# Data Ownership Data ownership refers to the legal rights and complete control over data—who can access, modify, share, and delete it. In the digital age, this has become contentious: when you use cloud services, who owns the data you create? The terms of service often grant companies broad rights to your content. The [[File over app principle]] and [[Local-First Software]] movements emerged partly as responses, advocating that users should retain full ownership of their data by storing it locally in open formats. Data ownership intersects with privacy, security, and digital rights. GDPR established data portability as a right in Europe—users can request their data from services. The "if you're not paying, you're the product" maxim highlights how free services often monetize user data. True data ownership means: data is stored where you control it, in formats you can read without proprietary software, with no third party able to deny you access. Tools like [[Obsidian]], [[Logseq]], and self-hosted solutions embody this principle. ## Data Ownership Spectrum ``` ┌─────────────────────────────────────────────────────────────┐ │ DATA OWNERSHIP SPECTRUM │ ├─────────────────────────────────────────────────────────────┤ │ │ │ FULL OWNERSHIP ◄─────────────────────► NO OWNERSHIP │ │ │ │ ┌───────────┐ ┌───────────┐ ┌───────────┐ ┌─────────┐ │ │ │ Local │ │ Self- │ │ Cloud │ │ Walled │ │ │ │ Files │ │ Hosted │ │ with │ │ Garden │ │ │ │ │ │ │ │ Export │ │ │ │ │ │ • .md │ │ • Nextcloud│ │ • Notion │ │ • Some │ │ │ │ • .txt │ │ • Own │ │ • Google │ │ social│ │ │ │ • Obsidian│ │ server │ │ (GDPR) │ │ media │ │ │ └───────────┘ └───────────┘ └───────────┘ └─────────┘ │ │ │ │ You control You control Company Company │ │ everything hosting controls, controls │ │ you can everything │ │ export │ │ │ └─────────────────────────────────────────────────────────────┘ ``` ## Key Principles | Principle | Description | |-----------|-------------| | **Access** | Can you access your data anytime? | | **Portability** | Can you export in usable formats? | | **Control** | Can you modify and delete? | | **Independence** | Does it work if company dies? | | **Privacy** | Who else can see your data? | | **Persistence** | Will it exist in 20 years? | ## Ownership Models | Model | Ownership Level | Examples | |-------|-----------------|----------| | **Local files** | Full | Obsidian, plain text | | **Self-hosted** | Full | Nextcloud, own server | | **End-to-end encrypted** | High | Signal, ProtonMail | | **Cloud with export** | Medium | Notion, Google Takeout | | **Cloud proprietary** | Low | Some social media | | **No export** | None | Walled gardens | ## Legal Frameworks | Framework | Description | |-----------|-------------| | **GDPR (EU)** | Right to data portability | | **CCPA (California)** | Right to know and delete | | **Terms of Service** | Often grant broad platform rights | | **Copyright** | You own what you create (usually) | ## Threats to Data Ownership | Threat | Description | |--------|-------------| | **Service shutdown** | Company dies, data inaccessible | | **Account termination** | Banned without warning | | **Format lock-in** | Proprietary format, no export | | **Terms changes** | Rights modified unilaterally | | **Ransomware** | Data encrypted by attackers | | **Government seizure** | Legal access to cloud data | ## Solutions | Solution | Description | |----------|-------------| | **[[Local-First Software]]** | Data on your devices first | | **[[File over app principle]]** | Open formats, any app | | **[[Plain Text]]** | Universal, future-proof | | **Regular exports** | Backup from cloud services | | **Self-hosting** | Run your own servers | | **[[Offline-First]]** | Works without internet | | **End-to-end encryption** | Only you can read | ## Questions to Ask | Question | Good Answer | |----------|-------------| | Where is my data stored? | On my device | | Can I export everything? | Yes, in open formats | | What happens if service dies? | I keep everything | | Who can access my data? | Only me (E2E encrypted) | | Do I need internet? | No, works offline | ## References - https://stephango.com/file-over-app - https://www.inkandswitch.com/local-first/ - https://gdpr-info.eu/art-20-gdpr/ (Data portability) ## Related - [[File over app principle]] - [[Local-First Software]] - [[Offline-First]] - [[Plain Text]] - [[Data Security]] - [[Personal Knowledge Management (PKM)]] - [[Obsidian]]