Balena
| Basic information | |
|---|---|
| Founded | 2013 |
| Type | Private |
| Industry | Software Development |
| Official website | https://www.balena.io/ |
Balena (formerly known as Resin.io) provides a platform focused on DevOps management for servers, clients, and local cross platform device software. It also offers tools for updating, deploying and maintaining code bases (though that is mainly targeted at Linux).
Consumer-impact summary[edit | edit source]
Balena has been one of the more big companies that has open sourced most if not all products for users to tinker with. However, recently they have resorted to anti-consumer tactics for profit. Such violations include:
- Breach of user trust
- Adding adware to its services
- Leveraging its reach to the vulnerable tech illiterate
Incidents[edit | edit source]
Balena Etcher Collecting data on users drive and filename being flashed (2018)[edit | edit source]
In as early as 2018 Balena has been gathering specific user telemetry on their software Balena Etcher without consent.[1] Specific information includes IP address, usb device info and the filename being flashed being sold to their 3rd party AD network partners compromising users privacy and trust for profit. Many other privacy focused open sourced groups that have relied on etcher like Tails have completely removed recommendation of using Balena Etcher to install their operating system.[2] While there are many alternatives to Balena Etcher they tend to be a bit less user friendly and likely are not cross platform. Making them the de-facto choice among non tech literate users that are drawn into using it.
Balena's Privacy Policy[edit | edit source]
Recently Balena made a minor change to its privacy policy[3][4]. While the change was minor, the policy itself has been noted[citation needed] to contain several clauses which users found concerning, including the following:
Fingerprinting users with help of third parties[edit | edit source]
"Automatic Data Collection. We may collect certain information automatically when you use the Services. This information may include your Internet protocol (IP) address, user settings, MAC address, cookie identifiers, mobile carrier, mobile advertising and other unique identifiers, details about your browser, operating system or device, location information, Internet service provider, pages that you visit before, during and after using the Services, information about the links you click, and other information about how you use the Services. Information we collect may be associated with accounts and other devices."
"We may obtain information about you from other sources, including through third party services and organizations to supplement information provided by you. This supplemental information allows us to verify information that you have provided to us and to enhance our ability to provide you with information about our business, products, and Services."
Collecting information on your referrals or "friends/colleagues"[edit | edit source]
"Share Content with Friends or Colleagues. Our Services may offer various tools and functionalities. For example, we may allow you to provide information about your friends through our referral services. Our referral services may allow you to forward or share certain content with a friend or colleague, such as an email inviting your friend to use our Services."
Sharing information collected about you to third parties and AD networks[edit | edit source]
"We may share any personal information we collect about you with our third- party service providers. The categories of service providers to whom we entrust personal information include: IT and related services; information and services; payment processors; customer service providers; and vendors to support the provision of the Services."
"Business Partners.
We may provide personal information to business partners with whom we jointly offer products or services. In such cases, our business partner's name will appear along with ours.
Affiliates.
We may share personal information with our affiliated companies."
Having to manually request data to be erased through legal channels instead of by default[edit | edit source]
"You can access and modify the personal information associated with your Account by logging in to your Balena account. If you want us to delete your personal information and your Account, please contact us at legal@balena.io with your request. We will take steps to delete your information as soon we can, but some information may remain in archived/backup copies for our records or as otherwise required by law."
Products[edit | edit source]
Balena Etcher (2016)[edit | edit source]
Formerly known as Etcher; Balena Etcher is a free open source tool that flashes image files. it has recently had some controversial stir around how it collects user data within it's app. Many users have started using other software to flash image files such as GNOME Disk, Rufus, DD (bash command), and the Disk Utility (Mainly for mac) that work without selling the consumer out.
See also[edit | edit source]
References[edit | edit source]
- ↑ sneak (2018-02-18). "etcher spies on the user without consent · Issue #2057 · balena-io/etcher". Github Issues. Retrieved 2025-03-31.
{{cite web}}: CS1 maint: url-status (link) - ↑ "Tails - Replacing balenaEtcher with Rufus as installer for Windows". Tails. 2025-02-19. Retrieved 2025-03-31.
{{cite web}}: CS1 maint: url-status (link) - ↑ "Old Privacy Statement - balena". Balena. 2020-04-01. Retrieved 2025-04-01.
{{cite web}}: CS1 maint: url-status (link) - ↑ "Privacy Statement - balena". Balena. 2025-03-27. Retrieved 2025-04-01.
{{cite web}}: CS1 maint: url-status (link)