Dating app okcupid sells millions of photos, faces scrutiny
Your dating profile isn't as private as you think. OKCupid, a popular dating app owned by Match Group (which also controls Tinder, Hinge, and Plenty of Fish), quietly sold nearly three million user photos and associated data to Clarifai, an AI-powered facial recognition company, without informing users or obtaining their consent. The ramifications are unsettling, and the regulatory response? Disappointingly weak.
The data deal: a privacy breach
According to an FTC report, obtained by Ars Technica, OKCupid granted Clarifai access to a massive trove of user data, including photos, location information, and other personal details, with “no formal or contractual restriction” on how that data could be used. This flagrant disregard for user privacy is particularly galling given that OKCupid’s own privacy policy explicitly stated they wouldn’t share personal information with third parties without notification and opt-in consent. The fact that this occurred in 2014 and only recently surfaced highlights a systemic problem of data security and accountability within the online dating industry.
What makes the situation even more bizarre is OKCupid’s initial attempts to stonewall the FTC investigation. The company reportedly denied any relationship with Clarifai, despite evidence to the contrary. Adding another layer of complexity, several OKCupid executives had invested in Clarifai, raising serious questions about conflicts of interest.

A toothless response from the ftc
Despite the clear violation of its own privacy policy and apparent obstruction of justice, the FTC has opted for a remarkably lenient resolution. Instead of imposing significant financial penalties, the agency has simply compelled OKCupid to promise “not to misrepresent its practices or help others do so” and to refrain from selling user data. It’s a slap on the wrist, a promise to “behave,” and nothing more. OKCupid, predictably, is portraying the settlement as a victory, claiming the agreement allows them to “move forward” from an issue dating back to 2014. Their statement, dripping with corporate doublespeak, asserts that their current practices are far more robust, conveniently ignoring the fact that they were caught red-handed.
The case underscores a broader concern: how can we trust companies to protect our privacy when even regulatory bodies seem hesitant to hold them accountable? Consider the case of a grandmother recently sentenced to five months in jail due to a mistaken identity by an AI system – a stark illustration of the potential consequences when we prioritize Technology over due process and human judgment. The willingness to believe algorithms over individuals is a dangerous precedent.
The FTC’s decision to let OKCupid off the hook sends a chilling message to the tech industry: data privacy breaches may be frowned upon, but they don't necessarily carry significant consequences. The silence from privacy advocates is deafening, and the long-term implications for user data security remain deeply troubling. This isn’t about a few photos; it’s about the erosion of trust in the digital age.
