Support Center

Your privacy policy doesn't cover our notes?

Alan Jan 27, 2012 10:13AM PST

I just read your privacy policy and have a concern.

The policy talks extensively about protecting "personally identifiable information" which means my name, email address, phone number, IP address, and other data that might identify me as an individual. So far, so good.

Unfortunately the policy makes no meaningful statements about protecting the CONTENTS of my notes! The only discussion of data protection (other than personally identifiable information) is in the final paragraph, which says: "We will make any legally-required disclosures of any breach of the security, confidentiality, or integrity of your unencrypted electronically stored personal data".

Unless I'm misunderstanding, that sentence just says that, if the contents of my notes are stolen, you will promptly tell me about it... but only if you're required to do so by law!

Hopefully I've just misunderstood. Can you clarify your policy on protecting the confidentiality of the CONTENTS of my Simplenotes?

Thank you very much!

0 Rated
Michael Johnston Jan 27, 2012 10:29AM PST Simplenote Agent
Hi Alan. Our privacy policy is indeed quite general at the moment and could use an update. We'll be looking into this. In the meantime, if you have any concerns, please refrain from using the service until we've updated the policy to your satisfaction.

Privacy is very important to us, but we understand that some people want to see this formalized more specifically.
0 Rated
Alan Jan 30, 2012 08:08PM PST
That might be the first time I've ever had a customer service rep advise me to NOT use the product :-)

I certainly appreciate that you guys need some time to look at this problem. To get you started, here's some information about how other companies similar to yours promise to protect their customers' data.

Evernote promises to "take reasonable precautions to protect" customer data, and to "make all commercially reasonable efforts to ensure its security." They describe specifically all the safeguards deployed to protect customer data, and also promise to notify users of any breach regardless whether they're required by law to do so. (see the section on "Data Security" at http://www.evernote.com/about/privacy/)

Ubernote promises they "take every reasonable precaution to keep your data and our servers safe from attacks" and says they "will not sell, expose, or share any of your personal information or content stored in Ubernote unless required by law." (see http://www.ubernote.com/webnote/pages/privacy.aspx)

Zoho "assures you that the contents of your user account will not be disclosed to anyone and will not be accessible even to employees of Zoho" except in specific circumstances, such as when required by law. They also promise "not to process the contents of your user account for serving targeted advertisements." (see https://www.zoho.com/privacy.html)

Jjot explains that "all of your notes are private... stored on computers hosted in Amazon's secure EC2 infrastructure. We will not share your private noteboards with third parties." (See http://jjot.com/about/privacy)

Protecting user data is essential. I look forward to seeing what policy you guys come up with! :-)

Post Your Public Answer

Your name (required)
Your email address (required)
Answer (required)

Follow Our Tweets