In a statement described by communications analysts as "genuinely unprecedented in the annals of corporate reassurance," TikTok's parent company ByteDance confirmed Monday that the platform actively collects data on individuals who have never downloaded the app, never created an account, and in some documented cases have loudly and publicly refused to do either. The company's official response, issued through its Global Reassurance Division, characterized the practice not as surveillance but as "a caring check-in from a platform that just really wants to know how you're doing."
"TikTok loves its users," the statement read, "and also people who are not its users. Especially people who are not its users. They are a demographic we find extremely interesting from an emotional wellness standpoint, which is why our invisible tracking pixels follow them across approximately 1.5 million websites to make sure they have everything they need. This is a friendship. You are welcome."
The disclosures follow an investigation by the BBC, which found that TikTok distributes small tracking pixels across a vast web of third-party sites. Once installed, these pixels silently collect information including IP addresses, device specifications, battery levels, screen resolution, time zones, and in several documented cases, the contents of health forms asking whether visitors had cancer — data that was then forwarded to TikTok before the user finished clicking. The company confirmed the practice but noted that health data collection was "purely coincidental" and that TikTok in no way "went looking for it, it was just there."
"We don't think of it as tracking. We think of it as a standing invitation that the other person doesn't know they've accepted."
— ByteDance spokesperson, Global Reassurance Division press releaseThe technique relies on what security researchers call "fingerprinting" — a method that assembles a unique profile of each device by combining dozens of innocuous data points: your operating system, installed fonts, browser plug-ins, GPU specifications, and the particular way your device's battery happens to discharge. Combined, these form a "fingerprint" unique enough to identify you across any website in the world, regardless of whether you have ever agreed to any terms of service, downloaded any app, or expressed any desire whatsoever to participate.
A Consumer Reports investigation found TikTok pixels operating on hundreds of major websites when researchers scanned 20,000 sites. Among those tracked: government domains, hospital portals, and at least one major nonprofit whose stated mission is digital privacy education. The nonprofit has not commented.
ByteDance representatives, reached by this publication for additional context, were eager to clarify that the fingerprinting technology should be understood as "a form of digital warmth." "Imagine," said one spokesperson, "that a friend you haven't seen in years has been quietly standing outside every building you've entered since 2019, writing things down. Is that surveillance? Or is that devotion? We prefer to think of it as the latter."
Privacy advocates were less charmed by the framing. "They are collecting cancer diagnoses from people who have no TikTok account and have never expressed interest in TikTok," said Dr. Constance Merriweather of the Digital Rights Institute. "The company's response was to say this is friendship. I want it noted that if a person did this, we would refer to it differently."
"Our battery level data is collected with love. Your screen resolution is noted with warmth. Your cancer diagnosis form submission is received with deep personal care."
— TikTok FAQ, "Understanding Our Friendship With You"Congressional response was swift, if customarily disorganized. Senator Harlan Briggs (R-OK) introduced the STOP WATCHING ME Act, a 340-page bill which, upon closer reading, only applies to platforms with fewer than 50 million users. Senator Dana Koffmeyer (D-CA) counter-proposed the Protecting Online Privacy and Safety Act, which would require data brokers to "check in on users," a phrase her staff acknowledged was "perhaps poorly chosen given the current news cycle." The White House issued a statement saying it was "monitoring the situation," which reporters briefly worried might be a joke before concluding it probably was not.
Users across the country reported mixed feelings upon learning they had been tracked. "I've never had TikTok," said one Portland-area man who asked to remain anonymous. "I work in cybersecurity. I have blogged extensively about why TikTok is dangerous. And apparently they've been following me across the internet the entire time. I can't tell if I'm outraged or impressed." He paused. "I'm outraged. I'm clearly outraged." Another pause. "They do know an unusual amount about me."
TikTok's statement concluded with a call for users and non-users alike to "lean into the relationship." The company noted that opting out of tracking was possible "in theory" and provided a link to a settings page that, when clicked, asked users to log in with a TikTok account to proceed. Non-users were invited to create one. "We've been waiting," the page read. "We already know so much about you. Let's make it official."