious enough to look into it.
[63]
Regardless, I decided to start looking online for some answers.
[65]
At first, it all seemed pretty standard in terms of data collection and privacy, and
[71]
its money-making process made sense.
[73]
There were a couple things that concerned me, and I want to share what I found, but
[77]
first I want to briefly look at how it started and how it became so prominent.
[81]
In 2012, one of Honey’s co-founders, Ryan Hudson, was ordering pizza and he wished he
[86]
had a coupon to save some money on the meal.
[89]
That same night, he threw together a prototype that would find coupons online that a customer
[94]
could apply to a purchase.
[95]
This prototype became Honey, which was launched that same year.
[99]
After several years of not being able to convince investors to put their money behind a browser
[103]
extension, Hudson took a job at an advertisement company.
[106]
However, through word of mouth and Reddit, Honey began growing pretty organically.
[111]
Hudson’s co-founder, George Ruan, is still CEO and the company now has over 200 employees
[117]
worldwide.
[118]
What began as somewhat of an overlooked startup and has now become a household name on the
[122]
Internet.
[123]
All in all, not bad for trying to save some money on pizza.
[126]
With that being said, I want to address the original concern for me looking up Honey’s
[131]
processes: how they make money.
[133]
After digging a bit further, it seems like the main way Honey makes money is through
[137]
its commission with affiliate businesses.
[139]
Essentially, an affiliate business will provide Honey with a discount code, and when you are
[144]
shopping on that affiliate business’s website, Honey will provide you with that discount
[149]
code.
[150]
Honey will get a chunk of the money from that sale.
[152]
This means that the discount codes that are often “found” by Honey are actually given
[157]
to them by these affiliate businesses; they aren’t randomly found online by Honey’s
[161]
software.
[162]
In this way, Honey isn’t even utilizing your personal data in the money transaction.
[167]
Instead, the data collection that is actually taking place is used to streamline your shopping
[172]
process, but more on that later.
[174]
In addition to this baseline service, Honey also makes money through its Honey Gold program.
[180]
Honey Gold functions as a rewards program where the more often you use its service,
[185]
the more points you can earn.
[186]
When you earn 1000 points, you can exchange the points in for gift cards for online stores
[191]
like Amazon.
[192]
It’s a pretty reasonable, free program that rewards loyalty to ensure that people keep
[197]
using Honey’s services.
[198]
Now, let’s address one of the most important questions regarding Honey’s data collection:
[203]
is it selling your data?
[204]
To answer that succinctly, no, it isn’t selling your data.
[209]
But the reality is a little more nuanced than that.
[211]
On a basic level, Honey needs to know some surface-level information about you in order
[216]
to do its job well.
[217]
This means it utilizes cookies to keep this data and make sure you can make the most of
[222]
their service.
[223]
By signing up with Honey, the user agreement mentions that the data they’ll be collecting
[227]
includes your login, bank or credit card info., if you use their app or Honey Pay, items added
[233]
to your drop list, friends you refer to Honey, stores you follow on Honey, your type of device,
[237]
device’s unique ID, operating system, IP address, event stamps, and error logs.
[243]
Some of those last ones may seem concerning to you, but Honey clarifies on their agreement
[248]
that: “This data allows us to make sure Honey products are working correctly, to make
[253]
your experience better, and to detect and prevent fraud.
[256]
Also, to help us gauge the effectiveness of our communications and understand how our
[261]
users engage with our services, we use common digital tools that allow us to see if you
[266]
opened an email we sent or visited a link in those emails.”
[270]
Essentially, they track this data to make sure Honey is running smoothly and also to
[275]
see what the most common devices and operating systems are.
[278]
They can then use this information to market their services to people with the most common
[283]
devices and operating services or simply focus their efforts where they are most commonly
[289]
needed.
[290]
Additionally, Honey does gather information on pre-approved sites in order to give you
[293]
personalized recommendations and find item availabilities on the site in question.
[299]
This effectively tracks your shopping habits to better your overall experience.
[303]
This isn’t inherently bad; if anything, it makes a lot of sense that a service like
[307]
Honey would do this in order to make the user experience as good as it can be and broaden
[312]
their appeal.
[313]
With that in mind, it does come at the expense of strict privacy.
[317]
In the words of cybersecurity analyst David Janssen, who took a deep look into Honey’s
[322]
safety, a general rule is that “the more you share, the more effective the app will
[327]
be, and the less privacy you’ll have.”
[329]
An interesting back-and-forth regarding Honey happened between Amazon and Honey’s parent
[334]
company PayPal.
[335]
Like I mentioned before, PayPal purchased Honey in November of 2019.
[339]
In the following month, this warning [insert warning] began popping up on Amazon users’
[343]
browsers.
[344]
The warning read that Honey’s browser extension posed a security risk and that it collects
[348]
data on the user.
[349]
While Amazon is right with its statement, it shouldn’t be a surprise that most extensions
[354]
and similar Honey-like services collect data.
[357]
It’s an important part of its service for tailoring its experience to each user.
[362]
So should users be considered about Amazon placing this kind of warning on its page?
[367]
In short, not really.
[369]
It shouldn’t be new information to Honey’s users nor is the data collection all that
[373]
bad, as I mentioned before.
[375]
Perhaps most importantly, Honey doesn’t sell this information to third-party companies
[380]
which eliminates one of its biggest concerns with a lot of its users.
[384]
Another important note to keep in mind for this exchange is that Amazon may be feeling
[388]
threatened by Honey and its PayPal parents.
[391]
Both Amazon and PayPal are sites for monetary transactions and PayPal’s purchase of Honey
[397]
could threaten Amazon’s dominance for web purchasing, through a system, like Honey’s,
[401]
that charges retailers.
[403]
So maybe Amazon posting the warning is less about their concern about their customers’
[407]
privacy and more about foiling a threatening up-and-coming competitor.
[412]
The last main note that I want to make about Honey is that the cybersecurity firm, RiskBased
[417]
Security, uncovered a vulnerability in Honey’s browser extension.
[422]
This vulnerability was that Honey, when activated from the toolbar, had its code “injected”
[427]
into the website in use.
[429]
Because Honey’s code was now in the website’s code, the website could theoretically control
[434]
Honey’s code.
[435]
RiskBased Security alerted Honey to this danger and Honey quickly patched it up.
[440]
Since then, there hasn’t really been any questionable vulnerabilities surrounding Honey.
[444]
Honey itself states that they use measures that “include limiting access, using encryption,
[450]
testing for vulnerabilities, advanced malware detection, employing pseudonymization and
[455]
anonymization techniques, and more.”
[457]
From what I can tell, Honey has implemented as much security as they can to ensure their
[463]
users’ privacy remains safe.
[465]
Lastly, as I get to my final thoughts, I do want to point out that I read through Honey’s
[470]
user agreement and I have to say, I was actually really reassured by it.
[474]
One of their first sentences is that they “do not sell your personal information.
[479]
Ever.”
[480]
There doesn’t seem to be any suspicious loopholes or concerns.
[483]
Honey seems to be aware that, in order to be successful, they need to have the loyalty
[487]
and faith of its users.
[490]
And they’ve lived up to that.
[491]
With that in mind, I would give you the same warning I would give about any online service.
[497]
There is always the possibility of a vulnerability or of a security compromise.
[501]
Honey seems to be on your side but that doesn’t stop other ill-intentioned people from getting
[505]
to your information.
[507]
Honey is doing what it can to stop this, but even the most intense measures can be compromised.
[512]
So, in the context of Internet privacy and security, is Honey safe?
[517]
Yeah, it’s almost entirely safe.
[520]
So feel free to use it for online shopping and to save some money.
[524]
Before ending the video, I would like to thank the sponsor for this video, Honey.
[528]
With Honey, you can -
[529]
Nah I’m just kidding, this video isn’t sponsored and definitely not by Honey.
[532]
Hopefully you can get a better idea about this extension and make sure you’re staying
[536]
safe on the wild lands of the Internet.