Internet.org allows partnering telcos to track users, doesn't support secure connections
Nikhil Pahwa / MediaNama :
Context & Ripple Effects
Facebook had spent early 2015 pushing its zero-rated platform into its biggest target market — it took Internet.org and its free mobile data services to India in February, then opened the platform to all developers after net-neutrality backlash. This MediaNama report lands on the same day, and shifts the argument from which sites get included to what the platform does to the people using it.
The findings sharpened into a running critique of the program through 2015: any mobile network was soon allowed to sign up to Internet.org, multiplying the number of telcos positioned between users and their traffic, while Nikhil Pahwa — whose Save the Internet movement drove the neutrality fight — pressed the privacy case alongside it.
First-order effects
- Users accessing Internet.org through partnering telcos can be tracked by those operators, since their traffic passes through networks with visibility into which zero-rated services they use.
- With no secure connections, sessions on the free platform travel unencrypted — exposed to interception on shared or monitored network paths rather than protected end-to-end.
Second-order effects
- The privacy and security gap handed Indian critics concrete ammunition beyond net-neutrality arguments, feeding the opposition Pahwa's Save the Internet movement mounted against Free Basics.
- Facebook responded within months by folding HTTPS support into the platform at the Free Basics relaunch, effectively conceding that a no-encryption tier was untenable under scrutiny.
Third-order effects
- Zero-rated programs now carry a structural obligation their designers didn't price in: if 'free' access is also unencrypted and telco-observable, regulators and privacy advocates will treat it as a lesser class of internet, forcing encryption into every subsidized-access product.
- India became the test case for this standard — the same period produced a draft encryption policy criticized for endangering user privacy, signaling that how platforms and the state handle user data would be decided together, not separately.
The trend: Zero-rated 'free internet' platforms are being pushed from walled-garden charity toward encrypted, regulated infrastructure, with privacy advocates like Nikhil Pahwa setting the terms of acceptance in emerging markets.