Commonplace

← Back to Commonplace

Link: Receiving other people’s email

Today, Gmail is the most popular email service in the world, which has created a seemingly limitless number of what I collectively refer to as the Other Sara Morrisons: people who share my name and who, for whatever reason, enter my Gmail address when they mean to use their own. Their frequent invasions of my inbox have made me realize how much trust many of us put in a system that wasn’t designed to do some of the things we’ve come to use it for.

Email isn’t just a communication tool; it’s also an identifier and a security measure. Companies use it to create profiles of you when you start accounts with them and it often doubles as your username. Your email can also serve as your account recovery tool when you forget your username or password. All of this from something that doesn’t require you to verify your ID and that most people get to use for free, provided by a giant corporation that wants to harvest our data. In premium email provider Hey’s words, email is the “skeleton key to your digital life.” Well, I have a skeleton key to a lot of other people’s digital lives, too.

Emails sent to me that were meant for Other Sara Morrisons have given me a good deal of insight into — and a disturbing amount of access to — the lives of the many people who share my name. I know when and where their medical appointments are. I know when they give birth and am kept apprised about what their child ate and how often she pooped at daycare. I know when and where they’re going on vacation, what car they’re renting, and I get tickets to the theme parks they’ll visit when they get there.

I’ve been part of a monthslong job hunting process for one Other Sara Morrison and received the renewed occupational license for another … twice. I know their property tax payment issues. I know their addresses.

As someone who had an extremely guessable Gmail address, this is something I can relate to.

It’s amazing how many services still don’t require users to confirm their email addresses before creating accounts and purchasing goods or services. I’ve received order confirmations for everything from pizzas to car rentals all around the world, and endless accounts for other people using my email address.

And, despite my desire to completely rid myself of my personal Gmail account, I’ve come to realise I can never fully delete it as that could open up the possibility of identity theft.

In future, this could be an issue that masked email addresses solves, but widespread adoption of that will take a while.