August 31, 2007 4:00 PM PDT

At Rapleaf, your personals are public

In the cozy Facebook social network, it's easy to have a sense of privacy among friends and business acquaintances.

But sites like Rapleaf will quickly jar you awake: Everything you say or do on a social network could be fair game to sell to marketers.

Rapleaf, based in San Francisco, is building a business on that premise. The privately held start-up, whose investors include Facebook-backer and PayPal co-founder Peter Thiel, runs two consumer Web sites: Rapleaf.com, a people search engine that lets you retrieve the name, age and social-network affiliations of anyone, as long as you have his or her e-mail address; and Upscoop.com, a similar site to discover, en masse, which social networks to which the people in your contact list belong. To use Upscoop, you must first give the site the username and password of your e-mail account at Gmail, Hotmail, Yahoo or AOL.

By collecting these e-mail addresses, Rapleaf has already amassed a database of 50 million profiles, which might include a person's age, birth date, physical address, alma mater, friends, favorite books and music, political affiliations, as well as how long that person has been online, which social networks he frequents, and what applications he's downloaded.

All of this information could come in handy for Rapleaf's third business, TrustFuse, which sells data (but not e-mail addresses) to marketers so they can better target customers, according to TrustFuse's Web site. As of Friday afternoon, the sites of Rapleaf and Upscoop had no visible link to TrustFuse, but TrustFuse's privacy policy mentions that the two companies are wholly owned subsidiaries of TrustFuse.

According to TrustFuse's Web site, "TrustFuse has pioneered a unique e-mail address based approach to Internet data measurement. (It) provides a framework to learn about new customers, better market to these customers and...to better predict buying behavior." It continues: "We perform deep searches on people to enrich data on your users. And then we put the pieces of the puzzle together to give you the full picture."

In other words, Rapleaf sweeps up all the publicly available but sometimes hard-to-get information it can find about you on the Web, via social networks, other sites and, soon to be added, blogs. At the other end of the business, TrustFuse packages information culled from sites in a profile and sells the profile to marketers. All three companies appear to operate within the scope of their stated privacy policies, which say they do "not sell, rent or lease e-mail addresses to third parties."

And that's right. Marketers bring TrustFuse their own list of e-mail addresses to buy access to demographic, behavioral and Internet usage data on those people, according to the company's privacy policy and sales documents.

Rapleaf CEO Auren Hoffman said the company does not use e-mail addresses and profiles developed by Rapleaf and Upscoop to deliver services for TrustFuse. Rather, TrustFuse's clients, which he said include presidential candidates and Internet widget companies, will bring it a list of e-mail addresses of their clients so that TrustFuse can perform fresh Internet searches on those people. Hoffman said TrustFuse will typically help clients understand which social networks their clients use so that they can market to them there. For example, a presidential candidate might want to know if his or her supporters are on MySpace.com or Facebook so they can approach people in that environment, he said.

"They say to us, 'I already know about her, but can you tell me these one or two other facts about her,'" Hoffman said. In effect, TrustFuse is a matching service between the marketers' e-mail lists and the online behavior of the people on those lists.

That said, TrustFuse's own privacy policy leaves open the possibility of connecting Rapleaf's information to TrustFuse's marketing material. According to the policy, dated August 1, 2007, "Information captured via Rapleaf may be used to assist TrustFuse services. Additionally, information collected by TrustFuse during the course of its business may also be displayed on Rapleaf for given profiles searched by e-mail address."

Apart from the unusual TrustFuse business, Rapleaf is among a new generation of people search engines that take advantage of the troves of public data on the Net--much of which consumers happily post for public perusal on social-networking sites and personal blogs. The search engines trace a person's digital tracks across these social networks, blogs, photo collections, news and e-commerce sites, to create a composite profile. Unlike Google, which might link to the same material over pages of search results or after trying different combinations of keywords, these sites attempt to "normalize" personal data so that it's easily digested by the searcher on one page.

CONTINUED: Nothing illegal about it…
Page 1 | 2 | 3

See more CNET content tagged:
marketer, privacy policy, social networking, e-mail address, client

5 comments

Join the conversation!
Add your comment
Avoid at all costs...
So essentially this site is one half of the equation.

That is, they say thay they will grab any and all data about you that they can. *BUT* THEY WON'T reveal your *E-MAIL* address to a prospective client.

THATS BECAUSE THEIR PROSPECTIVE CLIENT HAS ALREADY COMPILED A LIST OF E-MAIL ADDRESSES FROM WHATEVER MEANS AND THEN MATCHES THEM TO THIS DATABASE.

So Rapleaf doesn't spam. But their customers can now send a more targeted spam message.

Anyone who uses Rapleaf deserves what they get. More spam.

Its still spam, regardless of how "targeted" they attempt to limit the message. Think about it.
Posted by dargon19888 (412 comments )
Reply Link Flag
privacy laws?
this has to break some privacy laws and if it doesn't then we don't have any privacy guarantees with existing laws. simple as that.
Posted by dondarko (261 comments )
Reply Link Flag
Nope doesn't break any privacy laws...
When you sign up for this "service" you acknowledge their ToS and privacy statement.

If they tell you up front that they are going to collect any and all information from you and then sell it (sans e-mail addresses) to third party marketers, you're essentially SOL.

You gave up your rights to any privacy that they capture on their site.

Now you know why I suggest that you avoid this site or any other site like this at all costs.
Posted by dargon19888 (412 comments )
Link Flag
So you sign up for a social networking site, use your personal email address, thus allow other users to find you via email address to see your profile and you think this is private? If you are so concerned then maybe you should complain to MySpace or not use social sites. Some social sites let you lock your information to varying degrees. You really have to pay attention to what their privacy policies are (you could even use different email addresses for home, business, spam use, etc). I think we are all naive if you think RapLeaf is the only company doing this. Collecting publicly available data is the job of every marketing firm. Just because the publicly admit and even let you see what data they have collected this makes it worse?
Posted by powella (1 comment )
Reply Link Flag
Just reviewed Rapleaf's policies and based on my understanding, two things come to mind:

1) dargon19888 is right about what rapleaf does -- they have a database of emails that companies can match and see if you have public profiles on social sites. After calling in to rapleaf, although no specific companies were mentioned, found out that companies like drugstores, electronic goods stores -- any one who you might have made a purchase from -- have large email databases that they don't know. these companies already communicate with you via email, and they don't spam you more just because they know you're on facebook...

2) re: privacy laws, if you read rapleaf's policies, sounds like they follow privacy policies of the social networks themselves. not sure how they do that, but since they only find PUBLIC data on people, they can't be hacking the system.

final thoughts: if you don't want your info found by the companies you buy from, DON'T MAKE YOUR PROFILES PUBLIC ON SOCIAL NETWORKS. if it's public, anyone can see it and you give up rights to it (even though your info online already belongs to sites like myspace, facebook, etc). if you make it private, no one can see it besides ur friends.

side note: another point i picked up from talking with rapleaf is that if you have a lot of friends and are a big fan of a company, you're more likely to special offers/promotions from companies because you have more influence :)

see? it's not all bad
Posted by asharpe2 (1 comment )
Reply Link Flag
 

Join the conversation

Add your comment

The posting of advertisements, profanity, or personal attacks is prohibited. Click here to review our Terms of Use.

What's Hot

Discussions

Shared

RSS Feeds

Add headlines from CNET News to your homepage or feedreader.