Tuesday, February 12, 2013

Exceptionally upset with efileforBusiness practices.

My friend used efileforBusiness to send me a 1099; why she couldn't use the plain paper version that she's used for the last several years, or why she couldn't use the IRS' own fill-in form, I have no idea.  That means that my social security number, address and name is out there in the cloud, waiting to be hacked -- if you're going to try to steal personal information, what better target, than one that collects personally identifiable information?

I don't care if they use Verisign or Norton -- Verisign issued fraudulent digital signatures and Norton's antivirus couldn't stop Chinese hackers -- these people are using off the shelf products to build their site, and therefore it will be hacked eventually.

Worse, their own site specifies that:
"We may transfer or otherwise disclose information collected from and about you to the following entities for the following purposes: (1) to our service providers, suppliers and business associates, if the disclosure will enable them to fulfill your request for products or services from us for another vendor on our site; (2) to our service providers and business associates, if the disclosure will enable them to perform a business, professional or technical support function for us; (3) to our affiliates and other third parties so that they may contact you with marketing offers of their own; (4) to other companies, credit bureaus or government agencies in connection with issues related to fraud, credit or debt collection; (5) as necessary if we believe that there has been a violation of our site Terms of Use, of the law or of our rights or the rights of any third party; (6) to respond to judicial process and provide information to law enforcement agencies or in connection with an investigation on matters related to public safety, as permitted by law, or otherwise as required by law; and (7) if our company or substantially all of its assets are acquired, your personal information may be one of the transferred assets."
Of course, I sent an email requesting that they delete my information from their systems, because I do not want it to be caught up in a hacker's pastebin dump, and I do not want my information sold or otherwise given out to others, who may then resell it down the line.

They responded by saying that they are required to keep my info, by the IRS.  That feels about as slimy as it gets, that they're taking advantage of an IRS rule, to give themselves the right to use my personal information to resell, without my consent.

Need another reason to not trust them?  They are registered in Florida under a separate entity, Everglades Direct, Inc., as a foreign corporation (Minnesota), registering their company name (efileforbusiness) under a separate entity, Complyright Distribution Services, Inc., with the same officers as Everglades Direct, Inc.  They also have registered (and operate) several other businesses including GNeil and Holiday Manor.  Once they have your info, they will circulate your info among their various companies, and so on -- try tracking down your personal information once that happens.

I am pissed off like hell; I have a notion to talk to her CPA, the person who recommended using them.

No comments: