TikTok
Folder: 04 - TECHNOLOGY & SURVEILLANCE Source note: SRC - TikTok
What Makes TikTok Different
Every platform in this vault harvests data. TikTok raises a question the others do not: harvested by whom, for whom, and under which government’s authority?
That question is now partially answered. But the answer created new questions.
What It Collects — From Its Own
Privacy Policy
TikTok’s own documentation confirms collection of: verified
- Faceprints and voiceprints from user content
- Keystroke patterns
- Precise location data — including when app is not active
- Clipboard content
- Device identifiers and hardware specifications
- Browsing history from third party services
- Contact lists, calendar data, photos, videos, microphone and camera access
- Content pre-loaded from camera before posting
- Payment information
The biometric update: In June 2021 TikTok updated its US privacy policy to include automatic collection of biometric identifiers — faceprints and voiceprints — under a new section called “Image and Audio Information.”
The policy did not define these terms or specify what the company would do with the data.
Alessandro Acquisti, professor of information technology and public policy at Carnegie Mellon University: biometrics are unique and permanent identifiers. A faceprint could be used to re-identify an individual across multiple contexts and scenarios. Unlike passwords, biometric data cannot be changed once compromised. #verified
TikTok paid $92 million in February 2021 to settle a class action lawsuit alleging it harvested facial recognition data without consent and shared it with third parties — some based in China. The settlement covered data practices up to October 2022. A new lawsuit filed after that date alleges the same practices continued. As of May 2025 ByteDance is fighting to dismiss those claims. verified
The ByteDance / China Question
ByteDance, TikTok’s parent company, is headquartered in Beijing. China’s National Intelligence Law requires Chinese companies to cooperate with national intelligence operations when requested. This is not disputed. verified
TikTok has consistently denied sharing US user data with the Chinese government or ByteDance employees in China.
A June 2022 BuzzFeed report obtained audio from 80 internal TikTok meetings. In those recordings ByteDance employees in China repeatedly accessed non-public data about US TikTok users. One statement in the recordings: “Everything is seen in China.” #verified
TikTok’s CEO Shou Zi Chew testified before the US House Energy and Commerce Committee on March 23, 2023, and swore that ByteDance is not owned or controlled by the Chinese government. Lawmakers were not satisfied. The recordings contradicted the sworn assurances. verified
The Supreme Court, The Ban,
and The Sale
The timeline — all documented: verified
-
April 24, 2024: President Biden signed the Protecting Americans from Foreign Adversary Controlled Applications Act — requiring ByteDance to divest TikTok’s US operations within nine months or face a ban.
-
January 17, 2025: US Supreme Court unanimously upheld the law in TikTok Inc. v. Garland (604 U.S. 56). The court found Congress had sufficient justification based on national security and data collection concerns. No dissents.
-
January 18–19, 2025: TikTok went dark. Services shut down. The app was removed from Apple and Google app stores.
-
January 20, 2025: Trump signed an executive order halting enforcement for 75 days.
-
September 25, 2025: Trump signed an executive order approving the sale of TikTok’s US operations to a consortium of Oracle, Silver Lake, and MGX (an Abu Dhabi investment firm).
-
December 18, 2025: TikTok agreed to the sale.
-
January 22, 2026: The deal closed. TikTok US operations are now owned by TikTok USDS Joint Venture LLC — controlled by Oracle, Silver Lake, and MGX. ByteDance retains the algorithm but the deal requires it to be customised over time to favour American audiences.
What this means honestly:
The platform that was banned for being a Chinese surveillance tool is now owned by US corporations and an Abu Dhabi sovereign wealth fund connected investment vehicle.
The data — all of it collected since 2016 — remains in existence. ByteDance still owns the algorithm. The infrastructure of collection continues. What changed is who the data flows to and under which government’s legal authority.
This is not necessarily better. It is different. The US surveillance capitalism machine now has access to the behavioral data of 170 million Americans that was previously flowing to a Chinese company. Whether that is a privacy improvement depends entirely on your threat model. #credible
The Algorithm
TikTok’s recommendation engine is widely considered the most sophisticated behavioural modelling system deployed in any consumer social media platform.
New users report the algorithm accurately modelling their interests within minutes of first use — before they have explicitly indicated preferences. It learns from: what you watch, how long, where you pause, what you rewatch, what you skip, your scroll speed, your time of use, your location changes, and dozens of other implicit signals. credible
The concern raised consistently by researchers: the algorithm was developed and is maintained in China. Under the sale agreement ByteDance retains the algorithm initially while customisation for American audiences is developed. The most powerful content recommendation engine in consumer technology is still ByteDance’s. #investigate — monitor post-sale algorithm independence
Content Suppression
Investigations have found that TikTok’s platform filtered politically sensitive topics — particularly content critical of the Chinese government — from global feeds. credible
A 2019 investigation found that content about Tiananmen Square, Tibetan independence, and Falun Gong was suppressed. TikTok stated this was a moderation error and updated its policies. Independent verification of whether suppression continues is ongoing. investigate
University of Toronto Citizen Lab —
The Honest Counterpoint
A 2021 Citizen Lab study concluded that TikTok’s data collection is not significantly worse than Meta or Google in terms of volume and type of data collected.
The meaningful difference is not what is collected. It is who ultimately holds it and under which legal jurisdiction. credible
The Pattern
A platform used by 170 million Americans was banned because a foreign government could compel access to its data. The solution was to transfer ownership to US corporations — the same corporations documented throughout this vault as participants in the surveillance capitalism architecture.
The concern was not surveillance. The concern was foreign surveillance. Domestic surveillance of the same scale, by the same mechanism, under US corporate ownership, was the solution.
I. The Observer holds that distinction.
Linked Notes
Surveillance Capitalism · The Managed World · The Planetary Nervous System · Google & Alphabet · Meta · Digital Privacy & Protection · The Pattern of Revelation · I. The Observer · SRC - TikTok