TikTok is significantly expanding its data harvesting capabilities through an updated "pixel" tool, which collects sensitive personal information—including medical histories and mental health status—even from individuals who have never signed up for the platform. Cybersecurity analysts warn that the social media giant's new tracking methods are unusually invasive compared to industry competitors.
An Invisible Tracking Empire
Tracking pixels are invisible images embedded in websites to monitor user behavior. While standard across the advertising industry, an analysis by cybersecurity firm Disconnect found that TikTok’s updated pixel now automatically intercepts data intended for Google Analytics. This allows TikTok to capture information without the website owner explicitly sharing it.
Patrick Jackson, Chief Technology Officer at Disconnect, labeled the technique "extremely invasive." Investigations discovered that websites for cancer support groups, fertility clinics, and mental health services were transmitting sensitive user details—such as email addresses and specific health inquiries—directly to TikTok. Because the pixel operates on the website side, this data collection applies to every visitor, regardless of whether they use the social media app.
Expansion Following Operational Changes
The update follows the sale of TikTok's US operations and the subsequent introduction of a new advertising network designed to target users outside the app. According to experts, this moves TikTok closer to the data collection models employed by Google and Meta, creating detailed records of users' daily lives.
Critics argue that this level of surveillance exposes users to risks such as price discrimination and political manipulation. While TikTok maintains that it prohibits the sharing of sensitive health data and that websites are responsible for compliance, the company's automated systems continue to ingest this information.
How to Protect Your Privacy
For users concerned about this surveillance, there are effective countermeasures available. Privacy experts recommend switching to browsers specifically designed to block trackers, such as DuckDuckGo, Brave, or Firefox. These browsers prevent the pixel from loading and communicating with external servers.
Alternatively, users can install browser extensions like Privacy Badger, Ghostery, or uBlock Origin. While these tools can block the TikTok pixel, experts note that server-side data sharing remains difficult to detect. Consequently, advocates are calling for stronger privacy regulations to address the systemic issues within the advertising technology ecosystem.
Comments
Leave a comment