The Federal Trade Commission has
finalized a settlement with email management company Unroll.Me over allegations that it duped people about privacy.
The deal requires Unroll.Me, owned by Slice Technologies, to delete data
about some consumers, and to refrain from misrepresenting its data practices in the future.
Unroll.Me, which promises to automatically unsubscribe from from email lists, also allegedly sells
"anonymized" information about consumers' emails -- including receipts for online purchases -- for market research purposes.
The FTC alleged in a complaint unveiled in August that
Unroll.Me falsely told some consumers it wouldn't “touch” their emails.
The agency's complaint focused on Unroll.Me's alleged statements to consumers who started to sign up for the
service, but then refused to grant the company access to their email accounts.
Between January of 2015 and October of 2016, Unroll.Me told many of those people, “we won’t touch
your personal stuff,” according to the FTC complaint.
During that time, more than 20,000 consumers who initially declined to grant email access to Unroll.Me changed their minds and
completed signing up for the service.
From late October 2016 through at least September 2018, Unroll.Me's message to consumers who hesitated to complete the sign-up process included the
sentence: “Unroll.Me requires access to your inbox so we can scan for subscriptions and allow you to begin clearing out your inbox,” the FTC alleged.
More 35,000 consumers
completed signing up after viewing that message, according to the agency.
The settlement requires Unroll.Me to tell active consumers who signed up after receiving an allegedly misleading
statement that it uses email purchase receipts for market research products sold to third parties. Unroll.Me must also delete stored e-receipts collected from consumers who were presented with
misleading information, unless it obtains their express consent to retain the material.
The advocacy group Electronic Privacy Information Center urged the FTC to impose tougher terms --
including mandates that Unroll.Me inform all users about its alleged deceptive practices, and that it require all active users to reauthorize access to their accounts.
“This will ensure
that Unrollme and Slice are collecting information only from users who were not subject to the company’s false and deceptive statements,” EPIC wrote in comments filed in September.
The FTC rejected those requests.
“The complaint does not allege that Unrollme
deceived its entire userbase,” April Tabor, acting secretary of the agency, wrote to EPIC on Monday. “Rather... the complaint alleges that Unrollme deceived a clear subset of users who had
initially declined to grant Unrollme access to their emails.”
Christine Bannan, consumer protection counsel at EPIC, says the FTC's order could leave many consumers unaware of how
Unroll.Me uses email data.
“We thought all users should be aware that the company is doing this,” Bannan says.