Company Overview Management Board and Advisors Location Privacy Patents In the News Press

Skyhook Wireless, Inc. Privacy Policy

 

This Privacy Policy is issued and practiced by Skyhook Wireless, Inc. ('Skyhook') regarding information we collect through our location-enabling Location SDK and API technology. Skyhook takes an individual's personal privacy very seriously and are committed to maintaining that privacy and trust.

General Overview

Skyhook's location-enabling technology ('Skyhook Location SDK') is a software-based technology platform loaded on phones, tablets, and other devices by third parties, such as device manufacturers and application developers. Skyhook also offers its location-enabling technology ('Skyhook Location API') as a cloud service, allowing access to our location services without the need for the Skyhook Location SDK. The Skyhook Location SDK and API determine the location of a device by interfacing with Global Navigation Satellite Systems (GNSS), such as the U.S. Global Positioning System (GPS), utilizing the IP address of the device, and by scanning for nearby Wi-Fi access points and cell towers visible to the device.  This information is then processed on the device or on Skyhook's servers to calculate the location of the device. When the Skyhook Location SDK is used for the first time, it generates a unique key (the 'Key'). This Key provides a mechanism that Skyhook uses to ensure accurate and secure data transmissions between the device and our servers. Skyhook does not collect the device user's name or contact information (except that, in instances described below, an individual may also provide us with a street address for the sole purpose of improving or refining the location results that are delivered). As part of the normal course of operations of the Skyhook Location SDK (or API), Skyhook collects the Internet Protocol (IP) address of the device; however we do not install cookies or other tracking devices to monitor the user's web browsing history. In all instances, Skyhook follows generally accepted industry standards to protect any information submitted to us, both during transmission and once we receive it.

Location Information

Skyhook uses location information to provide an estimated device location to the user or application, not to identify or track a user or a user's device. Skyhook does not link any of the information we receive with any personally identifiable information of the user. The Skyhook Location SDK is only operational when (i) it has been pre-installed on a device; (ii) a user installs and initiates a third party application that includes the Skyhook Location SDK on his or her device; or, (iii) a user manually initiates a location query on a third party application that includes the Skyhook Location SDK. The Skyhook Location API is operational when accessed from the Skyhook Location SDK or through third party integration into their applications or services.

Skyhook does not link the time or location (i.e. latitude and longitude) component of the location query with personally identifiable information.  In the normal course of operations of the Skyhook Location SDK and API, the system may collect location information that is generated, including for example GPS coordinates, the MAC address of wireless routers (an alphanumeric code that is unique to that hardware device), the Received Signal Strength Indicator (a measurement of the strength of the access point's signal at the time it is received by the mobile device) and the cell ID of nearby cell towers.  This location data is collected anonymously in a form that does not personally identify a user and is used by Skyhook to provide and improve location-based products and services.

IP Addresses – Skyhook collects a device's Internet Protocol (or IP) address (a unique identifier assigned to any device when it connects to the Internet) and estimates a location for each IP address based on other location information except as prohibited by local law. The collection of an IP address is a standard, commonly accepted practice used by a many websites and services on the Internet. Skyhook does not use the IP address to track the web history of a user and Skyhook does not link it with other personally identifiable information.

Street Addresses - In some cases, a third party application may also allow users to elect to determine the device's location to a greater degree of precision by entering a street address. Skyhook uses this information to improve the accuracy and precision of the Skyhook Location SDK and API and the third party application. When users elect to identify the device's location using this method, the street address is transferred using industry standard secure protocols to our servers along with the identifiers of the Wi-Fi access points and cell towers within range, and the Key. We do not link the street address with other personally identifiable information.

Data on Device – Encrypted local storage of all Wi-Fi access points and cell towers in the area surrounding a device may be stored on the device to allow the device's location to be determined by the Skyhook Location SDK without connecting to our servers. 

Location History – A temporary history of scanned Wi-Fi access points and cell towers nearby may be kept in memory on the user's device and later transmitted to our servers.  This temporary history is deleted from the device the next time the Skyhook Location SDK connects to the Skyhook servers, when the application terminates, or when the device is turned off.

Use of Information

The information collected by the Skyhook Location SDK or API is used by Skyhook to:

  • Provide location-enabling service(s);
  • Carry out the transaction(s) requested or authorized by users; and,
  • Improve the quality, accuracy and precision of the location-determination capabilities of the Skyhook Location SDK or API and develop and/or enhance Skyhook products and services.

Storage of Information

The Key generated by a device is used only to authenticate a location request with a location requestor to facilitate a specific query and is not stored or retained.  The Key is immediately removed after authentication and Skyhook assigns an anonymous ID to the time and location (i.e. latitude and longitude) aspects of a location request. This anonymous ID is separate and not associated with the Key or otherwise traceable to the Key. This information may then be aggregated with general demographic data and transferred to third parties as described in this policy.

IP Addresses - Skyhook retains IP addresses with their estimated locations in a transaction log except as prohibited by local law.  Skyhook uses this information to improve the location accuracy for IP addresses and the location-determination capabilities of the Skyhook Location SDK and other Skyhook products and services. We do not combine the IP addresses with other personally identifiable information.

Street Addresses - Skyhook retains street addresses that are submitted by users to improve location results (see Overview). Skyhook uses this information to improve the location results for future users of the Skyhook Location SDK or API. We do not combine the street addresses with other personally identifiable information and we do not transfer street addresses to third parties.

The information collected is stored and processed in the United States.

Sharing of Information

Skyhook will share any information that is collected by the Skyhook Location SDK or API with third parties only in the ways that are described in this privacy statement.

 

We may share the anonymous time and location (i.e. latitude and longitude) aspects of a location query aggregated with demographic data with third parties. We may also share the estimated location of IP addresses with third parties. Such parties may use this information to deliver targeted, location-based advertising or to aggregate data about general usage at a particular location at a particular time.

In addition, Skyhook may disclose the information collected:

  • as required by law, such as to comply with a subpoena, or similar legal process;
  • when Skyhook believes in good faith that disclosure is necessary to protect our legal and contractual rights or the safety of others, investigate fraud, or respond to a government request;
  • If Skyhook is involved in a merger, acquisition, or sale of all or a portion of our assets, in which case users will be notified via a prominent notice on our Web site of any change in ownership or uses of the information.

 

Security

The security and privacy of a user's personal information is important to us. We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security.

If you have any questions about Skyhook's security or privacy, you can contact us at privacy@skyhookwireless.com. 

 

Changes to this Privacy Statement

Skyhook reserves the right to change this Privacy Statement at any time effective upon our posting a change at http://www.skyhookwireless.com/privacypolicy.html.

 

Questions and Comments

If you have questions or comments about this Privacy Statement, please contact Skyhook.

 

Updated May 14, 2013