Ozan Özdil
EN

Machine translation from Turkish (Cloudflare Workers AI), not reviewed by the author. Read the Turkish original

← Posts

Digital Resistance Series - Part 2: The Big Tech Siege - Data Colonialism and the Algorithmic Panopticon

Score —

How big tech companies collect and profile user data, and the impact of this on individuals.

· Updated: · 5 min read
Contents

Summary: In the second part of the series, I examine the data collection methods of Google, Meta, Apple and Microsoft one by one: the data Android sends to Google even when idle, shadow profiles kept for those without an account, data collection within Apple's own ecosystem and the iCloud key problem, Windows telemetry and the advertising ID. In the final section, I look at how this data is used in behavior steering.

"If you are not paying for a service, you are the product. But when it comes to Big Tech, the situation is worse: you are no longer the product, you have been turned into a raw material, a data source."

Introduction: The New Feudalism of Silicon Valley

The modern economy rises on the thesis that "data is the new oil." But unlike oil, data is not a resource that runs out as it is depleted; as it is processed, it becomes a tool of manipulation that weakens the individual's will. This "Big Five" structure—Google, Meta (Facebook), Apple, Microsoft and Amazon—has eliminated ownership in the digital world and turned us into "data serfs." In this section, we decipher in technical detail the telemetry operations and the algorithmic panopticon these giants conduct behind closed doors.

1. Google: The World's Largest Telemetry Station

Google is not just a search engine; it is the world's most extensive surveillance network. Google's business model is built on combining the individual's intent (Search), location (Maps), social circle (Gmail) and interests (YouTube) under a single Google ID.

1.1. Android and the Hidden Data Flow: The Douglas Schmidt Experiment

Groundbreaking research conducted in 2018 by Professor Douglas Schmidt of Vanderbilt University revealed the dark side of the Android ecosystem. According to the research, even when an Android phone is "idle," it sends data packets to Google servers an average of 40 times per hour. These packets do not only contain coordinates;

  • BSSID Scanning: Your device transmits the unique identifiers (BSSID) of all Wi-Fi networks around you to Google. In this way, even if GPS is off, Google knows which apartment in which building you are in with centimeter-level precision.

  • Sensor Fusion: Accelerometer, barometer and gyroscope data are combined to analyze whether you are climbing stairs, whether you are in a vehicle or on foot.

1.2. Google My Activity and "Permanent Memory"

When users press the "Delete History" button, the data only disappears from the user's screen. In Google's BigTable databases, this data remains forever under anonymized labels to train advertising algorithms. This is the technical impossibility of the "right to be forgotten" in the digital world.

2. Meta and Shadow Profiling

Meta's (Facebook, Instagram, WhatsApp) surveillance strategy has long since exceeded the platform's boundaries. Not having a Facebook account does not mean Meta does not have a file on you.

2.1. The Facebook Pixel and SDK Siege

More than 70% of internet sites contain invisible tracking codes called "Facebook Pixel." When you search for your symptoms on a health site or add a product to your cart on an e-commerce site, this information flows instantly to Meta servers as "Event Data." If you do not have an account, a "Shadow Profile" is created for you based on your IP address and browser fingerprint. This profile is later merged with your real identity when you open an account or when your identity is clarified through your friends' contact data.

2.2. WhatsApp and Meta-Data (Metadata) Analysis

Although WhatsApp claims to be "end-to-end encrypted" (E2EE), everything other than the content of the message (metadata) is open to Meta. Information about whom you talk to, for how long, how often and in which location is enough to map out your social graph and degrees of closeness without needing the content. "Metadata is more honest than the message itself."

3. Apple: Is Privacy a Marketing Tool?

Although Apple distinguishes itself from its competitors with the slogan "Privacy," technical analyses show that the situation is a "black box" strategy.

3.1. IAD and Its Own Surveillance Network

While Apple collects privacy points by restricting third-party advertisers' data collection (ATT - App Tracking Transparency), it continues to collect user data within its own ecosystem (App Store, Apple Music, News). This situation is interpreted as "monopolizing the data" rather than protecting privacy.

3.2. iCloud and the "Escrow Key" Problem

Apple keeps the "end-to-end encryption" (Advanced Data Protection) feature for iCloud backups off by default. While it is off, the key to your backups is stored on Apple's servers (escrow). This means that in government requests or a leak, your entire iMessage history, photos and notes could fall into the hands of third parties.

4. Microsoft: Telemetry Station as an Operating System

With Windows 10 and 11, our personal computer has turned into a data terminal rather than a work tool.

4.1. Keylogging and Diagnostic Data

The terms accepted under the name "personalized experience" during Windows setup allow Microsoft to collect a massive amount of Telemetry data, from your keystroke rhythm (ink and typing) to the names of the files you open. This data flows continuously to Redmond's servers through the "Connected User Experiences and Telemetry" service.

4.2. Advertising ID

The unique Advertising ID assigned to every Windows user combines your desktop usage habits with your identity on the web. When the operating system itself turns into an ad tracker, the concept of "offline" privacy disappears entirely.

5. The Algorithmic Panopticon and Behavioral Engineering

This data collected by Big Tech is processed by Artificial Intelligence (AI) models to identify the weakest points of individual psychology. This process is called "Psychographic Profiling."

  • Dopamine Loops: Social media algorithms use "Infinite Scroll" and variable reward systems that trigger dopamine release to keep your attention on the platform.

  • Echo Chambers: Algorithms deepen social polarization by bringing only the ideas you want to hear in front of you and make you vulnerable to manipulation.

My reading

Big Tech companies have silently expropriated our privacy with the promise of making our lives easier. This siege is not just a software issue; it is a matter of ownership and sovereignty. As long as we hand our data over to someone else's cloud, it is impossible for us to be free individuals in the digital world.

In Part 3 of the series: We will examine how to physically break this siege under the title "Building Your Own Data Fortress: Homelab and Hardware Security," through the Intel i5-14500 architecture.

Part 2 Technical Terms Glossary:

  • Metadata: Data about data (who, when, where).

  • BSSID: The unique MAC address of the wireless access point.

  • Telemetry: Remote monitoring of a system's performance and usage data.

  • E2EE: End-to-end encryption.

  • SDK: Software development kit (usually contains tracking code).

  • Shadow Profile: A hidden data file created for people who do not have an account.

  • ATT: Apple's App Tracking Transparency protocol.

  • Sensor Fusion: The combining of data from multiple sensors into a single meaningful result.

Sources

  • Schmidt, D. C. (2018). Google Data Collection: A Detailed Analysis.

  • Zuboff, S. (2019). The Age of Surveillance Capitalism.

  • Leith, D. J. (2021). Mobile Handset Privacy: Measuring The Data iOS and Android Send to Apple and Google.

  • Christl, W. (2017). Corporate Surveillance in Everyday Life.