sending email + user using does not in any sane way guarantee that the user did even know about it
and if usage implies consent how do you even delete you account if you disagree with contract changes, as that requires logging in which can easily be maliciously seen as using the application as any landing page contains app functionality
Suppose I start with simple TOS at the beginning: do not use in criminal scenarios
Then I change it to: do whatever you do with it, you are responsible for it anyways
I can even do this per sign-up, show TOS which makes sense, then next day send new TOS to allow everything
I have had emails never delivered to me, not due to my own fault but the service provider filtering it away before I could do anything. It is also dangerous to assume "use implies consent". I am sure there are other ways to ensure terms of use to be changed; if it is a web-application then one could only resume using it if the services were accepted before.
Obviously, this doesn't exist in the USA but does exist in (for example) the Netherlands. I would recommend lobbying in your country for such laws since in practice the vast majority of contracts like these that people face aren't actually negotiated nor negotiable.
And target some user with some money to lose and sue them for it.
TOS simultaneously became extremly important, commanding CEO attention and became completely ritulized.
I'm surprised that the legal profession has tolerated this is escalation of dysfunction.
Call me when the only court that matters makes a move.
When I tried to resolve it a couple of years ago I received boilerplate emails informing me that the migration period had ended.
So if you deal with companies that simply don’t honor their contracts—companies like Microsoft and Mojang—you don’t even need use to imply consent, because they can just lock you out of your purchases and tell you to pound sand.
> https://en.wikipedia.org/wiki/United_States_Court_of_Appeals...
It seems less likely to (randomly) have the same panel on two higher profile cases so close to each other:
> https://courthousenews.com/ninth-circuit-keeps-block-on-dhs-...
So I'm wondering if it is some procedural thing I am not privy to?
I get this periodically on our overly-computerized car: Here are new T&C, click yes to agree. You can make the screen go away temporarily, but there is no options to say "no, I disagree".
Why the heck is the court completely oblivious to that fact when weighing the facts on each side? You'd think a case hinging on a crucial email being sent into spam would at least mention that fact more than once? (!) The court certainly seems to take into account common practices in every other aspect of the case except that most crucial one... why?! No explanation whatsoever? Would this really survive on a hypothetical appeal?
> As Tile users, each Appellee provided an email address during account registration, and should have expected to receive relevant updates there while the account was active.
Well yes, they did, but:
> Because “there is very little empirical evidence regarding” Internet users’ expectations, the focus of this inquiry is “on the providers, which have complete control over the design of their [apps and] websites and can choose from myriad ways of presenting contractual terms to consumers online.”
...Tile should've expected that its email might go into spam, right? Shouldn't the court at least mention this, even if it doesn't lend it any weight?
> Evaluating whether inquiry notice has been established is, however, always a “fact-intensive analysis,” and we do not hold that notice by mass email establishes inquiry notice in every case.
At least they say their ruling doesn't generalize...
The TOS are changing from 1st of June as below:
- are your belongings are now ours
- please move out of your->our house
- you cannot use the service anymore> Broad did not locate the Oct. 2023 Notice until January 2024, when she affirmatively searched for the email and found it in her spam folder. […]
> Doe “never knew that Tile sent” the Oct. 2023 Notice and so never “read any revised or updated Terms.”
> The district court held that neither Broad nor Doe assented to the Oct. 2023 Terms.
So then it was challenged, and the appeals court gets into the weeds: were the Appellees “on inquiry notice of the Oct. 2023 Terms”? (“Inquiry notice” is clearly a specific legal term, I can’t comment on its precise meaning.)
The entire thing seems to hinge on whether appropriate notice was given: it seems to be accepted by all parties and case law that “continuing to use after such-and-such a date implies consent” is okay. (This is explored at the end of the document: simply using the app is treated as “unambiguously manifesting assent”, presuming inquiry notice.)
The court decides: yes, it was sent in the appropriate way and clearly marked and described. And
> Although the email did not say specifically that the arbitration agreement would be updated, reasonable notice does not require the email to discuss every revision.
They do say
> Tile could have done more to ensure that all its users were on inquiry notice of the Oct. 2023 Terms. Tile could, for example, have interrupted users’ next visit to the Tile App with a clickwrap pop-up notice. […] Because Tile should have known that at least some of its users do not closely monitor email, […] and Tile should have furnished additional notices, this factor weighs against finding inquiry notice.
They conclude: two factors for, one against, and thus determine that inquiry notice was received, although Tile didn’t handle things properly themselves, and should have done more.
But they avoid setting this as universal precedent:
> Evaluating whether inquiry notice has been established is, however, always a “fact-intensive analysis,” […] and we do not hold that notice by mass email establishes inquiry notice in every case.
—⁂—
This is my interpretation from a brief read of this interesting-sounding document. I’m neither a lawyer nor American. My understanding is almost certainly incomplete. I think I have avoided inserting any interpretation of my own, others can do that.
Got it.
To be fair, not all people in business or government prioritize "the all-mighty dollar" over everything else. Unfortunately, those who don't usually have principles; those who do often are willing to break rules. This is not an even match.
Can you imagine buying a car in the seventies and a month later finding a technician under your parked car making adjustments to it? You’d kick them out and call the police. But put an internet connection in between and it’s ok.
Same goes for wiretapping (compare Nixon vs current state), unlicensed hotels and cabs being ok when booked by an app, and so on.
Doe is a bit more interesting, since she re-downloaded the app, and they're saying that in-and-of-itself is sufficiently clear intent/consent to the current Terms of Service
("Doe unambiguously manifested assent to the Oct. 2023 Terms by downloading the Tile App in March 2024 and using the Scan and Secure feature in attempting to locate her alleged stalker’s Tile Tracker.")
The US breaking its contract law to treat non-contracts as contracts is one of the most insane things I've seen a legal system do to itself.
That said, they do also say this:
> we determine that Appellees received inquiry notice of the Oct. 2023 Terms. Evaluating whether inquiry notice has been established is, however, always a “fact-intensive analysis,” Godun v. JustAnswer LLC, 135 F.4th 699, 710 (9th Cir. 2025), and we do not hold that notice by mass email establishes inquiry notice in every case.
So the HN headline is misleading at best.
(They also note that, while they should consider how normal internet users behave, they can't do this because "there is very little empirical evidence regarding" the question. So they substitute a discussion of how reasonable they find Tile's actions in the abstract.)
https://www.independent.co.uk/news/world/europe/read-the-sma...
I don't understand how a community such as this, as connected as it is, can't back channel a message to Google brass to do something about these lockouts, which occur frequently and are unnecessary. There is no way Google doesn't know about them.
Gmail is an essential piece of pervasive personal infrastructure, upon which hundreds of millions of people rely. People are losing irreplaceable data for lack of care on the part of Google. The cost of providing a way to prove identity while maintaining security ought to be part of the cost of doing business for Google as it provides Gmail.
Surely there are some Google employees lurking who can chime in on this frustrating neglect.
And the way the resteraunt this right is by covering their walls with TOS text like an Egyptian tomb.
Like if you're a lawyer and you read this do you go "My client will never win a case like this?" or do you go "we should go to trial"?
Sure you won't get summary judgement but if the courts rule this way once they can rule this way again.
> Broad did not locate the Oct. 2023 Notice until January 2024, when she affirmatively searched for the email and found it in her spam folder.
I think it's rather relevant that she affirmatively searched for and found the email?
https://play.google.com/store/apps/details?id=com.ringapp
They slip "By using this app, you agree to Ring’s Terms of Service (ring.com/terms). You can find Ring’s privacy notice at ring.com/privacy-notice." into their app update changenotes for every update.
I get emails from time to time that "Policy X has changed and will take a effect in X weeks" so at least I'm given advance notice, and am basically OK with that approach as long as the changes are spelled out clearly and not hidden in hundreds of pages of legalese. Maybe an LLM would help here, and translate what the new changes in terms really means so I can decide whether to continue with the service or not. In general I'm OK as long as I'm given enough notice and it's clear what is happening.
The same thing happens with pricing. What does a company do when they want to increase rates, or change their products? They send out a notification that starting on a certain date, the prices will go up. I don't think anyone objects to that. How is a T&C change different?
Worth noting, the old T&C you agreed to probably include a clause where either party can unilaterally terminate the agreement for any reason, which they can then invoke.
Also worth noting, the old T&C you agreed to probably included a clause about these sorts of updates, too.
So, right there, you've already explicitly agreed to a contract that can be terminated if you don't accept updates.
> The company should not be able to change those conditions without my explicit permission.
The legal argument is that (a) you were explicitly notified of these changes, (b) your rights to use the service under the previous contract have been revoked, and (c) you're continuing to use the service.
So, either you're stealing their service, or you did in fact explicitly agree to the new contract - "“Parties traditionally manifest assent by written or spoken word, but they can also do so through conduct.” Berman, 30 F.4th at 855."
The real problem is that the law allows this power imbalance and doesn’t tip the scales to even it out for the end user. That for me is evidence that the law is made for the companies (probably by the companies too).
I have the same in the car. Been postponing for 2 years now.
I wonder if this can be weaponized by users too (probably no legal basis for this), just send them a new T&C again and again and say delivering the service is consent. Force the companies to say the quiet part out loud: users are not allowed to have the same liberties as the company.
and you are not allowed to criticize it or write about the size of it or how much meat there is in it or how filling it is to eat the burger.
and you are definitely not allowed to compare it to burgers from other companies.
Why? Why should a government prohibit private parties from agreeing to anything other than those 3 things?
> Especially garbage like what you're allowed to do with the stuff you get from the service even while not using the service, or about setting up competing products. It's like McDonald's selling you a burger and telling you how to eat it.
It is vaguely like that, but but I'm not sure the analogy facilitates understanding of this subject. McDonalds shouldn't tell you how you can eat your burger, therefore... companies must not enforce any terms on their services aside from those things. Why?
I'm not saying any term should be enforceable. Contract law has a long history against that. I just wonder how and where you draw the line and what existing law is insufficient.
Spam categorization isn't a delivery issue. The delivery is the same whether you, upon taking delivery, toss the message into a bin labeled "spam" or one labeled "inbox".
The key difference, is that the US is many jurisdictions (Federal + 50 states + a lot of others, from counties to cities to territories to MANY others), and the variance amongst those is high.
The key thing well regulated places like Sweden get right, is that in consumer contracts you have minimum bars that you must meet regardless of what you can get the consumer to agree to. So, for instance, return policies, for goods bought online have minimum standards they must meet.
In the US, these things have huge variability. There are well regulated states, and well, the others.
To me the insane part is that contracts don't have to be registered with the courts (or some qualified third party) ahead of time.
Like each party could show up with their own piece of paper (or not be able to provide it). Which is largely the issue here in that one party is showing up with a 2021 document and the other a 2023 document.
It’s not that the executive don’t know, it’s that they don’t care.
I think the point of contention here is that in practice, there is no way to continue on the old terms of service/contract. Suppose you're using a note taking app, and one day they update their terms of service to say that they can use your notes to train their AI. "Continued use implies consent," so you are locked into the new terms of service unless you stop using the app right then and there. You are not afforded the opportunity to decline the new terms of service and continue on the old ones.
Vader might say he can change the deal at any point, but consumer law generally requires that what is purchased reflects what is advertised.
If you don't agree to a new set of terms, because the service is changed from what you purchased, then both parties generally should still be party to the previous.
Notification alone, is not enough. Agreement is required.
Yes, everything is becoming more and more convenient for big corporations while individual citizens need to navigate an ever increasingly complex world. Laws are designed to protect capital not individual citizens nor society. That never ends well.
That’s domestic terrorism (charges)
In a situation like that, users have no means of resisting egregious terms, and no you cannot pull up stuff like "if you don't like it, don't buy it". As I wrote, the users are uncoordinated, and would take a huge effort to coordinate. Boycotting services rarely works (if ever). So what we end up with is that legal teams employed by firms optimize to shove as much bullshit into ToS as they can, the users grind their teeth and bear the bullshit, and get shittier service. Nobody really wins, because I'd argue the marginal gain for the company is minimal at best from this.
The government is not there just to enforce laws, but also to legislate such that the scales are balanced. Otherwise we may as well live in a dictatorship.
Even if you are OK with the idea that a user can be presented updated TOS with no option to disagree (I don't, but put that aside for a moment), it should still require a mechanism that actually guarantees (or at least verifies) that the user has seen that the terms are updated. Email is not that. (An unskippable notice on login to a web service would be.)
Statistically speaking, most people use one of the biggest email providers, which use their own models to detect spam (or even quietly drop messages). If you're doing an unpopular TOS change, why not set the mail up to still be RFC compliant but in such a way where the mail isn't going to be allowed through by any of the providers. Then you can just claim the problem is userside.
For example, the Message-ID header is technically not required (SHOULD rather than MUST), but as a spam detection measure, Gmail just drops the message entirely for workspace domains: https://news.ycombinator.com/item?id=46989217
because ToS have been long used to demand unreasonable things and threaten people with expensive lawsuits. The advantage of companies losing bullying power significantly outweighs the disadvantage of less business freedom
ToS are normally "contracts" (hard to even call them that) between a large corporation with very high resources for a lawsuit and an individual with very low resources. The power imbalance makes challenging ToS for the individual unfeasible in 99% of cases
Yes, but Swedish contract law actually is like this. A contract is a specific agreement, it can never be "Oh well, you can add provisions as you like if you send them to me" or "I will pay whatever".
If you have an agreement that says one party can announce changes, you don't have a contract, because those changes were not agreed to.
Yes, of course.
We don't have any rules about contracts needing to be written down or registered or anything of that sort. Even verbal agreement are valid, and you are entering into simple contracts even when you buy something in a store.
Why those in particular though? The criminal law one sure that's a part of contract law already. Why the others? Why not different ones? It was just asserted that those were reasonable and no other terms are.
To be fair existence of TOS is suspiring.