"The affiliate sites have a responsibility to their own users to inform them that certain actions will result in Facebook receiving information, even if they do not have a Facebook account," wrote CA researcher Stefan Berteau in one of his notes about Beacon.
Although the CA findings have been broadly reported for a week now, many Beacon partners contacted said they were either unaware of them or simply declined to address them.
Some partners even declined to say whether they have turned on Beacon on their sites or not, and what actions they track or intend to track. That's the case of shoes site Zappos.com and gaming site GameFly.com.
Zappos.com provided an e-mailed prepared statement saying it has been "actively working" with Facebook on Beacon and that it has made and will make changes based on customer feedback. It didn't reply to several requests for clarification on the changes or on the status of its Beacon implementation.
Without addressing any questions specifically, GameFly.com e-mailed a statement saying the company values its members' privacy and security, and understands these issues are important. "We applaud Facebook's actions to make Beacon an opt-in feature as well as the introduction of a privacy control to turn Beacon off," the statement reads.
Meanwhile, the following partners were contacted and either didn't reply or declined to comment on the record about Beacon: Fandango, AllPosters.com, Blockbuster, ExpoTV, Hotwire, Joost, Live Nation, The Knot, Yelp, National Basketball Association, (RED), Conde Nast's Epicurious and WeddingChannel.com.
Among those that did offer comment, one of the most forthcoming was Overstock.com. The online retailer turned off Beacon on November 21, said Judd Bagley, a spokesman for the company. "We have a specific threshold that the program needs to meet, in terms of privacy, before we'll be turning it back on," he said via e-mail. Until Beacon supports an opt-in both on Overstock as well as Facebook, Overstock won't begin using it again, he said.
When contacted last week, Overstock was just learning about the CA findings, Bagley said, adding that previously the company wasn't aware that Beacon had the ability to capture the actions of non-Facebook users.
Another company distancing itself from Beacon is online retailer Bluefly, which hasn't deployed Beacon and isn't committed to it, said a spokeswoman for the company. She said the company is analyzing the program to decide whether to move forward with it due to privacy concerns.
On the other end of the spectrum are partners that report satisfaction with Beacon so far. Jim Greer, CEO of Kongregate.com, a gaming site, turned Beacon on about a month ago to track one action -- games people play -- and has received mostly positive feedback from its members, Greer said in a phone interview.
Still, since a small percentage of users objected to the Beacon broadcasts, Kongregate.com now gives its registered users the option to turn Beacon off by modifying its privacy preferences accordingly, Greer said. In the future, Kongregate may enable the reporting of other actions besides the game a user played, such as the achievement of a high score, but it is keeping it simple for now, he said.