Skip to content

Nicolas Rowley

← The Voice of the Proton Community

My feedback

1 result found

  1. Feature Suggestion: Automated Personal Data Removal

    28 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    1 comment  ·  General Ideas » New features  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close
    Nicolas Rowley supported this idea  · 
    An error occurred while saving the comment
    Nicolas Rowley commented  · 

    Feature Proposal: "Proton Identity Shield" – A Zero-Knowledge Hybrid Removal System
    To: Proton Product Team / Feature Request Channel From: [nicolasrowley@proton.me] Date: April 14, 2026 Subject: Proposal for a Zero-Knowledge, Human-in-the-Loop Data Removal Tool

    1. Executive Summary
    Proton has successfully established itself as the gold standard for preventative privacy (encryption, zero-knowledge architecture). However, a significant gap remains for users dealing with existing data footprints on data broker sites.

    Current market solutions (e.g., Incogni, DeleteMe) rely on a "trust us with your data" model, requiring users to upload raw PII to centralized servers. This contradicts Proton's core philosophy.

    Proposal: Develop "Proton Identity Shield," a hybrid removal tool that leverages Zero-Knowledge encryption for data storage and local browser automation for execution. This system would automate the heavy lifting (scanning, form generation, navigation) while requiring human verification (CAPTCHA, final submission) to ensure high success rates and maintain the "Zero-Knowledge" promise.

    2. The Problem Statement
    The Privacy Paradox: Users want to remove their data from brokers but are hesitant to upload their full identity (Name, Address, DOB, Phone) to a third-party removal service, fearing that service becomes a new honeypot for that data.
    The Automation Arms Race: Fully automated bots (like those used by competitors) are increasingly blocked by sophisticated anti-bot defenses (CAPTCHAs, behavioral analysis), leading to low success rates and "silent failures."
    User Friction: Manual removal is effective but prohibitively time-consuming (days of work), causing users to abandon the effort.
    3. The Proposed Solution: "Hybrid Automation"
    We propose a workflow that combines the efficiency of automation with the security of human verification, all within a Zero-Knowledge architecture.

    Core Architecture
    Encrypted Identity Vault:
    User PII is stored locally in an encrypted vault (integrated with Proton Pass or a dedicated module).
    Key Principle: Proton servers never see the plaintext data. Decryption happens only on the user's device.
    Local Execution Engine:
    The "scraping" and "form filling" logic runs locally on the user's browser/device, not on Proton servers.
    The system generates the specific legal text and form data required for each broker.
    Human-in-the-Loop (HITL) Trigger:
    The system navigates to the broker's opt-out page and auto-fills all fields.
    The process pauses at the point of human verification (CAPTCHA, "I am human" checkbox, or final "Submit" button).
    The user performs the final action, bypassing bot filters entirely.
    User Workflow (Estimated Time: 30 mins for 100+ sites)
    Setup: User defines their "Identity Profile" in the encrypted vault.
    Scan & Queue: The system identifies 150+ brokers holding the user's data and prepares the removal payloads.
    Deployment Sprint:
    User clicks "Start Cleanup."
    A secure browser session opens, cycling through brokers.
    Forms are auto-filled instantly.
    User solves the CAPTCHA and clicks "Submit" for each.
    System logs success and moves to the next.
    Monitoring: The system tracks public "removed" status pages and alerts the user if data reappears (requiring a repeat sprint).

    4. Strategic Advantages for Proton
    True Zero-Knowledge Differentiation: Unlike competitors, Proton can claim, "We cannot see your data, so we cannot sell it or leak it, yet we still help you delete it."
    Higher Success Rates: By involving a human for the final step, the tool bypasses the anti-bot arms race that plagues fully automated services.
    Brand Alignment: Moves Proton from "Prevention Only" to "Holistic Privacy" without compromising ethical standards.
    Cost Efficiency: Reduces infrastructure costs by offloading the "bot farm" requirement to the user's local device, potentially allowing for a lower price point or inclusion in existing tiers.

    5. Perils, Pitfalls, and Mitigation Strategies
    Potential Risk Impact Proposed Mitigation
    Legal Liability Brokers may claim the tool is spamming or acting without proper "Authorized Agent" status. Mitigation: Position the tool as a "User Assistant" rather than an "Agent." The user signs the legal request; Proton provides the tool. Include clear disclaimers that the user is the legal actor.
    Technical Complexity Building a local browser orchestrator that handles diverse site structures is complex. Mitigation: Start with a curated list of the "Top 50" brokers. Use headless browser APIs (like Puppeteer/Playwright) running locally. Leverage Proton's existing UI expertise for the "pause/resume" UX.
    User Friction Users may find the 30-minute "clicking" requirement too burdensome. Mitigation: Market it as a "One-Time Sprint" vs. "Forever Subscription." Emphasize that this is a clean slate activity, not a daily chore. Gamify the progress bar.
    CAPTCHA Escalation Brokers may increase CAPTCHA difficulty (e.g., image selection) making automation harder. Mitigation: The H