I wanted the blue checkmark on LinkedIn. The one that says “this person is real.” In a sea of fake recruiters, bot accounts, and AI-generated headshots, it seemed like a smart thing to do.
So I tapped “verify.” I scanned my passport. I took a selfie. Three minutes later — done. Badge acquired. I felt a tiny dopamine hit of legitimacy.
Then I did what apparently nobody does. I went and read the privacy policy and terms of service.
Not LinkedIn’s. The other company’s.
Wait, What Other Company?
When you click “verify” on LinkedIn, you’re not giving your passport to LinkedIn. You get redirected to a company called Persona. Full name: Persona Identities, Inc. Based in San Francisco, California.
LinkedIn is their client. You are the face being scanned.
I had never heard of Persona before this. Most people haven’t. That’s kind of the point — they sit invisibly between you and the platforms you trust.
So I downloaded their privacy policy (18 pages) and their terms of service (16 pages). Here’s what I found.
Everything I Gave Them
... continue reading