Malwarebytes: Amazon Builds Intimate User Profiles With Body And Family Data, No Opt-Out Exists
Research reveals Amazon builds intimate user profiles including physical and family details, with no clear mechanism to stop the collection.
Key points
- Malwarebytes Labs found Amazon collects body and family data without user consent.
- Researchers could not locate an opt-out mechanism for this specific data collection.
- The profile includes details users did not explicitly sign up to share.
Malwarebytes Labs published first-hand research revealing that Amazon maintains detailed personal profiles on users that include body measurements and family information. According to the security firm, this data collection occurs without explicit user consent, and researchers were unable to find a functional opt-out method for these specific categories.
The risk
The core issue identified by Malwarebytes Labs is the breadth of data Amazon aggregates into user profiles. The research indicates that the company thinks it knows details about a user’s body, their family structure, and their general life circumstances. This aggregation happens in the background, meaning users are not actively signing up for this level of surveillance when they engage with the platform.
Who is exposed
According to the Malwarebytes report, the exposure appears to be widespread among Amazon users, as the profile building seems to be a default behavior rather than an opt-in feature. The researchers stated they could not find a way for individuals to opt out of having this specific intimate data collected and stored. This suggests that any account holder may be subject to this enhanced profiling.
Cost and compliance
The source material does not specify financial costs, regulatory fines, or specific compliance violations associated with this data collection practice. Malwarebytes Labs focused on the technical finding that the data is being gathered and the lack of user control mechanisms, rather than on legal penalties or monetary damages incurred by users or the company.
What should you do?
Managers should review their organization’s data handling policies to ensure they align with user privacy expectations regarding third-party platforms. Teams should audit current Amazon account settings for any available privacy controls, even if a complete opt-out is not currently visible, to minimize unnecessary data exposure.
What to do and how to stay safe: Amazon
- Review your Amazon account privacy settings to see what data is currently being stored and shared.
- Limit the amount of personal information you voluntarily provide in account profiles or during checkout.
- Monitor for official updates from Amazon regarding user opt-out mechanisms for body and family data.
- Use separate email addresses for shopping accounts to reduce the linkage of personal identity to purchase history.
Step-by-step guide: Mobile Security Architecture: 8 Practices for Device Integrity
General security guidance from the Vector Tribune newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Does Amazon have an opt-out for body and family data collection?
According to Malwarebytes Labs, researchers could not find a way to opt out of this specific data collection.
What kind of personal data is Amazon collecting?
The research indicates Amazon collects data related to your body, your family, and your general life circumstances.
Did users sign up for this data collection?
No, the Malwarebytes report states that users did not sign up for this specific profiling activity.
