TikTok. Beyond the Dance

Once upon a time, we believed social media was just about connecting with friends and sharing moments. Then some things happened, and now we understand it's about something far more valuable: our data.

I used to think the TikTok controversy was political theater. But after examining the evidence and recalling my own experience in law enforcement, I've come to see it as the front line in a new kind of conflict, one fought with algorithms and personal information rather than traditional weapons.

When Privacy Becomes Security

The U.S. government didn't always care about Chinese-owned apps. Therefore, something changed. But what?

The debate around TikTok centers on a crucial distinction that's often blurred: privacy versus security. These concepts overlap but aren't identical. Privacy concerns what happens to your information when you willingly share it. Security involves protecting that information from unauthorized access.

Many Americans carry devices that track their location, shopping habits, and personal connections every day. We accept this because we trust the companies collecting our data. But TikTok challenges this trust for several reasons.

The Real Fear Isn't Technical Vulnerability

The concern isn't that TikTok is technically insecure. No credible evidence suggests the app contains deliberate backdoors or technical vulnerabilities that wouldn't be found in other social media apps.

Instead, the fear focuses on three key areas:

1. Data Collection Scope: TikTok collects vast amounts of user data, including biometric information, location data, and browsing habits, even when you're not using the app.
   

2. Storage Practices: Where does your data live? Who has access to it? TikTok claims U.S. user data stays in the U.S., but questions remain about whether Chinese employees can access it.
   

3. Potential for Coercion: Chinese national security laws require companies to cooperate with intelligence services when asked. This creates a situation where even if TikTok wanted to protect user data from the Chinese government, they might not be able to do it.

The Insider Threat

Imagine you're building a fortress with the strongest walls but staffing it with guards who might have divided loyalties. This represents TikTok's fundamental challenge. Even with the best technical protections, insider threats, both intentional and unintentional, remain a constant risk.

Real-World Data Vulnerabilities

Recent events provide a stark illustration of the risks we're discussing. Just last week, X (formerly Twitter) reportedly suffered a massive data breach affecting potentially billions of users. While the leak thankfully doesn't include passwords, it contains email addresses for approximately 200 million accounts along with valuable metadata that cybercriminals can leverage for targeted attacks.

For affected users, this exposure significantly increases risks of targeted phishing attacks and identity impersonation, even without direct password compromise. The situation bears striking similarities to what privacy advocates fear with TikTok, where collected data could potentially be misused by various actors.

During my time in law enforcement over 12 years ago, I regularly used Facebook's OpenGraph API to pull geolocation data from suspects' posts during investigations. What most users didn't realize was that the API revealed their location data even when they had never explicitly chosen to share their location in their posts. Facebook's system automatically attached this geolocation information behind the scenes. I didn't need to hack anything or exploit vulnerabilities. The system worked exactly as designed, but in ways users didn't fully understand.

TikTok could implement perfect data sovereignty. They could build firewalls between their Chinese parent company and U.S. operations. But guaranteeing these measures would completely succeed is nearly impossible given human factors and legal realities.

Consumer Demand: The Unaddressed Reality

TikTok provides a compelling case study of consumer demand and behavior in the media landscape, demonstrating resilience despite significant efforts to disrupt its success. So many people love TikTok! The platform has created a cultural phenomenon that transcends political concerns for most users.

When Rednote briefly surged after TikTok faced regulatory challenges, it revealed an important truth: the demand for this type of content and connection isn't going away. Like Hydra from ancient mythology, cut off one head and two more shall take its place. If the desire exists, people will find alternatives.

From a business perspective, it makes perfect sense to be where the audiences are, especially for media companies promoting theatrical releases or politicians trying to reach voters. The platform offers unique access to demographics that are increasingly difficult to reach through traditional channels.

Beyond Banning: Alternative Solutions

Does banning TikTok truly address the root of the problem? Would it be more effective to prioritize investing in media literacy and creating robust, adaptable privacy laws at the national level?

I used to think strict regulation was the only answer. Therefore, I supported aggressive action against potential data threats. But witnessing the resilience of user communities and the emergence of alternative platforms has transformed my understanding.

Perhaps the more sustainable approach isn't attempting to block individual companies but developing comprehensive privacy frameworks that protect Americans regardless of which app they choose. Coupled with improved media literacy that helps users understand disinformation, the value and vulnerability of their data, this could create lasting protection rather than temporary barriers.

The Transformation of Understanding

I entered this debate thinking it was primarily about protectionism. But looking closer at how data flows between companies and governments transformed my perspective.

This isn't just about TikTok. It's about recognizing that in the 21st century, data represents both economic and strategic value. When we use social platforms, we're not just connecting with friends and watching videos. We're participating in complex ecosystems where our personal information becomes currency and, potentially, intelligence.

Consider the recent bankruptcy filing of 23andMe, where the genetic data of over 15 million users now hangs in the balance. The company says data privacy will be an "important consideration" in any sale, but federal law does little to secure genetic information given to private companies. As Tazin Khan, CEO of the nonprofit Cyber Collective, noted, "Folks have absolutely no say in where their data is going to go." We simply don't know who will eventually purchase this treasure trove of genetic information or what they might do with it.

The next time you open any social media app, remember: you're not just a user enjoying content. You're a data point in a much larger system. The question isn't whether your information is being collected, it's who might eventually access it, and for what purpose.

That realization changes everything about how businesses must approach strategic decisions in the digital marketplace.

Ready to Take Action?

Understanding the complex interplay between privacy, security, and consumer behavior requires expert guidance. If your organization is navigating these challenging waters, you don't have to do it alone.

Organizations that proactively address data privacy concerns gain measurable competitive advantages: increased consumer trust translates directly to customer acquisition and retention, while robust data governance significantly reduces regulatory liability and potential breach costs. In an era where a single privacy misstep can cost millions in damages and lost reputation, strategic data management isn't just good practice, it's essential business protection.

I've been through this challenge before with major organizations facing similar data privacy and security challenges. My work with MGM Studios and the Democratic National Committee (DNC) involved developing comprehensive strategies that balanced security requirements with practical business needs. This direct experience makes me uniquely qualified to help your organization navigate these complex issues.

I am currently accepting a limited number of consulting engagements. To inquire about availability or to schedule a consultation, please visit eliandrett.com.