AV俱乐部

In December, the company behind TikTok admitted that it had used the social media app to spy on American journalists in an attempt to identify their sources.

鈥淸TikTok] moved on and they announced that this was wrong, and policies will be [made], and it will not be repeated,鈥� explained Nur Zincir-Heywood, the associate dean of research in the faculty of computer science at AV俱乐部 and a cybersecurity specialist. 鈥淔ollowing that, the U.S. government 鈥� started banning it and then [it was] followed by the EU, U.K., Canada. That admission back in December ended up with this domino effect.鈥�

In late February, the Canadian government announced that it was banning the TikTok app on mobile devices it supplied to its staff. A number of provinces, municipalities and universities followed suit.

Mixed responses across the country

In Canada, this news garnered mixed reactions from universities, with Quebec鈥檚 response being the most restrictive. In February, the provincial government issued a directive that applies to all public bodies subject to the Quebec鈥檚 law directing information management at public bodies, which includes public universities. This directive prohibits university staff from installing TikTok on their work devices and forces them to uninstall the app if they already have it. It also prohibits using TikTok to generate new content for advertising campaigns, to share announcements, to recruit staff or for any other purpose. Quebec universities have also used the directive as a chance to raise awareness among students about TikTok鈥檚 privacy risks and have discouraged them from using the app.

Most universities in Atlantic Canada followed their provincial governments and banned TikTok on university devices. In Ontario, some institutions such as the University of Waterloo and Wilfrid Laurier University chose not to enact such a ban even after the province restricted use on government devices.

In the Prairies, where the Government of Saskatchewan has banned government use of TikTok, the University of Saskatchewan has not yet issued any policies about the app, though it doesn鈥檛 recommend social media use on its devices. Saskatchewan Polytechnic, however, has taken a stance similar to that of Quebec universities and banned it. TikTok is prohibited on government devices in Manitoba, but the University of Manitoba hasn鈥檛 issued its own restrictions, opting instead to inform its community on the overall risks of social media use.

In British Columbia, the University of Victoria and the University of British Columbia have encouraged students to be careful and recommended accessing TikTok content through a web browser rather than directly in the app. A UBC spokesperson noted in an email to聽University Affairs聽that it continues to use TikTok 鈥渇or brand channel engagement given that it continues to be an effective way to reach and communicate with a very significant audience online.鈥�

Why were responses so mixed? In Quebec, security measures are decided by university boards, but the TikTok directive came from the province. 鈥淯niversities generally follow the direction taken by provincial governments. I鈥檓 not sure every university gave this matter extensive thought,鈥� said Manon Guillemette, a professor with Universit茅 de Sherbrooke鈥檚 school of management and a member of a research group on cybersecurity.

As for other provinces, Dr. Zincir-Heywood said she assumes that 鈥渙rganizations are monitoring the health of their networks and systems and platforms. Based on that, organizations can make judgment calls to minimize their risks.鈥�

That鈥檚 the approach taken by Saskatchewan Polytechnic. The institution declined an interview 鈥� as did all other institutions contacted for this story 鈥� but offered an email statement: 鈥淪ask Polytech鈥檚 IT policies and procedures incorporate best practices to detect, mitigate and protect against cybersecurity threats.鈥�

A controversial app

TikTok, a mobile app for video sharing, belongs to the Chinese company ByteDance. Many governments around the world, particularly in the U.S., worry that the company is sharing sensitive user information with Chinese authorities. 鈥淚 think why we see a problem with TikTok goes back to who owns it, and that its parent company is from China. How much do they collect? How is it used by the parent company?鈥� Dr. Zincir-Heywood said. However, China denies that it accesses this information 鈥渁nd we have no concrete proof,鈥� noted Dr. Guillemette.

TikTok is just one of many apps that collect user information. 鈥淪ocial networks are all about collecting, processing, using and selling personal information,鈥� Dr. Guillemette said. 鈥淟ike other apps, TikTok asks for authorizations that it doesn鈥檛 actually need in order to function.鈥� If a user initially refuses to share data, one of TikTok鈥檚 strategies is to keep asking until the user relents and allows the app to collect broader data.

Experts note that TikTok鈥檚 location tracking is of particular concern. Enabling tracking allows the app to know where the user is located, but it can also glean data beyond that. 鈥淭ikTok isn鈥檛 the only app that asks users to enable GPS location-tracking,鈥� Dr. Guillemette said. 鈥淭he problem is that TikTok is a Chinese app. TikTok is also problematic because it collects information from other phones near you. You could end up giving away military secrets just by walking around the base with your phone. That鈥檚 a lot of information going to another country.鈥�

An opportunity to raise awareness

While universities鈥� TikTok bans aren鈥檛 a panacea, they have helped raise awareness around the potential dangers of social media use. 鈥淚t was a great opportunity to educate people on these issues, which users often don鈥檛 know about because no one reads the lengthy terms of use when they install an app,鈥� Dr. Guillemette said. 鈥淭hese are all default settings,鈥� Dr. Zincir-Heywood added. 鈥淚f you restrict access to the microphone, camera, geolocation, that means inconvenience to you, the user.鈥�

Though university policies don鈥檛 apply to personal devices 鈥渋t鈥檚 still a good idea not to use social media on your professional device,鈥� advised Dr. Guillemette. 鈥淣aturally, the pandemic blurred the lines a bit.鈥�

Regardless, everyone is free to decide whether to use a social network or not. 鈥淚 think it鈥檚 all about educating people on the pros and cons,鈥� Dr. Zincir-Heywood said. 鈥淭here is no free lunch. We are paying for these services with our data.鈥�