For nearly a decade, I led product at Google for some of its most advanced marketing and measurement products. This included measurement of over $100B in revenue, growing products from nothing to millions of users, and leading an Ads-wide transformation from 3rd party to 1st party data, which I began advocating for shortly after joining in 2013. Now, another data transformation looms, but few see it coming.

1. The internet model for personal data is broken and getting worse.

2. This model will only be fixed when we get the tools to individually assert ownership over our data.

3. Zero-knowledge data will transform the internet and the marketing that powers its economy.

In the second it took to read the sentence above, over a million user events were logged and stored by Google alone through the use of a single advertising feature which I designed and built while at Google.

And this is just the tip of the iceberg. Our cars, smart TVs, smartphone apps, and credit card companies are all collecting and reselling our data… … sometimes with our knowledge … rarely first offering a choice … almost never giving us anything useful in exchange.

Regulators and users fed up with these practices have demanded changes. However, obtaining informed consent in practice is hard, as over 80%+ of users opt-out when presented with a clear choice. Meanwhile, for every company trying to do this the right way, there are two others willing to lie, cheat, or steal to obtain this data.

As trust erodes, the playing field tilts further toward companies with the brand and scale to focus on valuable user data collection and signed in experiences. This disadvantages everyone else, like smaller publishers, content creators, brands, and most startups.

To make matters worse, these companies will soon be feeding our data into AIs to precisely tailor content in real-time to maximally influence us. Having worked at the intersection of AI, privacy, and marketing for years, I am personally unsettled – this reality is closer than we think.

Simply by using services on the internet, we are opting into this extractive model where our data can and will be used against us – as long as we let others own it on our behalf.

Lawmakers and regulators have begun combating these dynamics over the past 5 years but technology consistently outpaces regulation.

With every new regulatory protection, the worst offenders find new ways to build workarounds by creating new join IDs, striking new data licenses, and employing new dark patterns.

Confronted with dozens of companies whose entire business model revolves around using our data, as individual users, we are practically powerless.

For 99% of us, the foundation of our digital identity itself is something borrowed, lent out by an issuing authority. Email addresses, phone numbers, usernames, and even domain names are all examples. Anyone who has ever had one of these identities revoked or suspended, usually as a result of an error by the issuer, knows the pain and frustration of having part of our identity stripped away.

A true system of individual data ownership must be built upon an inviolable self-sovereign foundation. In other words, we should be able to prove who we are online, disclosing as little or as much information as we want, without anyone else’s permission or participation.

By this point, crypto-inclined readers will guess where we are headed. Looking past the scams and speculation, crypto at its core is a movement about self-sovereignty over anything digital of value. First it was coins, then code, then collectibles.

Consider:

• The vast majority of our digital lives and the data we generate is still exclusively aggregated and owned in the existing system.

• Yet it also doesn’t all belong on a blockchain where anyone can view it.

• Even the subset of our data that does live on blockchains is being analyzed, sold, and used against us.

  • At this moment there are a dozen well-funded companies whose entire business model revolves around doing exactly this. Sound familiar?

  • Once we start receiving the same creepy and annoying ads when signing in with our wallet, we will quickly appreciate that private-by-default in web3 is no less desirable than on the internet at large.

In short, we need a private-by-default, easy-to-use, and permission-able system in order to fully express the endless complexity of our identities. We call it Zero-knowledge Data.

It will use the same public key infrastructure that supports blockchains, but doesn't inherently require blockchains to work (though many synergies exist), and must be easy enough for anyone in the world to use.

Zero-knowledge Data is part of a broader system of Self-Sovereign Identity that is being built as we speak by many talented teams, like our friends at Privy, Disco, Spruce, TBD, NFID, Benri, W3C, and the Decentralized Identity Foundation. It will permit us to own, permission, selectively disclose, and importantly, revoke data about our identities as needed- all critical prerequisites for true privacy, which we define as informed consent and control over our personal data.

Digital marketing remains the primary engine driving the internet’s economy to the tune of $500B+ per year. Marketing is also the chief cause of why user data has become so valuable and why it’s broken. Now we are witnessing the slow death of cookies and similar identifiers on which the entire system has been built.

The current consensus among my former colleagues and marketing experts is that marketing will gradually move away from user-based measurement and personalization. Instead, it’ll regress to 1999-style contextual advertising (think magazine-style) supplemented by probabilistic modeling (i.e., guesstimations) built by teams of PhDs that don’t even trust the results themselves.

Is this really the best we can do?

Some might argue “good riddance to ads”, but I believe that’s because we’ve become inured to bad advertising arising from a flawed system.

Marketing, executed well, can be a force for good: distributing money to content creators (who can provide information and services for free), driving value for users, and delivering value for advertisers.

User data leakage is a byproduct of the existing system, not a core requirement.

Imagine what marketing could look like if we could build anything, unconstrained by the current system?

Let’s take a look…

Push marketing: When browsing anonymously in my news app, I see an ad suggesting a trip to Mexico’s Isla Holbox island, which is highly rated by other travelers sharing my taste for off-beat travel destinations.

This suggestion is highly useful as I have just discovered something new that precisely matches my interests.

None of my underlying data is shared with the publisher, advertiser, or ad platforms. Upon display, an impression is recorded using an identifier that can prove I am eligible to see the ad but nothing else about me.

Pull marketing: I book the trip and a few weeks later am planning some activities. Recommendations are intelligently pulled from across the web, people I follow, and people in my network. I realize that my friend Marcia actually visited Holbox last year and highly recommends the Azul Bioluminescence tour, which is also recommended by one of my favorite people on Instagram. Booked.

I have just saved hours that I previously spent researching reviews while feeling more confident in my choices as a result of a trusted recommendation.

Again, none of my underlying data needs to be shared with the publisher, advertiser or ad platforms. Recommendations can be pulled using privacy-preserving methods and assembled on my device. Impressions through conversions can be tracked using a series of provably unlinkable identifiers in exchange for a small discount or other perk, if I agree.

While seemingly implausible in the context of the internet, we are all familiar with this phenomenon from our daily in-person interactions where it’s called word of mouth.

Why hasn’t this been done before? Because it requires a different model, built around several properties:

• Useful: optimizes for marketing most useful to me, not the highest bidder

• Personal: understands my context and unique data, resources, and networks

• Private: does not require sharing any underlying or persistent data with intermediaries facilitating the marketing

• Permissioned: All the above required to opt-in, and I can opt-out at any time or easily switch to alternate providers if they do a better job

A year ago, this was science fiction, but now the technology exists to bring this model to life, building on recent developments in decentralized identity standards and zero knowledge cryptography.

Moreover, when we achieve this model, the market for marketing will be vastly larger than it is today. So much potential value is wasted through the trillions of impressions that serve to the wrong people for the wrong things. Almost everyone – advertisers, publishers, and users – loses in the current model. And this value could directly contribute toward helping to build the internet on better foundations.

We believe in a marketing that enables us to tap into the full power of our digital identities to make our lives richer without leaking our data so that it can be used against us.

If building toward a world where we control our own data resonates with you, we invite you to subscribe for our journey. If you’re a builder, join us.

Warmly, Dan

For nearly a decade, I led product at Google for some of its most advanced marketing and measurement products. This included measurement of over $100B in revenue, growing products from nothing to millions of users, and leading an Ads-wide transformation from 3rd party to 1st party data, which I began advocating for shortly after joining in 2013. Now, another data transformation looms, but few see it coming.

1. The internet model for personal data is broken and getting worse.

2. This model will only be fixed when we get the tools to individually assert ownership over our data.

3. Zero-knowledge data will transform the internet and the marketing that powers its economy.

In the second it took to read the sentence above, over a million user events were logged and stored by Google alone through the use of a single advertising feature which I designed and built while at Google.

And this is just the tip of the iceberg. Our cars, smart TVs, smartphone apps, and credit card companies are all collecting and reselling our data… … sometimes with our knowledge … rarely first offering a choice … almost never giving us anything useful in exchange.

Regulators and users fed up with these practices have demanded changes. However, obtaining informed consent in practice is hard, as over 80%+ of users opt-out when presented with a clear choice. Meanwhile, for every company trying to do this the right way, there are two others willing to lie, cheat, or steal to obtain this data.

As trust erodes, the playing field tilts further toward companies with the brand and scale to focus on valuable user data collection and signed in experiences. This disadvantages everyone else, like smaller publishers, content creators, brands, and most startups.

To make matters worse, these companies will soon be feeding our data into AIs to precisely tailor content in real-time to maximally influence us. Having worked at the intersection of AI, privacy, and marketing for years, I am personally unsettled – this reality is closer than we think.

Simply by using services on the internet, we are opting into this extractive model where our data can and will be used against us – as long as we let others own it on our behalf.

Lawmakers and regulators have begun combating these dynamics over the past 5 years but technology consistently outpaces regulation.

With every new regulatory protection, the worst offenders find new ways to build workarounds by creating new join IDs, striking new data licenses, and employing new dark patterns.

Confronted with dozens of companies whose entire business model revolves around using our data, as individual users, we are practically powerless.

For 99% of us, the foundation of our digital identity itself is something borrowed, lent out by an issuing authority. Email addresses, phone numbers, usernames, and even domain names are all examples. Anyone who has ever had one of these identities revoked or suspended, usually as a result of an error by the issuer, knows the pain and frustration of having part of our identity stripped away.

A true system of individual data ownership must be built upon an inviolable self-sovereign foundation. In other words, we should be able to prove who we are online, disclosing as little or as much information as we want, without anyone else’s permission or participation.

By this point, crypto-inclined readers will guess where we are headed. Looking past the scams and speculation, crypto at its core is a movement about self-sovereignty over anything digital of value. First it was coins, then code, then collectibles.

Consider:

• The vast majority of our digital lives and the data we generate is still exclusively aggregated and owned in the existing system.

• Yet it also doesn’t all belong on a blockchain where anyone can view it.

• Even the subset of our data that does live on blockchains is being analyzed, sold, and used against us.

  • At this moment there are a dozen well-funded companies whose entire business model revolves around doing exactly this. Sound familiar?

  • Once we start receiving the same creepy and annoying ads when signing in with our wallet, we will quickly appreciate that private-by-default in web3 is no less desirable than on the internet at large.

In short, we need a private-by-default, easy-to-use, and permission-able system in order to fully express the endless complexity of our identities. We call it Zero-knowledge Data.

It will use the same public key infrastructure that supports blockchains, but doesn't inherently require blockchains to work (though many synergies exist), and must be easy enough for anyone in the world to use.

Zero-knowledge Data is part of a broader system of Self-Sovereign Identity that is being built as we speak by many talented teams, like our friends at Privy, Disco, Spruce, TBD, NFID, Benri, W3C, and the Decentralized Identity Foundation. It will permit us to own, permission, selectively disclose, and importantly, revoke data about our identities as needed- all critical prerequisites for true privacy, which we define as informed consent and control over our personal data.

Digital marketing remains the primary engine driving the internet’s economy to the tune of $500B+ per year. Marketing is also the chief cause of why user data has become so valuable and why it’s broken. Now we are witnessing the slow death of cookies and similar identifiers on which the entire system has been built.

The current consensus among my former colleagues and marketing experts is that marketing will gradually move away from user-based measurement and personalization. Instead, it’ll regress to 1999-style contextual advertising (think magazine-style) supplemented by probabilistic modeling (i.e., guesstimations) built by teams of PhDs that don’t even trust the results themselves.

Is this really the best we can do?

Some might argue “good riddance to ads”, but I believe that’s because we’ve become inured to bad advertising arising from a flawed system.

Marketing, executed well, can be a force for good: distributing money to content creators (who can provide information and services for free), driving value for users, and delivering value for advertisers.

User data leakage is a byproduct of the existing system, not a core requirement.

Imagine what marketing could look like if we could build anything, unconstrained by the current system?

Let’s take a look…

Push marketing: When browsing anonymously in my news app, I see an ad suggesting a trip to Mexico’s Isla Holbox island, which is highly rated by other travelers sharing my taste for off-beat travel destinations.

This suggestion is highly useful as I have just discovered something new that precisely matches my interests.

None of my underlying data is shared with the publisher, advertiser, or ad platforms. Upon display, an impression is recorded using an identifier that can prove I am eligible to see the ad but nothing else about me.

Pull marketing: I book the trip and a few weeks later am planning some activities. Recommendations are intelligently pulled from across the web, people I follow, and people in my network. I realize that my friend Marcia actually visited Holbox last year and highly recommends the Azul Bioluminescence tour, which is also recommended by one of my favorite people on Instagram. Booked.

I have just saved hours that I previously spent researching reviews while feeling more confident in my choices as a result of a trusted recommendation.

Again, none of my underlying data needs to be shared with the publisher, advertiser or ad platforms. Recommendations can be pulled using privacy-preserving methods and assembled on my device. Impressions through conversions can be tracked using a series of provably unlinkable identifiers in exchange for a small discount or other perk, if I agree.

While seemingly implausible in the context of the internet, we are all familiar with this phenomenon from our daily in-person interactions where it’s called word of mouth.

Why hasn’t this been done before? Because it requires a different model, built around several properties:

• Useful: optimizes for marketing most useful to me, not the highest bidder

• Personal: understands my context and unique data, resources, and networks

• Private: does not require sharing any underlying or persistent data with intermediaries facilitating the marketing

• Permissioned: All the above required to opt-in, and I can opt-out at any time or easily switch to alternate providers if they do a better job

A year ago, this was science fiction, but now the technology exists to bring this model to life, building on recent developments in decentralized identity standards and zero knowledge cryptography.

Moreover, when we achieve this model, the market for marketing will be vastly larger than it is today. So much potential value is wasted through the trillions of impressions that serve to the wrong people for the wrong things. Almost everyone – advertisers, publishers, and users – loses in the current model. And this value could directly contribute toward helping to build the internet on better foundations.

We believe in a marketing that enables us to tap into the full power of our digital identities to make our lives richer without leaking our data so that it can be used against us.

If building toward a world where we control our own data resonates with you, we invite you to subscribe for our journey. If you’re a builder, join us.

Warmly, Dan