Is my email scanned? Scanning and advertising explained
Is my email scanned?
In most cases your email is processed in some way by machines, but not always for the same reason. There are broadly two kinds.
The first is content scanning for commercial purposes: software reads along to work out what you're interested in, and uses that for advertising or profiles. That's the model behind many free services, where you pay with your data instead of with money.
The second is filtering for your safety: systems check messages for spam, phishing and malware, so that junk doesn't reach your inbox. Here the content isn't the product, but the danger that has to be kept out. Both are technically called "scanning", but the difference in intent is large.
Why it matters
For anyone working with confidential information, this isn't an abstract discussion. A doctor, lawyer or accountant sends data every day that shouldn't be used to fit someone with a profile. If the content of your messages is picked apart for advertising, that clashes with the care your clients expect of you.
As a private individual too you feel the difference. "No one reads along" sounds self-evident, but at a service that earns from your attention, it isn't. Your correspondence, your appointments, the topics you raise: they're all signals that are worth something commercially.
There's something deeper at play. Who reads your email is tied to where your email is stored and under which rules it falls. At a provider outside Europe it's often unclear what exactly happens with your content. If you're in doubt about that, where is my email stored helps you get going.
How it works
Picture two gatekeepers at the entrance to your inbox. One notes what your messages are about so as to show you ads later. The other only checks whether there's an intruder or a forged letter among them, and throws it away. They both do something with your mail, but with opposite intentions.
Filtering for safety nowadays often works with smart, self-learning software (ML filtering). It recognises patterns typical of spam, phishing and malware, even with new variants. The content is processed to recognise danger, not to map your behaviour. That distinction is precisely what it's about: processing for security is something different from reading along for advertising.
Commercial content scanning goes the other way. There the aim is precisely to extract meaning from your messages: topics, interests, buying signals. That information then ends up in profiles that are worth money to advertisers.
So how do you recognise which way a service leans? Look at the business model. If you pay money for the service, the provider doesn't need to profit from your content. If the service is free and you see advertising, there's a greater chance your data is part of the product. The privacy policy often tells you more than the marketing: look in it for what happens to the content of your messages and whether it's used for advertising or profiles.
What to watch out for
A few points to consider and common misunderstandings:
- "Free is fine, surely." Free services earn money somewhere. If that model runs on advertising, there's a good chance your content is used to build profiles. For private use that may feel uncomfortable; for work with client data it's hard to justify.
- "Filtering means someone is reading along." Not necessarily. Antispam and antimalware filtering runs automatically and has the sole purpose of protecting you. It's easily confused with commercial scanning, but it's not the same.
- "I have nothing to hide." It's not only about you. Your mail also contains other people's data: clients, patients, members. They have a right to their information not simply being exploited.
- Forgetting the data location. What may happen to your content is tied to the law that applies. European hosting under the GDPR gives you more to hold on to here.
And with Mailflux
With Mailflux your content isn't the business model. There's no advertising and your messages aren't scanned to build profiles or tailor advertising. There is filtering that protects you: antivirus, antispam and antimalware, with smart, self-learning (ML-driven) recognition of spam, phishing and malware. That filtering processes messages to keep out danger, not to track you.
Everything runs on European, GDPR-compliant hosting, on your own domain. You email via webmail on any device or via your own email program (POP/IMAP/SMTP), with automatic backups and optional two-factor authentication. That way you keep control of your correspondence yourself. Read more about that angle in privacy-friendly business email.
FAQ
Frequently asked questions
Is my email at a free service always scanned for advertising?
Not always, but at services with an advertising model there's a real chance your content is processed for profiles or advertising. Read the terms, or choose a provider you pay for the service itself rather than for your attention.
Does a spam filter mean someone is reading my email?
No. A spam filter is automated software that checks messages for danger and stops suspicious mail. There's no person behind it reading through your correspondence, and the aim is security, not building a profile.
How do I know whether my email is being read along?
Look at the business model and the data location. A free service with advertising often profits from your data; a paid service with European hosting runs on your subscription. The privacy policy tells you whether content is used for advertising. See also where is my email stored.