5
10 Comments

How to build trust in a privacy-centric applications?

What do you recommend, how to build trust in a privacy-centric application?

  • Anonymize data?
  • Open sourcing the code?
  • Self hosted version?
  • E2E encryption?

Combination of them?
What else?

posted to Icon for group Community Building
Community Building
on April 2, 2020
  1. 2

    All of those bullets sound good. Also, I believe that writing about those things in a transparent tone would go over well. In the space of analytics, Fathom's "data policy" accomplishes this well:

    https://usefathom.com/data

    1. 1

      That is a very good point!

      Correct words and tone are mandatory in this area, but still, saying something is not enough. That is why I asked the question. I could say anything on a website, but doing nothing in real.

  2. 2

    Here are some ideas I have day dreamed about related to privacy.

    1. Provide the user name and password so that you guarantee decoupling from the rest of the user’s electronic life.
    2. Differential privacy. Aka add some noise to data to provide plausible deniability if a real life individual was ever discovered to be connected to the account.
  3. 2

    We are also working on the first 3 on our project "nostalgia"!

    It's very essential since we are working on processing ALL people's private / GDPR data.

    https://nostalgia-dev.github.io/

    here's the open-source code:

    https://github.com/nostalgia-dev/nostalgia

    We believe that without open-source and self-hosting, it will be impossible to do this.

    We actually do not send anything away yet, so have no need for E2E yet, but we were considering allowing to send anonimized insights (which we currently only anonymize for when we want to do a public stream on youtube).

    1. 1

      You project looks awesome! Keep up the good work!

  4. 2

    Open source is a big one when you want to build trust in the privacy community. With open-source it is possible to actually check and verify if whatever else you claim is true. Without being open-source you can claim things but people won't actually know if they are true.

    Otherwise you build trust by being open and communicative, listen to feedback, answer questions...

    1. 1

      Open-sourcing is always a good way to build trust, but what if at the end of the day, I would like to make a profitable business of it? Provide a self-hosted (free) & cloud-hosted (paid) version?
      What do you think?

      1. 2

        That's certainly one way of doing it. And in general, remember that open source doesn't necessary mean free as in beer. There is a market of people that are happy to pay for open source solutions especially in this day and age of privacy intrusive apps etc.

  5. 2

    Having 2 & 4 definitely helps a lot. We were wondering the same for our applications and went ahead with #2. Currently working on #4
    Not so sure about the Self hosted version option, As I believe it helps if the project is open source and has E2E Encryption.

    1. 1

      Yes, it definitely helps a lot. Thanks!

Trending on Indie Hackers
I spent $0 on marketing and got 1,200 website visitors - Here's my exact playbook User Avatar 58 comments Veo 3.1 vs Sora 2: AI Video Generation in 2025 🎬🤖 User Avatar 29 comments Codenhack Beta — Full Access + Referral User Avatar 21 comments I built eSIMKitStore — helping travelers stay online with instant QR-based eSIMs 🌍 User Avatar 20 comments 🚀 Get Your Brand Featured on FaceSeek User Avatar 18 comments Day 6 - Slow days as a solo founder User Avatar 16 comments