Disclosure: I work at Azure but not on VS Code
I totally understand, though about trust. We've been asking users for feedback for 20+ years, I hope we've shown ourselves to be good actors!
Disclosure: I work at Azure on machine learning
* a lack of trust in corporations in today's economic and political climate and
* the skyrocketing growth of the online advertising business, which has made user data quite literally the gold mines of the digital age
The incentives today are very very well aligned for a corporation to sell user data. Even if a company may mostly be made of good people, without explicitly written contracts or declarations of any kind, a Company can change internal policies rather quickly. Maybe there will be a manager who sees the selling of that data as a way to boost profit and rise within the company. Maybe the company sells that division along with their data.
It has been a deceitful bully of a company for a long time.
Indeed, one of the main reasons why there is so little trust in corporations is because they are so insincere, anti-consumer and lacking in any kind of social conscience.
We can't rewind and fix the past, but we absolutely can be better working forward, and we will.
Not sure about the Azure team (since my experience with Azure is limited to a one-off project that required a SQL Server instance to test compatibility with some client's legacy DB, plus some very recent dabbling in VS Code and Azure Data Studio), but whichever team runs Windows nowadays, for example, hasn't exactly "shown [them]selves to be good actors". Or is preinstalling Candy Crush even on "Professional" versions of Windows 10 considered being a "good actor" by today's standards?
(Sure, even the first versions of Windows had games preinstalled, but those were first-party instead of third-party, they ostensibly existed to help users learn how to use a mouse, and they didn't plaster themselves front-and-center on my Start menu like seedy massage parlors in a Bangkok red light district)
Needless to say, "we've been siphoning your data for multiple decades, so you can trust us to keep doing so even though we're actively betraying that trust at this very moment" is cold comfort at best. I would hope that the New™ and Improved™ Microsoft™ would at least have some self-awareness about that.
I'm sure your intentions are good and pure. I hope they stay that way. I have no way of knowing whether or not they will, and historical precedent says they probably won't. It shouldn't be surprising that I and plenty of other tech-savvy users would take such claims of trustworthiness with a baseball-sized grain of salt.
According to the Windows GDPR statement (https://docs.microsoft.com/en-us/windows/privacy/gdpr-it-gui...), we only collect Windows functional data and Windows diagnostic data, and only if you allow us.
If we did more than that, we'd be liable for huge fines/jail! We have never "siphoned your data for multiple decades" - we only collect WHEN and ONLY WHEN you let us.
The way that our intentions haven't changes is because we are legally required to tell you if they do!
Less sarcastically: the GDPR is not applicable in the US, so hiding behind that does me no good. If your only defense is "but the GDPR doesn't let us do that!", then that's deeply concerning and only proves my point.
I don't believe you have, sorry (Microsoft I mean, not you specifically). I get the impression Microsoft is the same company it always was, only now it's better at convincing the gullible that it is on their side.
That Windows 10 update prompt for previous Windows versions were obnoxious and downright deceitful, making the 20+ years old traditional 'close window' X in the corner of the window actually download the update instead of doing what users expect it to do.
That's before we even get onto the subject of Windows 10's draconian privacy policies and use of dark patterns all over the OS designed to get people to disable their privacy settings.
Of course, even if they don't fall for tricks like coloring the 'privacy customisation options' link during installation a slightly different colour of blue than the background of the window to make it deliberately hard to read, they will still likely have all their privacy options reset and have previously removed crapware like Candy Crush added all over again in a forced update.
I'm on a Pro version of Windows 10 and I can't even disable the telemetry and constant phoning home every time I launch an application and or encounter a problem (that I absolutely do not need help with) with something I'm running.
I could understand this crap with the Home version. Not on Pro which I fully expected to have a degree of control over like I did with Win7 pro.
As a result of all this, Microsoft finally made my shit list after decades of shady behaviour and anti-competitive business practices and I won't be buying or using anything by them going forward.
Hell I even started PC gaming on Linux, that's how much I dislike the things Microsoft does.
We also don't use VS Code at all, for one simple reason: we tried to determine what the privacy policy actually was, and we couldn't. In particular, there appeared to be wording among the various indirectly linked documents that implied Microsoft might at some point upload our source code without our knowledge or consent, with no guarantees and nothing to indicate how it would or might then be used.
Combine that with an organisation that has a recent deliberate strategy of pushing updates whether wanted or not, collecting data whether volunteered or not, and attempting to coerce or deceive users into accepting those things whether it's in their interest to do so or not, and unfortunately while certain people who work for Microsoft and comment here may have no ill intent, it simply isn't safe to trust the company as a whole with the same benefit of the doubt.
We _only_ collect telemetry data. NEVER user data. And you can opt out! (it's right there during set up - or you can go here - https://code.visualstudio.com/docs/supporting/faq#_how-to-di...).
Again, to reiterate, we would never collect data if you didn't consent. It's the law!
Unfortunately, if you go down that rabbit hole (which we did before) it follows various redirect links and ends up at https://privacy.microsoft.com/en-us/privacystatement, which is a generic document that changes frequently and includes by reference ambiguous additional product-specific documents that may or may not exist.
What you need here is an absolutely clear, unambiguous statement to the effect that you will never under any circumstances upload our source code or other proprietary data to any external system without our explicit opt-in. It's really that simple. Otherwise, I'm afraid those of us working under commercial confidentiality agreements or other legal controls are just going to run away.
Again, to reiterate, we would never collect data if you didn't consent. It's the law!
Perhaps you could explain to me how to turn off the telemetry in Windows 10 then? Or for that matter how consent was obtained for the telemetry that was silently added to earlier Windows versions after release by anyone who installed Microsoft's recommended updates?
I appreciate that your personal intentions may be honest and good here, but the simple fact is that your organisation has a very clear, very bad track record at this in recent years, and its senior leadership has not only been entirely unretentant about that policy despite widespread criticism but actively doubled down on it. Anything Microsoft does will naturally be contaminated by that history now, unless as a minimum it makes a clear, legally actionable statement and/or imposes verifiable technical measures to guarantee different behaviour.
VS Code collects usage data and sends it to Microsoft to help improve our products and services. Read our privacy statement to learn more.
If you don't wish to send usage data to Microsoft, you can set the telemetry.enableTelemetry setting to false.
From File > Preferences > Settings (macOS: Code > Preferences > Settings), search for telemetry.enableTelemetry and uncheck the setting. This will silence all telemetry events from VS Code going forward. Telemetry information may have been collected and sent up until the point when you disable the setting.
That's ALL telemetry. So, the second you don't actively opt-in, we collect no telemetry data in VS Code AT ALL.
You'll also want to disable crash reporting:
VS Code collects data about any crashes that occur and sends it to Microsoft to help improve our products and services. Read our privacy statement to learn more.
If you don't wish to send crash data to Microsoft, you can set the telemetry.enableCrashReporter setting to false.
It's that simple. Absolutely nothing - and CERTAINLY no user code (which we never collected in the first place.
So again, while I appreciate that individuals involved may have honest intentions and be trying to help here, this is still a very long way from the kind of clear, unambiguous official statement that would make me trust any Microsoft product enough to use it in the current data-harvesting, forced-updates climate. I have specific legal obligations to clients when dealing with their source code and the proprietary knowledge implicit within it, and there's no way I can take this sort of documentation to my lawyer and say "Can I use this?".
https://docs.microsoft.com/en-us/visualstudio/intellicode/in... - No user-defined code is sent to Microsoft, but we do collect information about your use of the IntelliCode results.
For base model suggestions, which are open source or .NET types and members, we capture whether you selected an IntelliCode suggestion and log the name of the suggestion. Microsoft uses the data to monitor the quality of the base model. For custom models, we capture whether you selected an IntelliCode suggestion but do not log the names of your user-defined types or methods.
Thanks Mark Wilson-Thomas Program Manager Visual Studio IntelliCode
This assumes, of course, that y'all aren't doing any weird code-injecting funny business when packaging it up for installation :)
What most viewers saw during the Facebook congressional hearing was woefully out of touch, forgive me for using this phrase “old white guys” questioning Mark with many facepalm-able moments. But the house hearing, which includes 40 representatives from the Millennial generation, who grew up on tech, asked much better questions. It just got swallowed up by the news cycle because the Manafort Raid was happening at the same time as hearing about the Cambridge Analytica scandal was occuring.
All of this is still new. Banking, Finance, Real Estate, those are all well regulated at this point and arguably much more sophisticated or complex. The situation we have now with the Googles, Amazons, Microsoft, Facebooks of the world packaging up our metadata, combining it with other third party data, training AI, etc is all new, and those who are knowledgeable about it are just now making it into congress, so I am optimistic we will start to see real regulation on these shameful business practices soon.
Roger McNamee had an excellent conversation on the Sam Harris podcast recently about all of this. It was a very good conversation and one I highly recommend listening to.
If there are any changes to this doc - https://docs.microsoft.com/en-us/microsoft-365/compliance/gd... - you would be able to check that immediately, and we would never change our data collection policy without changing that document... It's the law!
Disclosure: I work at Azure on machine learning but not VS Code
(we ask both during install, and you can disable at any time)
However, if you don't trust us (and I get it!) Your best bet is just to opt out which you can do at any time, including during install.
Disclosure: I work at AZure on machine learning but not VS Code