Thursday, March 12, 2015

16 of the top 20 Research Journals Let Ad Networks Spy on Their Readers

A recent query to the "LibLicense" listserv asked:
Is there any kind of organization that has put together a website or list of database providers/publishers that indicate the extent to which they respect patron privacy?
The answer is "no", but I thought it would useful to look at the top journal publishers to see if their websites are built with an orientation towards reader privacy.

I came up with a list of 20 top journals. I took the 10 journals with the most citations and the 10 journals with the most citations per published article, according to the SCImago journal rankings.

I used Ghostery to count the number of trackers present on the web page for an article in each journal. Each of these trackers gets a feed of each user's browsing behavior. I looked at the trackers to see if user browsing behavior was being sent to advertising networks. I also determined whether the journal supported secure connections. Based on these results, I assigned a letter grade for each journal.

Passing, Grade A

None of the scholarly journals I looked at earned excellent grades for reader privacy.

Passing, Grade B

Two journals, both published by the American Physical Society, earned good grades for reader privacy. They use a social sharing widget that respects privacy.

Reviews of Modern Physics.  Ranked #2 in citations/article. 1 Tracker (Google Analytics). No advertising networks. Supports HTTPS, but allows insecure connections.
Physical Review Letters. Ranked #9 in total citations, #393 in citations/article. 1 Tracker (Google Analytics). No advertising networks. Supports HTTPS, but allows insecure connections.

Passing Grade C

Two journals, both published by Annual Reviews, earned acceptable grades for reader privacy.

Annual Review of Immunology. Ranked #3 in citations/article. 1 Tracker (Google Analytics). No advertising networks. Insecure connections only.
Annual Review of Biochemistry. Ranked #5 in citations/article. 1 Tracker (Google Analytics). No advertising networks. Insecure connections only.

Failing Grade D

Failing grades are earned by publishers that allow their readers to be tracked by advertising networks. These networks get access to the full browsing history of a user and track them with cookies; it's difficult for users to maintain anonymity when most of their web browsing is exposed to tracking.

Science, published by AAAS. Ranked #5 in total citations, #49 in citations/article. 10 Trackers. Multiple advertising networks. Science gets a D rather than an F because it supports HTTPS, although it allows insecure connections.

Failing Grade F

15 journals earned failing grades because their participation in advertising networks exposes their readers to tracking and spying. Some of the publishers are more flagrant about this than others. Maybe I should have given F+ to some and F- to others. All of these journals force insecure connections.


PLoS One, published by the Public Library of Science. #1 in total citations, #1776 in citations/article. 3 trackers. One advertising network.
Proceedings of the National Academy of Sciences of the United States, published by the National Academy of Sciences. #2 in total citations, #155 in citations/article. 3 trackers. One advertising network.
Journal of Biological Chemistry
, published by the American Society for Biochemistry and Molecular Biology. #8 in total citations, #513 in citations/article. 3 trackers. One advertising network.
Quarterly Journal of Economics
, published by Oxford Journals. #6 in citations/article. 4 trackers. One advertising network.
Chemical Communications
, published by the Royal Society of Chemistry. #10 in total citations, #680 in citations/article. 6 trackers. Multiple advertising networks.
Journal of the American Chemical Society
, published by the American Chemical Society. #4 in total citations, #185 in citations/article. 7 trackers. Multiple advertising networks.
Chemical Reviews
, published by the American Chemical Society. #10 in citations/article. 8 trackers. Multiple advertising networks. 
CA: A Cancer Journal for Clinicians
, published by Wiley. #1 in citations/article. 9 trackers. Multiple advertising networks.
Cell
, published by Elsevier. #4 in citations/article. 9 trackers. Multiple advertising networks.
Angewandte Chemie - International Edition
, published by Wiley. #6 in total citations, #202 in citations/article. 11 trackers. Multiple advertising networks.
Nature Genetics
, published by Nature Publishing Group. #7 in citations/article. 11 trackers. Multiple advertising networks.
Nature
, published by Nature Publishing Group. #3 in total citations, #11 in citations/article. 11 trackers. One advertising network.
Nature Reviews Genetics
, published by Nature Publishing Group. #8 in citations/article. 12 trackers. Multiple advertising networks.
Nature Reviews Molecular Cell Biology
, published by Nature Publishing Group. #9 in citations/article. 13 trackers. Multiple advertising networks.
New England Journal of Medicine,
 published by the Massachusetts Medical Society. #7 in total citations, #41 in citations/article. 14 trackers. Multiple advertising networks.

Remarks

I'm particularly concerned about the medical journals that participate in advertising networks. Imagine that someone is researching clinical trials for a deadly disease. A smart insurance company could target such users with ads that mark them for higher premiums. A pharmaceutical company could use advertising targeting researchers at competing companies to find clues about their research directions. Most journal users (and probably most journal publishers) don't realize how easily online ads can be used to gain intelligence as well as to sell products.

In defense of the publishers, it should be noted that the web advertising business has developed very rapidly over the past few years due to intense competition. A few years ago, the attacks on user privacy enabled by the ad networks' massive data collection were mostly theoretical. But competition has led the networks to increase their targeting ability and scoop up more and more "demographic" data. What was theory a few years ago is today's reality. We still have time to prevent tomorrow's privacy disaster, but change will only happen if the institutions that purchase and fund these journals learn what's really going on and start to demand the privacy that readers deserve.