Tim Hortons App Location Tracking Probe in ‘Final Stages’, Says Privacy Commissioner

Four of Canada’s privacy commissioners are expected to release the findings of a joint investigation launched into Tim Hortons’ mobile app back in 2020 for alleged unlawful location tracking — reports The Globe and Mail.

“The investigation is ongoing, but in its final stages, and we expect it to be completed very soon,” said Vito Pilieci, a spokesman for the federal Office of the Privacy Commissioner.

More than one in 10 Canadians use the Tim Hortons app at least once a month. A 2020 report revealed that the mobile app could collect users’ location data, even when it wasn’t in use. Soon after, the federal Privacy Commissioner and counterparts in Alberta, British Columbia, and Quebec launched a joint probe into the matter.

The allegations also resulted in four class-action lawsuits against the fast-food giant in B.C., Ontario, and Quebec.

All of the legal actions scrutinize “the collection of geolocation data through the Tim Hortons mobile application,” Tim Hortons’ parent company, Restaurant Brands International Inc., has disclosed in earnings reports.

Lots of apps track location and other user data. However, the investigations and class actions claim the Tim Hortons app, which boasts over 4.3 million monthly active users, did not properly disclose the extent of information collection to users.

“Geolocation data can be very sensitive as it can reveal information about the habits and activities of individuals, for example, medical visits or places that they regularly frequent,” the four privacy commissioners said when they launched their investigation.

The results of the privacy commissioners’ investigation could have a bearing on the class-action lawsuits, which were filed by customers who downloaded the Tim Hortons app but claim they were not appropriately informed about what data it would collect.

Tim Hortons disabled the mobile app’s geolocation capabilities in 2020, the company’s director of communications Michael Oliveira said in an emailed statement. The fast-food chain is cooperating with privacy authorities, he added.

Oliveira also said Tim Hortons changed how its mobile app informs users about the data it collects back in June 2020.

“We’re continuing to focus on ensuring that guests can make informed decisions about their data when using our app,” wrote Oliveira.

Want to see more of our stories on Google?

Add iPhone in Canada as a Preferred Source on Google

P.S. Want to keep this site truly independent? Support us by buying us a beer, treating us to a coffee, or shopping through Amazon here. Links in this post are affiliate links, so we earn a tiny commission at no charge to you. Thanks for supporting independent Canadian media!

Subscribe
Notify of
guest
6 Comments
Oldest
Newest Most Voted
Inline Feedbacks
View all comments
It's Me
It's Me
3 years ago

In McLeod’s extensive investigation into the Tim Hortons app, the app tracked him in the background while he was sleeping, would sense location data when he was near competitors such as McDonald’s, Starbucks and more, while also send his data back to third-party companies used by RBI.

The data he received showed the Tim Hortons app knew his IP address, carrier, free space on his phone, battery levels and even phone settings such as Bluetooth, according to lines of code in 12 text files he received, showing his location data from November 2018 to October 2019.

This is all stuff that google already harvests. While it is gross that Tim’s is doing it, since it only affects Android users, is it really any worse than what they should already be conditioned to expect?

bosco
bosco
Reply to  It's Me
3 years ago

Does it only affect android users? If so this would have been important to include since I dont see this stated in this article or the linked globe and mail article.

It's Me
It's Me
Reply to  bosco
3 years ago

Indeed. It was basic info to include, especially since he linked back to the original iPhoneincanada article that explained it a year ago.

According to reporter James McLeod from The Financial Post, the Tim Hortons mobile app has been tracking the background location of older Android users extensively, only revealed after a Personal Information Protection and Electronic Documents Act (PIPEDA) request was made to the coffee chain’s parent company, RBI.

McLeod made the request for information last fall and soon found out the Tim Hortons app had been tracking his Google Pixel 3XL smartphone over 2,700 times in the background in under five months, even when the app was not being used. He only discovered the app was tracking his background after he had updated to Android 10, which limits background location use of apps.

The reason the Tim Hortons mobile app was able to track in the background was that Android smartphones running software versions older than Android 10, do not have granular location permissions for apps, as it’s either just allow or deny. The latest Android 10 update has a setting for apps to only use location data when the app is currently in use, a feature made available to iPhone users since 2014.

bosco
bosco
Reply to  It's Me
3 years ago

Ah interesting okay thanks for this and good news then.

SOB
SOB
Reply to  It's Me
3 years ago

So I guess if there is a settlement then only the Android users would get free timbits for a month. 🙂

It's Me
It's Me
Reply to  SOB
3 years ago

Guess that answers the question “what’s your privacy worth?”

6
0
Would love your thoughts, please comment.x
()
x