I wrote to Flock's privacy contact to opt out of their domestic spying program
by speckx on 4/14/2026, 5:47:00 PM
https://honeypot.net/2026/04/14/i-wrote-to-flocks-privacy.html
Comments
by: kstrauser
I wrote this. I had/have absolutely no expectation that Flock would comply with my request, but figured I should try anyway For Science. Their reply rubbed me wrong, though. They seem to claim that there are no restrictions on their collection and processing of PII because other people pay them for it. They say:<p>> Flock Safety’s customers own the data and make all decisions around how such data is used and shared.<p>which seems to directly oppose the CCPA. It's <i>my</i> data, not their customers'.<p>Again, I didn't really expect this to work. And yet, I'm still disappointed with the path by which it didn't work.
4/14/2026, 6:00:37 PM
by: dsr_
Remember that the difference between "Flock can do whatever the hell it wants" and "Flock is required to delete your data at your request" is a law. Citizens vote for legislators. If you want this to be a higher priority for your legislators, buy them off.<p>Or vote for/against them, that might work too.
4/14/2026, 7:41:05 PM
by: empathy_m
I noticed that the company is glossed as "Flock" and not "Flock Safety (YC S17)" in posts like this and last week's "US cities are axing Flock Safety surveillance technology", <a href="https://news.ycombinator.com/item?id=47689237">https://news.ycombinator.com/item?id=47689237</a>.<p>Did YC house style change a while back to drop the "(YC xxx)" annotation since so many popular firms particpate / or because it's well known?
4/14/2026, 6:43:24 PM
by: wcv
Flock has stonewalled with the "we are not the controllers" excuse here in MN too. We have similar rights to opt-out and delete under the MCDPA [0].<p>[0] <a href="https://ag.state.mn.us/Data-Privacy/Consumer/" rel="nofollow">https://ag.state.mn.us/Data-Privacy/Consumer/</a>
4/14/2026, 6:52:12 PM
by: hmokiguess
<a href="https://www.flocksafety.com/legal/lpr-policy" rel="nofollow">https://www.flocksafety.com/legal/lpr-policy</a><p>> In accordance with its Terms and Conditions, Flock Safety may access, use, preserve and/or disclose the LPR data to law enforcement authorities, government officials, and/or third parties, if legally required to do so or if Flock has a good faith belief that such access, use, preservation or disclosure is reasonably necessary to comply with a legal process, enforce the agreement between Flock and the customer, or detect, prevent or otherwise address security, privacy, fraud or technical issues. Additionally, Flock uses a fraction of LPR images (less than one percent), which are stripped of all metadata and identifying information, solely for the purpose of improving Flock Services through machine learning.<p>In this document, to which they linked in their reply, it says clearly "address ... privacy ... issues."<p>Does your case not constitute a privacy issue? I would say so.<p>Continuing down below, their claim on "Trust Us" about how they employ machine learning would need some proper transparency into how can that be guaranteed.
4/14/2026, 7:19:30 PM
by: ldoughty
I think you're going to have a hard time with this...<p>Flock seems to leave the data in ownership of the government. They are just providing the service of being custodians for storing and accessing that data.<p>You probably would get a similar response by submitting your request to Amazon web services or Google cloud or whoever has Flocks data: "sorry, we're just holding the data on behalf of Flock"<p>In either my example case or your stated case, you would have a very hard time convincing the host business to destroy their customers data without a court order or court case that shows their policy is invalid and they must comply.<p>Not a lawyer, just noting the parallel.<p>I do appreciate that Flock's response says that they cannot use the data they've collected for other purposes.. which further reinforces my cloud storage analogy -- the cloud vendor can't look at your data you upload to storage to e.g. build profiles on you/your business.
4/14/2026, 6:06:29 PM
by: calmbonsai
Per my understanding of the law for these sorts of data collectors, at least in the U.S., you need to contact the local municipalities (Flock's customers) for this redaction and the jurisprudence is governed at the state and municipal level.<p>The best source of this information is <a href="https://deflock.org/" rel="nofollow">https://deflock.org/</a> . FWIW, this is run by a neighbor in Boulder, CO which has been wrestling with the use of these cameras.
4/14/2026, 6:19:46 PM
by: kube-system
I don't think they need your permission to use ALPR on your publicly displayed license plate.<p>> (2) (A) “Personal information” does not include publicly available information [...]<p>> (B) (i) For purposes of this paragraph, “publicly available” means any of the following:<p>> (I) Information that is lawfully made available from federal, state, or local government records.<p>> (II) Information that a business has a reasonable basis to believe is lawfully made available to the general public by the consumer
4/14/2026, 6:50:53 PM
by: rdiddly
Flock's customers own the data the same way Uber drivers are independent contractors, i.e. it's designed for weaseling out of obligations.
4/14/2026, 7:38:02 PM
by: barelysapient
If that's a valid excuse than the CCPA isn't worth the paper its written on.
4/14/2026, 6:00:46 PM
by: lacker
Isn't that how it should work?<p>If you write the police and ask them to delete all their data about you, that isn't a thing that they do. It shouldn't matter if the police store their data on AWS or their own servers.<p>Flock is a tool used by the police so it should work the same way.
4/14/2026, 7:40:53 PM
by: pugworthy
An interesting quandary here is that they'd need to constantly scan for you and your vehicle, etc. so that they could know it was you then delete you. So to ensure they don't observe you, they need to observe you.
4/14/2026, 7:28:33 PM
by: _moof
They seem to be implying that because they are a "service provider," they aren't responsible for complying with CCPA rules even though they are the ones with the data.<p>Does this hold water? I'm reading the CCPA rules now but if anyone knows, it would save me some tedious research.
4/14/2026, 7:22:12 PM
by: deepsun
If Flock collects and processes PII data, then all their customers are "subprocessors". Flock should really have a Data Processing Agreement with their subprocessors, to legally ensure they follow the same PII handling controls as Flock does.<p>For example, if Flock receives a legitimate request to delete some data, then Flock must forward that request to all their Data Processors (e.g. including AWS/GCP/Cloudflare) and they must delete it as well.
4/14/2026, 6:57:09 PM
by: nekusar
The only opt-out the citizenry has is with any of the following:<p><pre><code> 2x4 rebar spraypaint spray foam battery powered metal cutter </code></pre> And bash those pieces of shit to chunks or completely ruin the lens and solar.<p>Republican community? They love corporate surveillance. Democrat community? They too love corporate surveillance.<p>There is no "Peoples' Party" that rejects this garbage.
4/14/2026, 6:23:57 PM
by:
4/14/2026, 6:41:35 PM
by: annoyingnoob
I've had the same kind of response from Email providers like Sendgrid, they claim its not their data. There is no way to have Sendgrid block you in their entire network, you have to play whack-a-mole with their customers. Seems like a flaw in these privacy laws when you can't ask the actual record holder to remove the records.
4/14/2026, 7:09:20 PM
by: mmmlinux
Lot of Flock Defenders in here.
4/14/2026, 7:01:55 PM
by: nour833
[dead]
4/14/2026, 7:46:00 PM
by: ranger_danger
To me this sounds like the equivalent of visiting a website that sells your data, and then asking AWS to delete your personal data when it actually belongs to a customer of theirs and only resides within their private storage.<p>Would you ask your local ISP to delete data they provided to Tinder like your IP address? That doesn't make sense to me.
4/14/2026, 6:03:37 PM