Plaxo is the very cool on-line address book app that keeps you up to date with all your friends addresses, and them up to date with yours.
But recently I was flabbergasted to find that my Plaxo “add me” page, containing all my information, was being indexed by search engines. Not only mine, but other people’s as well. Just try the query site:http://www.plaxo com bob.
I was equally astonished at the response I got when I reported this obvious violation of privacy to Plaxo’s “privacy officer”. S/he informed me that it was my problem: after all, I had invited Google to index the Plaxo page by including a pointer to it on my own home page (which I did).
I quoted to them a line from Plaxo’s own privacy policy, that “your Information is your own and you decide who will have access to it.”
The unbelievable response was:
Correct. And my point is that if someone has posted the link to their Add_me page publicly, then they have to understand that public bots will likely find and attempt to index this information. This would be similar to the user creating their own page with their information and a link to the page. By allowing robots to follow the link, it makes it one step easier to contact the individual.
Guess what, Plaxo, there’s a huge difference here. I can take down my page at any time, or I can tell Google not to index it or cache it. But once my address info page on your site is indexed, it always will be. I don’t “have to understand” anything other than that you don’t know what a robots.txt file is.
But can’t I just take down my Plaxo “add me” page, solving the problem (except for the Google cache)? Oops, not so quick.
Changing or taking down the add_me page, once created is a enhancement request that we’ve targeted for a future version of the Plaxo server. Unfortunately, the only method of taking down this page that currently exists is to recreate your Plaxo account.
Worse yet, I found in the Google index a link to a page which allowed me to change someone else’s address book entry. Plaxo’s lame response to me pointing this out was to say
But as there is no benefit to indexing these pages, we will correct this problem.
When I re-iterated, in my fourth e-mail exchange, that “I continue to believe that you should not let searchbots index add-me pages”, the “privacy officer” responded:”
Point taken, and I’ll bring it up for discussion with Engineering, but I do not foresee changing the existing functionality.
Huh? You need to talk to Engineering about adding one line to your robots.txt file? Let me help you out here. All you need is:
Disallow: /add_me
Plaxo is a useful concept, but we can’t possibly use it until they “get” privacy issues.