[GIS] Can privacy be achieved when using Bing Maps API for local authority use case

bing-mapsgoogle-maps-api

We have recently won a contract to provide a website for project run for a local authority. As part of the website, there should be a page with a simple map showing the project's locations, when you click one you get info text and an illustration photo.
We have implemented it using Bing maps, but had to take it off because the local authority is "concerned that the use of Bing Maps is breaching Privacy".

I couldn't find any similar website that uses Bing Maps, but still can't' understand their concern.

Many websites that belong to the authorities are using Google Maps which I'm sure has the same Privacy policy as Bing. Example is the journey planner in BVG website, and Germany was the one to force Google to create the anonymizeIP function in Analytics.
I seek any input about using Bing Maps in a local authority project website.

Best Answer

According to the TOU for Bing Maps,

Microsoft may collect information such as, but not limited to, an end user’s IP address, requests, time of submissions and the results returned to the user, in connection with transaction requests to the Services. All access to and use of the Services is subject to the data practices set forth in the then-current Privacy Statement, a current copy of which is available at http://go.microsoft.com/fwlink/?LinkID=248686. You are responsible for providing end users with adequate notice of the privacy practices applicable to your Company Application.

So, if your bid didn't mention that you were going to use Bing or a similar online map service, you screwed up. But whether you did or not, you still have to allay your clients' concerns.

Maybe your solution involved uploading the data to Bing Maps itself, then your clients have a right to be concerned about privacy - not only will inadequate settings expose the data publicly, but being hosted directly on MS's servers means it's a potential target for misuse, theft, or rendition to government Three-Letter-Agencies. If that's your plan then you should change your plan quickly.

If, on the other hand, you were going to host the data yourself and only use Bing as a visualization platform, make that clear to them. The data can only be loaded from your servers by authenticated users from secure endpoints. Contact of your private spatial data with Bing's servers is minimal. If that is not sufficient, however, you may have to switch to a fully self-hosted solution like ArcGIS Server.

Related Question