Lumosity: a warning to users

av Sigve Indregard

Bekla­ger til mine norske lesere for at dette er på engelsk.

Lumo­sity is one of those ser­vices you sign up for and enjoy for a while. It measu­res and sup­po­sedly trains your cog­ni­tive skills. It com­bi­nes this with your demo­grap­hic data to enable compa­ri­son with other, simi­lar users. Now, this isn’t very impor­tant data, and this ser­vice could be one of those things where you choose to give up some of your pri­vacy in return for a service.

But I’ve always been puzz­led by sites that deny users the option to delete their data. In Nor­way, where I live, this is cle­arly ille­gal by our own law of pri­vacy. Data related to people should not be kept in regis­ters for any lon­ger than they are nee­ded, and people have the right to know what data are registe­red on them. I found an e-​​mail address in Lumosity’s Terms of Ser­vice, and reque­sted the dele­tion of my user pro­file. This is the answer I got:

Your infor­ma­tion and data are pri­vate, accor­ding to the terms of sign up. If you wish to stop rece­i­ving emails, please use the “unsub­scribe” link at the bottom of the ori­gi­nal email you rece­i­ved, as I can­not admi­nis­ter list chan­ges. Thanks!
Best,
Aimee

A bit puzz­led, I replied:

I’m not sure what to make of your response. I would like you to delete my user account. Can you please do that? Whether my data is “pri­vate” or not is more of a seman­tic ques­tion, given the terms of service.

And today, I got the reply:

I’m sorry, but it’s not pos­sible for us to com­pletely purge your infor­ma­tion from our sys­tem.  Your infor­ma­tion is secure as our terms and con­ditions state, but if you are wor­ried about your infor­ma­tion being “out there,” I would recom­mend log­ging into your account at lumosity.com/login, then going to “My Account” in the top right cor­ner.  From there, you can change the infor­ma­tion associa­ted with your profile.

This got me ner­vous. Why would anyone con­struct a web­site where the staff can’t purge user accounts? After all, the signup terms state that user accounts can be deleted if they are imper­son­a­tors or minors. Cle­arly, Lumos Labs were lying to me.

This is a pro­blem if the pri­vacy policy or terms of ser­vice of the com­pany opens up for leaks of my per­so­nal data. I deci­ded to read Lumosity’s Pri­vacy policy, and I was dis­mayed to find this there:

We may enhance or merge per­so­nal infor­ma­tion with your other infor­ma­tion and with data from third par­ties in order to bet­ter mar­ket and pro­vide our pro­ducts and services.

In order to bet­ter mar­ket their pro­ducts and ser­vices? That inclu­des many acti­vities, and they are not requi­red to inform be before­hand. And furthermore:

We emp­loy other com­pa­nies and people to per­form tasks on our behalf and need to share your infor­ma­tion with them to pro­vide pro­ducts or ser­vices to you. […] Unless we tell you dif­fe­rently, these agents do not have any right to use Per­so­nal Infor­ma­tion we share with them beyond what is neces­sary to assist us.

Which basi­cally trans­la­tes to: We share all the data we want with who­e­ver we want as long as it helps us. For instance, it cle­arly “assi­sts” Lumo­sity to share the data on my skills to a pay­ing recruit­ment agency or university.

We also dis­close Per­so­nal Infor­ma­tion when requi­red to do so by law, or in response to a sub­poena, court order, or other legal mecha­nism, or when we believe, in our sole discre­tion, that dis­closure is rea­so­nably neces­sary to pro­tect the pro­perty or rights of the Com­pany, third par­ties or the pub­lic at large.

Again the “good part” is in the first part of the sent­ence, and the bad part in the end. They share data if they believe it is “rea­so­nably neces­sary” to anyone (the com­pany, third par­ties or the pub­lic at large? That is everyone).

We reserve the right to sell, trans­fer or other­wise share some or all of our assets, inclu­ding infor­ma­tion pro­vi­ded by you, in con­nec­tion with a mer­ger, reor­ga­niza­tion or sale of some or all of our assets or in the event of bank­ruptcy. In any such event, per­so­nally iden­ti­fi­able and other infor­ma­tion may be one of the assets trans­ferred. We will post notice before per­so­nal infor­ma­tion is trans­ferred and beco­mes sub­ject to a dif­fe­rent pri­vacy policy.

Again, this looks rea­so­nable at first. But when you com­bine this with their non-​​deletion-​​policy, it’s not. They can choose to sell the infor­ma­tion about me, if they only notice me before­hand. But I have no way to get out of this, even if they notice me. When the infor­ma­tion is sold, the new pri­vacy policy will enter into effect, and that can effec­tively make my per­so­nal infor­ma­tion freely avai­lable to anyone. This means Lumo­sity, if they go bank­rupt, will make data on my whe­re­abouts and cog­ni­tive skills avai­lable to anyone interested.

Do also note that Lumo­sity has a “fri­ends” feature, which is obviously a lot more sen­si­tive than the data on your cog­ni­tive skills. I strongly recom­mend against using this.

As I said ear­lier, I could agree to take the risk if this was a free ser­vice, much like I can agree to watch adverti­se­ments in Google. But Lumo­sity costs $ 80 per year, which is a lot for access to some flash games. I don’t think Lumo­sity has evil intents, but I am not going to pay for it as long as their pri­vacy policy is this weak. I recom­mend that you do not either.

And by the way: The so-​​called scien­ti­fic base of Lumo­sity is bogus. One white paper explains how they test for “bet­ter wor­king memory” on a group of people with an average age of 54. They ran pre– and post-​​tests using a web appli­ca­tion — one of their games. In between these tests, some par­ti­ci­pants used Lumosity’s games every day, while a con­trol group didn’t. Unsur­pri­singly, the con­trol group per­for­med worse than the trai­ned group — but the con­trol group did also improve sig­ni­fi­cantly. The rea­son, obviously, is that both groups got bet­ter at using the tool. The dif­fe­rence between the groups is that the trai­ned group got to play every day for five weeks (an average of 30 times before the post-​​test), while the con­trol group got to play once before the examination.

I can use myself as an example. When I used the games for the first time, I rece­i­ved much worse sco­res than the second time. Only at the fifth or sixth day, per­haps game num­ber 15 or 16, did my sco­res level out. The impli­ca­tion of this is that sco­ring well on Lumosity’s games is a skill sepa­rate from my cog­ni­tive abi­lities. Eit­her that, or my pro­blem sol­ving skills went from the low­est tenth of the popu­la­tion to the top ten in one week. While I’m sure the “scien­ti­fic” pre– and post-​​tests were lon­ger than my first play­ing of the games, the effect of five weeks of tech­ni­cal trai­ning in simi­lar games would be far lar­ger than the real effect on their cog­ni­tive skills.

The results of their games can’t — and shouldn’t — be inter­preted as real esti­ma­tes of “memory”, “atten­tion”, “proces­sing speed” or any other faculty of the brain. It should be inter­preted as “skill in Lumosity’s games”, much like IQ tests measure how well you per­form on IQ tests, and little else. The vali­dity of their measure is quite sim­ply too low, and in par­ti­cu­lar the vali­dity of chan­ges over time in these games will be even lower. Furt­her­more, the effect of read­ing a book or going for a stroll might very well be stron­ger than the effect of play­ing a com­pu­ter game.

I am not say­ing Lumosity’s games do any harm. The games are fun to play and per­haps they improve the brain. The pro­blem is that they might very well not improve the brain. The so-​​called science of Lumos Labs does not prove what they claim to be pro­ving. It is not science.

Dis­clai­mer: I am not a neu­ro­scien­tist. But I do know sta­ti­s­tics.

Lumositys self-promotion. Note how the control group, who supposedly received no training, mysteriously had an effect.

Lumosity’s self-​​promotion. Note how the con­trol group, who sup­po­sedly rece­i­ved no trai­ning, mys­te­riously had an effect.

Nøt du denne? Da vil du kan­skje like:

  • No Related Post

flattr this!