Our product is ruining users privacy, without telling them











up vote
30
down vote

favorite
1












The current start-up I'm working with for now is obviously a threat for its users privacy. The product we're producing (which I'm involved in a HUGE part of it) records the user contacts. It's stated in the Privacy Policy that they're being recorded for "the sake of usability and ease of access" and "they can erased by user request". However, even if a person requests us to, all of his/her contacts are being soft-deleted without telling them.



It gets worse that we're also logging the user location history, without stating it in the privacy policy. I told them to state this, but they just ignore me.



The only way I had, was to tell my close friends and family to not to install this spyware.



What should I do? Do I have to concern about being accused by the government?










share|improve this question









New contributor




ehsaan is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
















  • 33




    "What should I do?" - you should quit immediately, since you don't want to be associated with such activity. What locale do you work in?
    – Joe Strazzere
    4 hours ago








  • 8




    If this in an app which is available for download from one of the big app stores (Google Play, Microsoft, whatever) then you could probably submit a complaint to the store and/or leave a review of the app there.
    – brhans
    4 hours ago






  • 6




    You don't state where you are... that would help in providing specific advice for this situation.
    – Stese
    4 hours ago






  • 46




    You should change your picture / user name, dude.
    – Roman
    4 hours ago






  • 4




    I really hope you are not using your real name and the avatar picture is not your own. Cover your assets and good luck.
    – Mindwin
    1 hour ago















up vote
30
down vote

favorite
1












The current start-up I'm working with for now is obviously a threat for its users privacy. The product we're producing (which I'm involved in a HUGE part of it) records the user contacts. It's stated in the Privacy Policy that they're being recorded for "the sake of usability and ease of access" and "they can erased by user request". However, even if a person requests us to, all of his/her contacts are being soft-deleted without telling them.



It gets worse that we're also logging the user location history, without stating it in the privacy policy. I told them to state this, but they just ignore me.



The only way I had, was to tell my close friends and family to not to install this spyware.



What should I do? Do I have to concern about being accused by the government?










share|improve this question









New contributor




ehsaan is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
















  • 33




    "What should I do?" - you should quit immediately, since you don't want to be associated with such activity. What locale do you work in?
    – Joe Strazzere
    4 hours ago








  • 8




    If this in an app which is available for download from one of the big app stores (Google Play, Microsoft, whatever) then you could probably submit a complaint to the store and/or leave a review of the app there.
    – brhans
    4 hours ago






  • 6




    You don't state where you are... that would help in providing specific advice for this situation.
    – Stese
    4 hours ago






  • 46




    You should change your picture / user name, dude.
    – Roman
    4 hours ago






  • 4




    I really hope you are not using your real name and the avatar picture is not your own. Cover your assets and good luck.
    – Mindwin
    1 hour ago













up vote
30
down vote

favorite
1









up vote
30
down vote

favorite
1






1





The current start-up I'm working with for now is obviously a threat for its users privacy. The product we're producing (which I'm involved in a HUGE part of it) records the user contacts. It's stated in the Privacy Policy that they're being recorded for "the sake of usability and ease of access" and "they can erased by user request". However, even if a person requests us to, all of his/her contacts are being soft-deleted without telling them.



It gets worse that we're also logging the user location history, without stating it in the privacy policy. I told them to state this, but they just ignore me.



The only way I had, was to tell my close friends and family to not to install this spyware.



What should I do? Do I have to concern about being accused by the government?










share|improve this question









New contributor




ehsaan is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.











The current start-up I'm working with for now is obviously a threat for its users privacy. The product we're producing (which I'm involved in a HUGE part of it) records the user contacts. It's stated in the Privacy Policy that they're being recorded for "the sake of usability and ease of access" and "they can erased by user request". However, even if a person requests us to, all of his/her contacts are being soft-deleted without telling them.



It gets worse that we're also logging the user location history, without stating it in the privacy policy. I told them to state this, but they just ignore me.



The only way I had, was to tell my close friends and family to not to install this spyware.



What should I do? Do I have to concern about being accused by the government?







software-industry privacy






share|improve this question









New contributor




ehsaan is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.











share|improve this question









New contributor




ehsaan is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.









share|improve this question




share|improve this question








edited 4 hours ago









David K

22.8k1480117




22.8k1480117






New contributor




ehsaan is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.









asked 4 hours ago









ehsaan

15423




15423




New contributor




ehsaan is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.





New contributor





ehsaan is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.






ehsaan is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.








  • 33




    "What should I do?" - you should quit immediately, since you don't want to be associated with such activity. What locale do you work in?
    – Joe Strazzere
    4 hours ago








  • 8




    If this in an app which is available for download from one of the big app stores (Google Play, Microsoft, whatever) then you could probably submit a complaint to the store and/or leave a review of the app there.
    – brhans
    4 hours ago






  • 6




    You don't state where you are... that would help in providing specific advice for this situation.
    – Stese
    4 hours ago






  • 46




    You should change your picture / user name, dude.
    – Roman
    4 hours ago






  • 4




    I really hope you are not using your real name and the avatar picture is not your own. Cover your assets and good luck.
    – Mindwin
    1 hour ago














  • 33




    "What should I do?" - you should quit immediately, since you don't want to be associated with such activity. What locale do you work in?
    – Joe Strazzere
    4 hours ago








  • 8




    If this in an app which is available for download from one of the big app stores (Google Play, Microsoft, whatever) then you could probably submit a complaint to the store and/or leave a review of the app there.
    – brhans
    4 hours ago






  • 6




    You don't state where you are... that would help in providing specific advice for this situation.
    – Stese
    4 hours ago






  • 46




    You should change your picture / user name, dude.
    – Roman
    4 hours ago






  • 4




    I really hope you are not using your real name and the avatar picture is not your own. Cover your assets and good luck.
    – Mindwin
    1 hour ago








33




33




"What should I do?" - you should quit immediately, since you don't want to be associated with such activity. What locale do you work in?
– Joe Strazzere
4 hours ago






"What should I do?" - you should quit immediately, since you don't want to be associated with such activity. What locale do you work in?
– Joe Strazzere
4 hours ago






8




8




If this in an app which is available for download from one of the big app stores (Google Play, Microsoft, whatever) then you could probably submit a complaint to the store and/or leave a review of the app there.
– brhans
4 hours ago




If this in an app which is available for download from one of the big app stores (Google Play, Microsoft, whatever) then you could probably submit a complaint to the store and/or leave a review of the app there.
– brhans
4 hours ago




6




6




You don't state where you are... that would help in providing specific advice for this situation.
– Stese
4 hours ago




You don't state where you are... that would help in providing specific advice for this situation.
– Stese
4 hours ago




46




46




You should change your picture / user name, dude.
– Roman
4 hours ago




You should change your picture / user name, dude.
– Roman
4 hours ago




4




4




I really hope you are not using your real name and the avatar picture is not your own. Cover your assets and good luck.
– Mindwin
1 hour ago




I really hope you are not using your real name and the avatar picture is not your own. Cover your assets and good luck.
– Mindwin
1 hour ago










4 Answers
4






active

oldest

votes

















up vote
45
down vote













If you don't agree with what the company is doing ethically, then you should probably quit asap.



If you think they are doing something illegal or in breach of regulations, then you may want to consider reporting them to the relevant authorities.






share|improve this answer

















  • 2




    Reporting can often be done anonymously, or while keeping you name out of it. Do think about the timing though (you leave, they get checked is "odd timing" to say the least).
    – Martijn
    1 hour ago






  • 1




    @Martijn Yes, but if you've already left then what's the issue?
    – Tashus
    1 hour ago






  • 2




    Pissed of previous employers/colleages who take revenge in some unforseen way.
    – Martijn
    1 hour ago










  • It may be a good idea to look for a new job before quitting.
    – kasperd
    1 hour ago






  • 1




    @Adonalsium IANAL; however, I believe an NDA usually protects against someone disclosing specific proprietary information. I would think someone could 'tip off' a regulatory agency to malpractice, without violating an NDA by disclosing any proprietary material.
    – Time4Tea
    1 hour ago


















up vote
31
down vote













What I do in such situations. (had a situation where my employer did not want to buy some licenses of software we used commercially)



Step one: Make sure I get my facts straight and have evidence of my claim.



Step two: Make management aware of the Problem. Leave a paper-trail of doing so. Assume no malice and make no accusations. Just describe the Problem and offer a solution.



Step tree: After some time, ask if action has been taken. If not ask for a timeline. Again, leave a paper-trail.



If it gets clear to you no action will be taken, think about



A. Do you want to keep working there?



B. Do you want to / have to report this to the police etc. I´d ask a lawyer about this.



The thinking is (in my jurisdiction, Germany) you have the obligation to protect your employer from harm. You also have the obligation not to break the law. So the first step if your employer is doing something (unintentionally?) unlawful, would be to make them aware of that. If they decide to take no action, and you make their misconduct public, harm is not on you, but on them, since they ignored you.



If you want to keep working there or not is up to you. Either way, be prepared to be fired immediately, especially if they do violate the rules intentionally. An never knowingly contribute to any unlawful conduct yourself.






share|improve this answer























  • About list of things to ask yourself, you should add "C. Do I want the risk of being considered guilty" because OP can no longer claim being ignorant, and if this privacy breach is illegal, he will be the one dev that was knowingly and willingly developing it. One more thing to ask yourself, and your lawyer I guess.
    – Mołot
    2 hours ago








  • 2




    @Mołot: It will be hard to prove that. First, OP is probably not a legal professional and normally he has to trust his employer to get those things sorted out by professionals. Secondly, you´d have to prove that he was actively contributing to the malicious element. Third, as long as the Data does not get used for fraud, it will be hard to proof any harm done by OP. I think, at least in Germany, my approach is pretty safe. Of course IANAL so when in doubt, please get appropriate legal counsel yourself!
    – Daniel
    2 hours ago












  • process of proving one way or another can be long, tiring and problematic for career, even if he finally is found innocent... That's why I'd add it as third point to things he should think and talk to his lawyer about.
    – Mołot
    2 hours ago


















up vote
10
down vote














Do I have to concern about being accused by the government?




If you have to ask the question the answer is probably "yes", but I am not a lawyer.



You're deep into "flee right now" territory.






share|improve this answer




























    up vote
    2
    down vote













    You need to quit, and then you need to blow a whistle. Get on Twitter or snitch really hard to whichever government agency would do something about this. Ethics exist for a reason.






    share|improve this answer

















    • 3




      If the conduct isn't illegal in OPs country, it could be a violation of the NDA to whistleblow.
      – Adonalsium
      1 hour ago











    Your Answer








    StackExchange.ready(function() {
    var channelOptions = {
    tags: "".split(" "),
    id: "423"
    };
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function() {
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled) {
    StackExchange.using("snippets", function() {
    createEditor();
    });
    }
    else {
    createEditor();
    }
    });

    function createEditor() {
    StackExchange.prepareEditor({
    heartbeatType: 'answer',
    convertImagesToLinks: false,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: null,
    bindNavPrevention: true,
    postfix: "",
    imageUploader: {
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    },
    noCode: true, onDemand: false,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    });


    }
    });






    ehsaan is a new contributor. Be nice, and check out our Code of Conduct.










    draft saved

    draft discarded


















    StackExchange.ready(
    function () {
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fworkplace.stackexchange.com%2fquestions%2f124454%2four-product-is-ruining-users-privacy-without-telling-them%23new-answer', 'question_page');
    }
    );

    Post as a guest















    Required, but never shown




















    StackExchange.ready(function () {
    $("#show-editor-button input, #show-editor-button button").click(function () {
    var showEditor = function() {
    $("#show-editor-button").hide();
    $("#post-form").removeClass("dno");
    StackExchange.editor.finallyInit();
    };

    var useFancy = $(this).data('confirm-use-fancy');
    if(useFancy == 'True') {
    var popupTitle = $(this).data('confirm-fancy-title');
    var popupBody = $(this).data('confirm-fancy-body');
    var popupAccept = $(this).data('confirm-fancy-accept-button');

    $(this).loadPopup({
    url: '/post/self-answer-popup',
    loaded: function(popup) {
    var pTitle = $(popup).find('h2');
    var pBody = $(popup).find('.popup-body');
    var pSubmit = $(popup).find('.popup-submit');

    pTitle.text(popupTitle);
    pBody.html(popupBody);
    pSubmit.val(popupAccept).click(showEditor);
    }
    })
    } else{
    var confirmText = $(this).data('confirm-text');
    if (confirmText ? confirm(confirmText) : true) {
    showEditor();
    }
    }
    });
    });






    4 Answers
    4






    active

    oldest

    votes








    4 Answers
    4






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes








    up vote
    45
    down vote













    If you don't agree with what the company is doing ethically, then you should probably quit asap.



    If you think they are doing something illegal or in breach of regulations, then you may want to consider reporting them to the relevant authorities.






    share|improve this answer

















    • 2




      Reporting can often be done anonymously, or while keeping you name out of it. Do think about the timing though (you leave, they get checked is "odd timing" to say the least).
      – Martijn
      1 hour ago






    • 1




      @Martijn Yes, but if you've already left then what's the issue?
      – Tashus
      1 hour ago






    • 2




      Pissed of previous employers/colleages who take revenge in some unforseen way.
      – Martijn
      1 hour ago










    • It may be a good idea to look for a new job before quitting.
      – kasperd
      1 hour ago






    • 1




      @Adonalsium IANAL; however, I believe an NDA usually protects against someone disclosing specific proprietary information. I would think someone could 'tip off' a regulatory agency to malpractice, without violating an NDA by disclosing any proprietary material.
      – Time4Tea
      1 hour ago















    up vote
    45
    down vote













    If you don't agree with what the company is doing ethically, then you should probably quit asap.



    If you think they are doing something illegal or in breach of regulations, then you may want to consider reporting them to the relevant authorities.






    share|improve this answer

















    • 2




      Reporting can often be done anonymously, or while keeping you name out of it. Do think about the timing though (you leave, they get checked is "odd timing" to say the least).
      – Martijn
      1 hour ago






    • 1




      @Martijn Yes, but if you've already left then what's the issue?
      – Tashus
      1 hour ago






    • 2




      Pissed of previous employers/colleages who take revenge in some unforseen way.
      – Martijn
      1 hour ago










    • It may be a good idea to look for a new job before quitting.
      – kasperd
      1 hour ago






    • 1




      @Adonalsium IANAL; however, I believe an NDA usually protects against someone disclosing specific proprietary information. I would think someone could 'tip off' a regulatory agency to malpractice, without violating an NDA by disclosing any proprietary material.
      – Time4Tea
      1 hour ago













    up vote
    45
    down vote










    up vote
    45
    down vote









    If you don't agree with what the company is doing ethically, then you should probably quit asap.



    If you think they are doing something illegal or in breach of regulations, then you may want to consider reporting them to the relevant authorities.






    share|improve this answer












    If you don't agree with what the company is doing ethically, then you should probably quit asap.



    If you think they are doing something illegal or in breach of regulations, then you may want to consider reporting them to the relevant authorities.







    share|improve this answer












    share|improve this answer



    share|improve this answer










    answered 4 hours ago









    Time4Tea

    3,35731130




    3,35731130








    • 2




      Reporting can often be done anonymously, or while keeping you name out of it. Do think about the timing though (you leave, they get checked is "odd timing" to say the least).
      – Martijn
      1 hour ago






    • 1




      @Martijn Yes, but if you've already left then what's the issue?
      – Tashus
      1 hour ago






    • 2




      Pissed of previous employers/colleages who take revenge in some unforseen way.
      – Martijn
      1 hour ago










    • It may be a good idea to look for a new job before quitting.
      – kasperd
      1 hour ago






    • 1




      @Adonalsium IANAL; however, I believe an NDA usually protects against someone disclosing specific proprietary information. I would think someone could 'tip off' a regulatory agency to malpractice, without violating an NDA by disclosing any proprietary material.
      – Time4Tea
      1 hour ago














    • 2




      Reporting can often be done anonymously, or while keeping you name out of it. Do think about the timing though (you leave, they get checked is "odd timing" to say the least).
      – Martijn
      1 hour ago






    • 1




      @Martijn Yes, but if you've already left then what's the issue?
      – Tashus
      1 hour ago






    • 2




      Pissed of previous employers/colleages who take revenge in some unforseen way.
      – Martijn
      1 hour ago










    • It may be a good idea to look for a new job before quitting.
      – kasperd
      1 hour ago






    • 1




      @Adonalsium IANAL; however, I believe an NDA usually protects against someone disclosing specific proprietary information. I would think someone could 'tip off' a regulatory agency to malpractice, without violating an NDA by disclosing any proprietary material.
      – Time4Tea
      1 hour ago








    2




    2




    Reporting can often be done anonymously, or while keeping you name out of it. Do think about the timing though (you leave, they get checked is "odd timing" to say the least).
    – Martijn
    1 hour ago




    Reporting can often be done anonymously, or while keeping you name out of it. Do think about the timing though (you leave, they get checked is "odd timing" to say the least).
    – Martijn
    1 hour ago




    1




    1




    @Martijn Yes, but if you've already left then what's the issue?
    – Tashus
    1 hour ago




    @Martijn Yes, but if you've already left then what's the issue?
    – Tashus
    1 hour ago




    2




    2




    Pissed of previous employers/colleages who take revenge in some unforseen way.
    – Martijn
    1 hour ago




    Pissed of previous employers/colleages who take revenge in some unforseen way.
    – Martijn
    1 hour ago












    It may be a good idea to look for a new job before quitting.
    – kasperd
    1 hour ago




    It may be a good idea to look for a new job before quitting.
    – kasperd
    1 hour ago




    1




    1




    @Adonalsium IANAL; however, I believe an NDA usually protects against someone disclosing specific proprietary information. I would think someone could 'tip off' a regulatory agency to malpractice, without violating an NDA by disclosing any proprietary material.
    – Time4Tea
    1 hour ago




    @Adonalsium IANAL; however, I believe an NDA usually protects against someone disclosing specific proprietary information. I would think someone could 'tip off' a regulatory agency to malpractice, without violating an NDA by disclosing any proprietary material.
    – Time4Tea
    1 hour ago












    up vote
    31
    down vote













    What I do in such situations. (had a situation where my employer did not want to buy some licenses of software we used commercially)



    Step one: Make sure I get my facts straight and have evidence of my claim.



    Step two: Make management aware of the Problem. Leave a paper-trail of doing so. Assume no malice and make no accusations. Just describe the Problem and offer a solution.



    Step tree: After some time, ask if action has been taken. If not ask for a timeline. Again, leave a paper-trail.



    If it gets clear to you no action will be taken, think about



    A. Do you want to keep working there?



    B. Do you want to / have to report this to the police etc. I´d ask a lawyer about this.



    The thinking is (in my jurisdiction, Germany) you have the obligation to protect your employer from harm. You also have the obligation not to break the law. So the first step if your employer is doing something (unintentionally?) unlawful, would be to make them aware of that. If they decide to take no action, and you make their misconduct public, harm is not on you, but on them, since they ignored you.



    If you want to keep working there or not is up to you. Either way, be prepared to be fired immediately, especially if they do violate the rules intentionally. An never knowingly contribute to any unlawful conduct yourself.






    share|improve this answer























    • About list of things to ask yourself, you should add "C. Do I want the risk of being considered guilty" because OP can no longer claim being ignorant, and if this privacy breach is illegal, he will be the one dev that was knowingly and willingly developing it. One more thing to ask yourself, and your lawyer I guess.
      – Mołot
      2 hours ago








    • 2




      @Mołot: It will be hard to prove that. First, OP is probably not a legal professional and normally he has to trust his employer to get those things sorted out by professionals. Secondly, you´d have to prove that he was actively contributing to the malicious element. Third, as long as the Data does not get used for fraud, it will be hard to proof any harm done by OP. I think, at least in Germany, my approach is pretty safe. Of course IANAL so when in doubt, please get appropriate legal counsel yourself!
      – Daniel
      2 hours ago












    • process of proving one way or another can be long, tiring and problematic for career, even if he finally is found innocent... That's why I'd add it as third point to things he should think and talk to his lawyer about.
      – Mołot
      2 hours ago















    up vote
    31
    down vote













    What I do in such situations. (had a situation where my employer did not want to buy some licenses of software we used commercially)



    Step one: Make sure I get my facts straight and have evidence of my claim.



    Step two: Make management aware of the Problem. Leave a paper-trail of doing so. Assume no malice and make no accusations. Just describe the Problem and offer a solution.



    Step tree: After some time, ask if action has been taken. If not ask for a timeline. Again, leave a paper-trail.



    If it gets clear to you no action will be taken, think about



    A. Do you want to keep working there?



    B. Do you want to / have to report this to the police etc. I´d ask a lawyer about this.



    The thinking is (in my jurisdiction, Germany) you have the obligation to protect your employer from harm. You also have the obligation not to break the law. So the first step if your employer is doing something (unintentionally?) unlawful, would be to make them aware of that. If they decide to take no action, and you make their misconduct public, harm is not on you, but on them, since they ignored you.



    If you want to keep working there or not is up to you. Either way, be prepared to be fired immediately, especially if they do violate the rules intentionally. An never knowingly contribute to any unlawful conduct yourself.






    share|improve this answer























    • About list of things to ask yourself, you should add "C. Do I want the risk of being considered guilty" because OP can no longer claim being ignorant, and if this privacy breach is illegal, he will be the one dev that was knowingly and willingly developing it. One more thing to ask yourself, and your lawyer I guess.
      – Mołot
      2 hours ago








    • 2




      @Mołot: It will be hard to prove that. First, OP is probably not a legal professional and normally he has to trust his employer to get those things sorted out by professionals. Secondly, you´d have to prove that he was actively contributing to the malicious element. Third, as long as the Data does not get used for fraud, it will be hard to proof any harm done by OP. I think, at least in Germany, my approach is pretty safe. Of course IANAL so when in doubt, please get appropriate legal counsel yourself!
      – Daniel
      2 hours ago












    • process of proving one way or another can be long, tiring and problematic for career, even if he finally is found innocent... That's why I'd add it as third point to things he should think and talk to his lawyer about.
      – Mołot
      2 hours ago













    up vote
    31
    down vote










    up vote
    31
    down vote









    What I do in such situations. (had a situation where my employer did not want to buy some licenses of software we used commercially)



    Step one: Make sure I get my facts straight and have evidence of my claim.



    Step two: Make management aware of the Problem. Leave a paper-trail of doing so. Assume no malice and make no accusations. Just describe the Problem and offer a solution.



    Step tree: After some time, ask if action has been taken. If not ask for a timeline. Again, leave a paper-trail.



    If it gets clear to you no action will be taken, think about



    A. Do you want to keep working there?



    B. Do you want to / have to report this to the police etc. I´d ask a lawyer about this.



    The thinking is (in my jurisdiction, Germany) you have the obligation to protect your employer from harm. You also have the obligation not to break the law. So the first step if your employer is doing something (unintentionally?) unlawful, would be to make them aware of that. If they decide to take no action, and you make their misconduct public, harm is not on you, but on them, since they ignored you.



    If you want to keep working there or not is up to you. Either way, be prepared to be fired immediately, especially if they do violate the rules intentionally. An never knowingly contribute to any unlawful conduct yourself.






    share|improve this answer














    What I do in such situations. (had a situation where my employer did not want to buy some licenses of software we used commercially)



    Step one: Make sure I get my facts straight and have evidence of my claim.



    Step two: Make management aware of the Problem. Leave a paper-trail of doing so. Assume no malice and make no accusations. Just describe the Problem and offer a solution.



    Step tree: After some time, ask if action has been taken. If not ask for a timeline. Again, leave a paper-trail.



    If it gets clear to you no action will be taken, think about



    A. Do you want to keep working there?



    B. Do you want to / have to report this to the police etc. I´d ask a lawyer about this.



    The thinking is (in my jurisdiction, Germany) you have the obligation to protect your employer from harm. You also have the obligation not to break the law. So the first step if your employer is doing something (unintentionally?) unlawful, would be to make them aware of that. If they decide to take no action, and you make their misconduct public, harm is not on you, but on them, since they ignored you.



    If you want to keep working there or not is up to you. Either way, be prepared to be fired immediately, especially if they do violate the rules intentionally. An never knowingly contribute to any unlawful conduct yourself.







    share|improve this answer














    share|improve this answer



    share|improve this answer








    edited 2 hours ago

























    answered 2 hours ago









    Daniel

    15.4k93560




    15.4k93560












    • About list of things to ask yourself, you should add "C. Do I want the risk of being considered guilty" because OP can no longer claim being ignorant, and if this privacy breach is illegal, he will be the one dev that was knowingly and willingly developing it. One more thing to ask yourself, and your lawyer I guess.
      – Mołot
      2 hours ago








    • 2




      @Mołot: It will be hard to prove that. First, OP is probably not a legal professional and normally he has to trust his employer to get those things sorted out by professionals. Secondly, you´d have to prove that he was actively contributing to the malicious element. Third, as long as the Data does not get used for fraud, it will be hard to proof any harm done by OP. I think, at least in Germany, my approach is pretty safe. Of course IANAL so when in doubt, please get appropriate legal counsel yourself!
      – Daniel
      2 hours ago












    • process of proving one way or another can be long, tiring and problematic for career, even if he finally is found innocent... That's why I'd add it as third point to things he should think and talk to his lawyer about.
      – Mołot
      2 hours ago


















    • About list of things to ask yourself, you should add "C. Do I want the risk of being considered guilty" because OP can no longer claim being ignorant, and if this privacy breach is illegal, he will be the one dev that was knowingly and willingly developing it. One more thing to ask yourself, and your lawyer I guess.
      – Mołot
      2 hours ago








    • 2




      @Mołot: It will be hard to prove that. First, OP is probably not a legal professional and normally he has to trust his employer to get those things sorted out by professionals. Secondly, you´d have to prove that he was actively contributing to the malicious element. Third, as long as the Data does not get used for fraud, it will be hard to proof any harm done by OP. I think, at least in Germany, my approach is pretty safe. Of course IANAL so when in doubt, please get appropriate legal counsel yourself!
      – Daniel
      2 hours ago












    • process of proving one way or another can be long, tiring and problematic for career, even if he finally is found innocent... That's why I'd add it as third point to things he should think and talk to his lawyer about.
      – Mołot
      2 hours ago
















    About list of things to ask yourself, you should add "C. Do I want the risk of being considered guilty" because OP can no longer claim being ignorant, and if this privacy breach is illegal, he will be the one dev that was knowingly and willingly developing it. One more thing to ask yourself, and your lawyer I guess.
    – Mołot
    2 hours ago






    About list of things to ask yourself, you should add "C. Do I want the risk of being considered guilty" because OP can no longer claim being ignorant, and if this privacy breach is illegal, he will be the one dev that was knowingly and willingly developing it. One more thing to ask yourself, and your lawyer I guess.
    – Mołot
    2 hours ago






    2




    2




    @Mołot: It will be hard to prove that. First, OP is probably not a legal professional and normally he has to trust his employer to get those things sorted out by professionals. Secondly, you´d have to prove that he was actively contributing to the malicious element. Third, as long as the Data does not get used for fraud, it will be hard to proof any harm done by OP. I think, at least in Germany, my approach is pretty safe. Of course IANAL so when in doubt, please get appropriate legal counsel yourself!
    – Daniel
    2 hours ago






    @Mołot: It will be hard to prove that. First, OP is probably not a legal professional and normally he has to trust his employer to get those things sorted out by professionals. Secondly, you´d have to prove that he was actively contributing to the malicious element. Third, as long as the Data does not get used for fraud, it will be hard to proof any harm done by OP. I think, at least in Germany, my approach is pretty safe. Of course IANAL so when in doubt, please get appropriate legal counsel yourself!
    – Daniel
    2 hours ago














    process of proving one way or another can be long, tiring and problematic for career, even if he finally is found innocent... That's why I'd add it as third point to things he should think and talk to his lawyer about.
    – Mołot
    2 hours ago




    process of proving one way or another can be long, tiring and problematic for career, even if he finally is found innocent... That's why I'd add it as third point to things he should think and talk to his lawyer about.
    – Mołot
    2 hours ago










    up vote
    10
    down vote














    Do I have to concern about being accused by the government?




    If you have to ask the question the answer is probably "yes", but I am not a lawyer.



    You're deep into "flee right now" territory.






    share|improve this answer

























      up vote
      10
      down vote














      Do I have to concern about being accused by the government?




      If you have to ask the question the answer is probably "yes", but I am not a lawyer.



      You're deep into "flee right now" territory.






      share|improve this answer























        up vote
        10
        down vote










        up vote
        10
        down vote










        Do I have to concern about being accused by the government?




        If you have to ask the question the answer is probably "yes", but I am not a lawyer.



        You're deep into "flee right now" territory.






        share|improve this answer













        Do I have to concern about being accused by the government?




        If you have to ask the question the answer is probably "yes", but I am not a lawyer.



        You're deep into "flee right now" territory.







        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered 4 hours ago









        Dark Matter

        2,207514




        2,207514






















            up vote
            2
            down vote













            You need to quit, and then you need to blow a whistle. Get on Twitter or snitch really hard to whichever government agency would do something about this. Ethics exist for a reason.






            share|improve this answer

















            • 3




              If the conduct isn't illegal in OPs country, it could be a violation of the NDA to whistleblow.
              – Adonalsium
              1 hour ago















            up vote
            2
            down vote













            You need to quit, and then you need to blow a whistle. Get on Twitter or snitch really hard to whichever government agency would do something about this. Ethics exist for a reason.






            share|improve this answer

















            • 3




              If the conduct isn't illegal in OPs country, it could be a violation of the NDA to whistleblow.
              – Adonalsium
              1 hour ago













            up vote
            2
            down vote










            up vote
            2
            down vote









            You need to quit, and then you need to blow a whistle. Get on Twitter or snitch really hard to whichever government agency would do something about this. Ethics exist for a reason.






            share|improve this answer












            You need to quit, and then you need to blow a whistle. Get on Twitter or snitch really hard to whichever government agency would do something about this. Ethics exist for a reason.







            share|improve this answer












            share|improve this answer



            share|improve this answer










            answered 2 hours ago









            Steve

            1,250314




            1,250314








            • 3




              If the conduct isn't illegal in OPs country, it could be a violation of the NDA to whistleblow.
              – Adonalsium
              1 hour ago














            • 3




              If the conduct isn't illegal in OPs country, it could be a violation of the NDA to whistleblow.
              – Adonalsium
              1 hour ago








            3




            3




            If the conduct isn't illegal in OPs country, it could be a violation of the NDA to whistleblow.
            – Adonalsium
            1 hour ago




            If the conduct isn't illegal in OPs country, it could be a violation of the NDA to whistleblow.
            – Adonalsium
            1 hour ago










            ehsaan is a new contributor. Be nice, and check out our Code of Conduct.










            draft saved

            draft discarded


















            ehsaan is a new contributor. Be nice, and check out our Code of Conduct.













            ehsaan is a new contributor. Be nice, and check out our Code of Conduct.












            ehsaan is a new contributor. Be nice, and check out our Code of Conduct.
















            Thanks for contributing an answer to The Workplace Stack Exchange!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid



            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.


            To learn more, see our tips on writing great answers.





            Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


            Please pay close attention to the following guidance:


            • Please be sure to answer the question. Provide details and share your research!

            But avoid



            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.


            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fworkplace.stackexchange.com%2fquestions%2f124454%2four-product-is-ruining-users-privacy-without-telling-them%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown











            Popular posts from this blog

            What visual should I use to simply compare current year value vs last year in Power BI desktop

            Alexandru Averescu

            Trompette piccolo