Leading Crypto Wallet MetaMask Reveals it Collects User Data, Faces Backlash From Community
We believe in full transparency with our readers. Some of our content includes affiliate links, and we may earn a commission through these partnerships. However, this potential compensation never influences our analysis, opinions, or reviews. Our editorial content is created independently of our marketing partnerships, and our ratings are based solely on our established evaluation criteria. Read More
Ad Disclosure
We believe in full transparency with our readers. Some of our content includes affiliate links, and we may earn a commission through these partnerships. Read more
Ethereum (ETH) software firm, ConsenSys, updated its privacy policy on Wednesday, stating that the popular crypto wallet MetaMask will be collecting certain user data – disgruntling the privacy-loving crypto community. The wallet co-founder, however, said that this will be “fixed soon.”
On November 23, ConsenSys published an update of its privacy policy, which describes how the company “collects, uses, shares, and stores personal information of users of its websites,” which include consensys.net, metamask.io, infura.io, consensys.net/quorum, diligence.consensys.net, and codefi.consensys.net.
A section of the post goes into describing information collected by Infura, which is the default Remote Procedure Call (RPC) provider in MetaMask. The company stated that,
“When you use Infura as your default RPC provider in MetaMask, Infura will collect your IP address and your Ethereum wallet address when you send a transaction.”
Infura is a tooling suite used to create applications that connect to the Ethereum network. Both Infura and MetaMask are owned by ConsenSys.
RPCs allow communications with servers remotely, and they provide the execution of programs in a separate location. In blockchain terms, RPCs allow access to a server node on the specified network and enable users to communicate and interact with that blockchain.
There is a way, however, for neither of these two products to collect information, though this option may, too, come with privacy-related risks.
ConsenSys wrote that,
“If you’re using your own Ethereum node or a third-party RPC provider with MetaMask, then neither Infura nor MetaMask will collect your IP address or Ethereum wallet address (but you should be aware your information will be subject to whatever information collection performed by the RPC provider you are using and their terms regarding such collection).”
As for the information the company collects through the above-stated sites, these include user-provided data, such as identity information (name, username, gender, date of birth, etc.), profile information (including username and password), contact, financial and transaction information, among others.
There is also data that is collected automatically, such as log data and browsed pages and features on ConsenSys websites, as well as information obtained from other third-party sources.
The company also said that it has appointed a Data Protection Officer, whose task is to ensure that it complies with “responsibilities under applicable data protection legislation.”
‘This can be fixed’
Once journalist Colin Wu shared the news of the updated policy on Twitter and reactions started rolling in, MetaMask co-founder Dan Finlay jumped in, claiming that the users’ IP addresses are not actually being used for anything.
He wrote,
I think we can get this fixed soon. We are not using IP addresses even if they are being temporarily stored, which they don’t need to be, as we’re not using them for anything.
Finlay went on to explain that, in his opinion, since it is not being used, it is “not actually worth freaking people out,” so correcting it should be a simple matter. As for how soon that could be, he said that it would have to be after the holiday, as the USA celebrates Thanksgiving today.
Yeah I don't think it'd be even proper for me to try to amplify a message undermining a legal policy. I'm personally saying I think we'll change this, I am personally saying I believe we are not using IPs, so I think this is plausible to correct soon. We'll just take the hit.
— Dan FinIay (@danfinlay) November 24, 2022
The community’s reaction was swift
Finlay wasn’t exaggerating when he said people were freaking out.
MetaMask is a popular wallet, and the community didn’t react well to the news, with many arguing for the push towards Web3 and decentralized finance (DeFi), with robust user privacy protections in place, as is the “ethos of crypto” – instead of turning to Web2 and centralized services.
Others defended ConsenSys, stating that the company is trying to be transparent and offer options.
Correct, but they just being honest to share and warn if you use infura, they will collect the information. They give options. Rather than they disclose.
— Hoteliercrypto (@hoteliercrypto) November 24, 2022
There were also those looking into other potential options.
https://www.twitter.com/cobie/status/1595647538627248128
Ethereum educator and advocate Anthony Sassano suggested switching RPC providers, stating that doing that on MetaMask is “trivially easy and there are plenty of good alternatives out there these days. […] Of course, the best alternative is to use your own full node as an RPC,” he argued.
Some, meanwhile, wondered why this change would matter when ‘everybody’s doing it’.
I guess if everyone stabs you it doesn't really matter that you're stabbed then.
— doge (@lord_of_venice) November 24, 2022
Decentralization advocate Chris Blec argued that these types of policies should not be ignored. “This is how you will be canceled from the financial system in the not-so-distant future. This is how they’ll do it,” he wrote.
____
Learn more:
– Uniswap Decentralized Exchange New Privacy Policy Says Platform Will Collect User Data – Here’s What’s Included
– ConsenSys Partners with Celo
– MetaMask Aims to Help Crypto Scam & Phishing Victims Take Legal Action Against Fraudsters
– Moving From Crypto Winter To Winter Spring: Lessons from Bear Market and When the Winter Will End
- Trump Appoints PayPal Veteran David Sacks as ‘White House AI and Crypto Czar’
- What’s Happening in Crypto Today? Daily Crypto News Digest
- President Trump Signs Executive Order Calling for US Sovereign Wealth Fund Creation
- Ohio Lawmaker Proposes Second Bill to Establish State Bitcoin Reserve
- US SEC Scales Back 50-Member Crypto Enforcement Team: Report






