Search This Blog

Showing posts with label Email Tracking Pixels. Show all posts

How Tracking Pixels are Collecting Personal Data, 5 On Your Side Reveals

Have you been Christmas shopping on the internet, and later have advertisement of similar items following you all across your online pathway for days? 

This is no coincidence, for you are being tracked and it is not a virus or malware doing so, but the companies and applications deceiving you. 

In a recent report, the personal and protected medical data of thousands of local patients may have been exposed to Facebook, by tracking pixel. 5 On Your Side unveils the details of this pixel and what else are they set to expose of the victims. 

Alex Ondrick is one of the WakeMed patients who received a letter from the hospital this October. The letter apparently mentioned that some of his medical information may have been exposed on Facebook.

"Interestingly, my mother also got the letter, my step-dad got the letter, several of my friends also got the letter," Ondrick said. 

According to news outlet, the Markup, WakeMed and Duke University Hospital were found to be employing the Meta Pixel, a tracker, on their websites. While we are referring to a pixel, like the millions of pixels that make up an image on your television or computer screen. 

"Those pixels can also be used to house code, to house information […] In this particular case, it’s a very unique piece of code that takes information regarding whoever is using that website at the time, and sends that back to the web server of whoever is implementing that. In the case at hand, it’s Meta or Facebook," says Former CIA Cyber Threat Analyst Clark Walton. 

Walton further tells 5 On Your Side that the code can gather detailed information about your browsing habits, user preferences and what you click on. The owner of the pixel, such as Meta, gets that raw data. The information is then reduced to marketing data and forwarded to the website's owner. 

"The technology is not specific to Meta, certainly could be anybody," Walton said. 

The pixels present on the websites are of varying kinds and utilized by organizations of all sizes. They are invisible and unlike “cookies,” you could not block these pixels. 

"There’s not necessarily, to my knowledge, a way to opt out of if you go to a private website that’s using that pixel technology," Walton added. 

While neither agreed, 5 On Your Side contacted both Duke Health and WakeMed to interview in regards to the subject matter. 

Duke Health officials sent a statement stating, “Duke University Health System values the privacy of its patients’ medical information. DUHS has investigated the use of the Meta Pixel on our website and patient portal and has determined that DUHS did not transmit its patients’ protected health information to Meta. We continue, however, to study the issue and may share additional information if and when appropriate given pending litigation and ongoing external investigations into these matters.” 

WakeMed, on the other hand said that they directly communicated the information with individuals who might have been affected and dedicated a phone line and email address to handle any further inquiries or concerns.  

How these Invisible Images Enable Companies Eavesdrop on your Email — Here’s all you need to know


The emails are eavesdropping on you. Most of the billions of emails that arrive in our inboxes every day contain hidden trackers that can tell the recipient when you open them, where you open them, how many times you've read them, and much more — a privacy nightmare that many call "endemic." Fortunately, you can take measures to safeguard yourself and your inbox. 

Advertisers and marketing firms, in particular, embed tracking pixels in their promotional emails to keep track of their mass campaigns. Senders can learn which subject lines are the most "clickable," and which of their targets are potential customers, based on how people interact with them.

Though this is beneficial from an analytics standpoint, it is frequently done covertly and without consent.  There is a simple way to disable email tracking. Continue reading to learn more about these troublesome little pixels and how to get rid of them.
Email tracking pixels:

The email tracking pixel is a surprisingly simple concept that allows anyone to secretly collect a plethora of information about you as soon as you interact with their messages.

When someone wants to know if you read their email, they insert a tiny 1 pixel by 1 pixel image into it. When you open the email, it sends a ping to the server where the image is stored and records your interaction. The sender can tell your location by checking where that network ping was launched and what type of device was used, in addition to whether or not you clicked their email and how many times you clicked it.

There are two possible explanations for why you never notice that tracking graphic. For starters, it's insignificant. Second, it's in GIF or PNG format, enabling the company to keep it transparent and invisible to the naked eye. A sender will frequently conceal this in their signature. As a result, that fancy font or flashing company logo at the bottom of a commercial email may be more than just a cosmetic presence.

More importantly, studies have revealed that by pairing your location and device specifications, advertisers and other malicious actors can link your email activities with your browser cookies. This opens a can of worms because it allows them to identify you wherever you go online and connect your email address.

Most email clients, including Gmail and Outlook, do not have this feature built-in, but you can use third-party tools. It's recommended to use the Chrome and Firefox extensions Ugly Email for Gmail. It places an "eyeball" icon next to emails containing tracking pixels and prevents them from spying on you. If you use Yahoo or Outlook, you can also use Trocker, which marks emails with trackers on their websites.

These extensions, however, are only available on your computers. You'll need to subscribe to a premium email client like HEY to detect email trackers on your phone.

How to block email tracking pixels?

Email trackers are easy to detect because they rely on hidden media attachments. The simplest method is to simply disable image loading in your email apps by default and only do it manually for emails you trust or when there is an attachment to download.

1. Adjust your existing inbox: On Gmail, the option to block external images is available under Settings > Images > Ask Before Displaying External Images on the web and mobile apps. On Outlook apps, it’s found under Options > Block External Images on mobile and Options > Trust Center > Automatic Download on desktop.

Though Apple Mail also lets you accomplish this from Preferences > Viewing > Load remote content in messages, you can directly block trackers on it as long as you’re on macOS Monterey. Head over to Mail > Preferences > Privacy and check the “Protect Mail Activity” box. 

2. Get yourself a private relay email address: The issue with the methods discussed previously is that they only block tracking pixels after the email has already arrived in your inbox — they don't remove them entirely. To ensure that you never open an email containing trackers by accident, you'll need a proxy address that scans your messages and eliminates any malware before they show up in your inbox.

Another advantage is that you can keep your personal email address private and only provide a relay ID to websites, newsletters, and other services. There are numerous free services that provide a proxy email address. 

Email Protection from DuckDuckGo is recommended. It allows you to create a new custom relay address, which secures your mail before forwarding it to your personal inbox by booting the trackers and encrypting any unsecured links in the body. DuckDuckGo adds a small section at the top of forwarded emails that tells you whether it found any trackers in it and, if so, which companies were responsible for it.

To sign up for the DuckDuckGo app on an Android or iPhone, go to Settings > Email Protection. You can get started on a desktop with the DuckDuckGo browser extension or its Mac browser.