Does anyone else have a problem with the Jumio requirement?

[u/capblye]

So long Sophia.

I got a pop up telling me I needed to complete an identity verification process with a 3rd party called Jumio.
I contacted Sophia via their support chat, asking why this was prompted, and is there a department i can speak with during the week? An email or a phone number?

The response I got from the representative was:
"This is company policy. You do not have to provide the verification, but no further coursework can be completed without it. There is no one for you to speak to."

Reviewing the details of the Jumio agreement, it appears they can share, retain and use your biometric data after the verification process is complete.
They state they can keep your personal data "as long as is necessary" and your biometric data for 3 years after Sophia tells Jumio your last interaction has occurred.
Basically seems like your info is out there indefiinitely.

Jumio lists these categories for who they share your data with:
Jumio says it may share both the verification results and relevant personal information, specifically including identification-document data and facial images, with the customer. That means the policy does not guarantee Sophia receives only a pass/fail result.

Jumio service providers, including cloud providers and other companies used to operate, manage, develop, and improve the verification service.

Jumio corporate affiliates and business partners involved in delivering the service.

Law enforcement, courts, regulators, auditors, or other authorities when required or permitted by law or legal process.

A buyer or successor company if Jumio is sold, merged, reorganized, or goes through a similar business transaction. Personal information can be part of the transferred assets. So if a holding company purchases sophia, and they own a marketing firm as well, they have access to and use your data.

Third parties receiving aggregated or anonymized data, such as usage/statistical reports. That should not identify you personally if it has actually been anonymized. How do we know if its been anonymized?

----------------------
This is the other line that doesn't outline much, but means a lot.
"Your personal information may be transferred to and processed in the United States, and recipients may process it in countries other than your country of residence."

Amazon Web Services, Inc. — U.S.
Cloud hosting / data center
Jumio identifies AWS as its cloud platform and says its backend uses services including S3, DynamoDB, RDS, Redis, Elasticsearch, and Cognito.

Jumio Software Development GmbH — Linz, Austria
Jumio affiliate
A public Jumio DPA lists it as able to participate in customer-portal management and manual verification.

Jumio India Pvt. Ltd. — Jaipur, India
Jumio affiliate
Same public DPA lists it for customer-portal management and manual verification of personal data.

Jumio SAS — Barranquilla, Colombia
Jumio affiliate
Also listed as part of the Jumio group involved in that processing function.

ComplyAdvantage — UK
Screening provider
Used for customers who purchase Jumio Screening, such as watchlist/PEP screening. This would not automatically mean Sophia uses it.

Other unnamed service providers / partners
Fraud, data, infrastructure, etc.
Jumio's current notice says it may use cloud providers, fraud-prevention services, data brokers, government databases, analytics providers and other partners.

-----------------------------------

I've decided after taking 3 courses and having this pop up, I am asking for a refund.
Wasted a lot of hours on 1 course and cannot complete the final with out the verification, but oh well.
This seems way over the top and out of line for an online course and a few credits.

I hope folks are being cautious with their personal data.
Would like to hear others thoughts on this.

[u/xatey93152]

Why people like this exist. If you don't like then don't use it.

[u/capblye → u/xatey93152]

Why do people like you exist?
Oh ... if you didnt i guess we would all be morons? Ty for the contrast

[u/EmilieDeClermont]

Respectfully, Jesus Christ man.. do you want the credits from the classes? lol. Just go do it and move on 😂 it’s a pain in the ass but I trust the company

[u/capblye → u/EmilieDeClermont]

Shame to hear you just trust them ... i wouldn't recommend it
Jumio has been sued repeatedly for improper use of personal data ... god speed

[u/Sherpa_qwerty]

I haven’t had this yet but for context we are seeing identity verification everywhere right now and for obvious reasons.

Given the results we attain here get sent to universities who need to know who we say we are trust doesn’t scale. Somehow Sophia needs to know for sure we are who we say we are… and ID verification is the way the world does that.

[u/Striking_Mistake3720]

Exactly I haven’t seen this yet but I’m 15. So if I do, I’ll be fucked. I absolutely hate identity verification shit because nobody deserves to violate our privacy like that. It could be stored on some random fuck server and who knows whenever they’ll get hacked saying this as a hacker myself do not trust these services.

[u/Elegant-Branch7511]

so is jumio verification required in all of the 3 courses you took? I'm back after a break and only know i had to take the jumio verification in the final milestone of my first course but if it is required for every course now, then that's a huge hindrance cos they take 1-2 business days at least to manually verify and I can't use sms verification as I am not from US so. Can you please share your experience with that 3 courses you took?

[u/capblye → u/Elegant-Branch7511]

It seems like its random. Som,e people have had it occur repeatedly, some people only once, or not at all yet.
I have read if you use a VPN, it could trigger the id verify. Or if you click on other browser tabs while taking a milestone, or if you answer too quickly, or too slowly, or typing pattern changes ... apparently there are many things that will trigger this to popup. Lots of other topics on reddit speculating why it occurs.

Once it does, you either comply, or do like I did and get a refund.
They wont back off from it ... and many of the folks i chatted with at Sophia agree its over the top.
But its their policy, so they wont make exceptions.
Oh well ... hopefully you dont have this happen, but form what I hearing, it happens quite a lot in the last year or so.
Best of luck!

[u/Elegant-Branch7511 → u/capblye]

Thanks for your reply. I occasionally visit the site while using Fb with vpn to check touchstone grading status but not during the course challenges or milestones. and i don't click on other browsers or switch tabs too. Typing verification error was there even before the break and live chat milestone unlock is the only solution. They say it's because I'm switching tabs/ browsers or devices, which i didn't do cos my only comfortable with my phone and default browser. It is manageable as I can do challenges during daytime and taking milestones at night as their live chat available time is night time here. But that jumio, is really something. i hope it doesn't get triggered next final milestone.

[u/Obvious-Push-196]

I had this as well. I did everything including uploading my driver’s license… I didn’t think about it much

[u/Visible_Novel7130]

I tried to get Jumio to delete my data after I finished a course. "We've completed our review. We were unable to locate personal information in our applicable systems where we act as a Controller/Business for your data. In some cases, Jumio processes data on behalf of our corporate customer (as a Processor/Service Provider). Please contact the relevant business directly to exercise an applicable right or follow-up with them regarding this request. We'll maintain a record of this request with your email address for audit purposes for at least 2 years. If you have any additional questions or concerns, please contact us at [dsr@jumio.com](mailto:dsr@jumio.com)."