Bossware Tools Share Worker Data With Tech Firms

Worker Surveillance Is Becoming a Data Business

The remote work era made employee monitoring software easier for companies to justify. What started as a way to keep an eye on people working from home is now becoming more normal inside office spaces, too.

A Northeastern University study suggests that data gathered through employee monitoring tools is not always staying between workers and their employers. Instead, that information is being shared with major third parties, including Google, Facebook, and Microsoft.

The concern is not just that employers can collect workplace activity data. The bigger issue is that this data may leave the company environment entirely and move into broader third-party systems. For workers, that means information tied to their identity, job, device, location, and online activity may travel much farther than they realize.

What Bossware Tools Can Track

The study looked at nine employee monitoring platforms often described as “bossware.” These tools are designed to help employers monitor worker activity, but the kinds of data they can collect go well beyond simple time tracking.

The platforms tested were:

Apploye
Deputy
Desklong
Hubstaff
Monitask
Buddy Punch
Time Doctor 2
Vericlock
When I Work

These tools can monitor workplace activity through keystrokes, mouse clicks, location, device information, and web visits. In plain terms, that means they can capture signals about how someone works, where they are, what device they use, and which sites they visit.

That kind of tracking may be framed as productivity management. But once the data begins flowing outside the employer and the monitoring platform, it becomes part of a much wider privacy issue.

Worker Data Shared With Tech and Advertising Companies

The researchers found that all nine platforms shared workers’ personal details with tech and advertising companies. The shared details included names, email addresses, and employer information.

Employee activity data was also sent to more than 145 domains. Those domains included Google, Facebook, LinkedIn, Yandex, and AppLovin.

That finding changes the way workplace monitoring has to be understood. It is not simply a private arrangement between a worker and an employer. It can become part of a third-party tracking network, where data collected at work moves into systems workers may not know about and may not be able to control.

Why Employee Monitoring Raises Workplace Privacy Concerns

A professor at Northeastern’s Khoury College of Computer Sciences and one of the study’s co-authors said the research shows how limited privacy protection can be for workers in the workplace.

The point is simple but uncomfortable: workplace data collection does not necessarily stop at the employer. Even if a company adopts monitoring software for internal reasons, the information gathered through that software may be shared outside the company.

That creates a messy privacy problem. Workers may understand that their employer is monitoring activity. But they may not understand that personal details and activity data can also be shared with outside companies involved in technology, advertising, or third-party tracking.

Location Tracking Can Follow Workers Beyond the Desk

The study also found that a third of the apps offered precise location tracking, including when the apps were running in the background.

That detail matters because location tracking can shift workplace monitoring into something more invasive. It is one thing to monitor activity during a work session. It is another to use software that can follow workers beyond their desks.

The warning here is that monitoring tools may not only observe work. In some cases, they can also create a broader picture of where a worker is, even when the app is not actively being used on-screen.

Employee Data May Enter a Wider Tracking Network

The larger concern is that employee data may not remain inside the expected circle of worker, employer, and monitoring app.

Instead, the data can move into a broader third-party tracking network. Once that happens, workers may have limited control over where the information goes, how long it remains available, or how it is used.

This is where bossware becomes more than a workplace management tool. It becomes part of a data pipeline. And for workers, that pipeline may include personal details, workplace identifiers, activity signals, and location data.

Worker Data Is Becoming AI Fuel

The findings are especially concerning because AI companies have recently shown interest in collecting human behavior data for training material.

Meta has reportedly faced internal backlash over software that records employee computer activity to train AI agents, while the company recently cut about 10% of its workforce.

Reports from India have also described workers wearing cameras or filming everyday physical tasks for AI and robotics training. These cases are different from bossware data sharing, but they point toward the same bigger issue: tech companies are collecting human data connected to work, behavior, and physical tasks.

Bossware data sharing and AI training data are not the same thing. But they overlap in one important way: both involve human activity becoming valuable digital material.

Employee monitoring tools collect data about how people work. AI systems need large amounts of human behavior data to improve agents, robotics, and other tools. When workplace data moves beyond the employer, it raises questions about whether workers fully understand how their activity may be used.

That is the uncomfortable part. A worker may think monitoring is about time, productivity, or attendance. But the data collected through those tools can become useful to much larger systems outside the workplace itself.

Why This Matters for Employees and Employers

For employees, the issue is control. Personal details, employer information, device data, web activity, and location signals can all be sensitive, especially when they are collected in a workplace setting.

For employers, the issue is responsibility. Using monitoring tools may come with privacy risks that go beyond internal policy. If employee data is being shared with outside companies, the employer’s choice of software can affect far more than productivity tracking.

And for the broader tech industry, the issue is transparency. Worker surveillance is no longer just about watching remote employees. It is becoming tied to advertising systems, third-party domains, and the growing demand for human behavior data.