
SUMMARY: Our governments should not be requiring us to provide personal identity information to a private, for-profit company in order to access government programs and information. Yet, that’s what’s happening. It’s a dangerous example of privatization that is redundant and costs taxpayers money, and, in this case, their privacy. I urge you to boycott this if you can and to contact your elected officials to protest. Furthermore, the U.S. needs to better regulate the collection and use of our personal data by the private sector, as Europe has done since 2018.
(Note: If you find a post too long to read, please just skim the bolded portions. Thanks for reading my blog!)
(Note: Please follow me and see my blog posts on Bluesky at: @jalippitt.bsky.social. Thanks!)
Providing citizens access to government agencies and information is an essential government function. Verifying people’s identity for such access shouldn’t be contracted out to a for-profit company. Yet, that’s what the federal government is doing.
Since 2016, some federal agencies have contracted out identity verification for access to their programs and databases to ID.me. ID.me is a hundred-million-dollar, for-profit company. Recently, Medicare and the U.S. Treasury have been added to the list of ID.me users that includes the IRS, Social Security, and Veterans Affairs (which requires it to access family members’ old military records that are public information). As-of 10/29/26, the U.S. Treasury Department will require use of ID.me to access account information. ID.me has contracts for identity verification with 20 federal agencies, as well as at least 50 state agencies, notably those providing unemployment benefits. [1]
ID.me requires you to provide your date of birth, Social Security number, a photograph of your driver’s license or passport, and a picture of your face taken with your cellphone. This puts a biometric facial recognition image in the hands of a private company with little oversight or control over how it uses the data. ID.me also provides identity verification services to dozens of private companies, including Apple, Amazon, Bank of America, Ford, and JPMorgan Chase. ID.me claims it doesn’t sell data and that it makes its money by charging fees for its services, but I find it hard to believe that it isn’t finding ways to monetize the data it holds on hundreds of millions of Americans.
I urge you to resist by refusing to use ID.me if you can. I also urge you to contact your U.S. Representative and Senators to ask them to block the use of ID.me (or at least the expansion of its use). (You can find contact information for your US Representative at http://www.house.gov/representatives/find/ and for your US Senators at http://www.senate.gov/general/contact_information/senators_cfm.cfm.)
If a login ID and password, along with verification by email, text, or phone message, is secure enough for our access to our bank and other financial accounts, it’s good enough for access to Medicare, Social Security, and other federal data and programs. Furthermore, you can apply for and collect Social Security benefits without going through ID.me and you can sign up for Medicare without it. So, why should it be required to access one’s information at Social Security, Medicare, or the U.S. Treasury? There has been no demonstrated need for this additional security.
Moreover, the U.S. government has its own very similar enhanced security program called Login.gov. So, ID.me is redundant. (Note: I don’t even want to use Login.gov as it puts a biometric facial recognition image in the hands of the Trump regime and I don’t trust how it might use such data.)
ID.me has persuaded government agencies to use its ID verification services through aggressive lobbying and marketing. For its unnecessary services, ID.me has, to date, billed the government (i.e., taxpayers) over $1 billion! ID.me is worse than unnecessary and redundant, it’s another example of privatization taking (stealing?) money from taxpayers. Moreover, once in place, it’s very hard to terminate its use and, eventually, the government may just give in and drop its own capability to perform identity verification. This would mean the end of the historically relatively easy and secure access of citizens to government agencies and programs without giving sensitive personal data to a private entity.
It’s bad enough that for-profit businesses are capturing our personal identity information whenever we interact with them directly. They capitalize on it by using it to tailor their marketing and pricing (aka surveillance pricing; see more here). They also make money by selling our data or sharing it with others. They capture our data through preferred customer and frequent flyer programs, through our activity on social media platforms, through product warranty and purchase registrations, etc.
There should be better government regulation of personal data collection and use by the private sector. For example, regulations should require disclosure of when and what personal data companies are capturing, and how they’re using it. We should have better options for opting out of personal data collection and use, and the ability to require companies to delete our data. Europe has done a much better job than the U.S. of regulating personal data collection and use through its 2018 General Data Protection Regulation (GDPR). It protects individuals when their data is captured and used by private and public entities. There’s a nice overview of it here and more on its legal background here.
What for-profit companies are doing when we interact with them is egregious, but the public sector – our government – should not be abetting the capture, use, and abuse of our personal data by requiring us to provide personal identity information to a for-profit company in order to access government programs and data. However, this is what’s happening with governments’ use of ID.me for login identity verification.
I urge you to contact your U.S. Representative and Senators and ask them to oppose the use of ID.me by the federal government. (See above for links to find contact information for your US Representative and Senators.) You can also contact state officials – your Governor and legislators – and ask them to oppose the use of ID.me at the state level.
For lots of good news see Jess Craven’s Chop Wood Carry Water blog’s most recent good news Sunday post here.
[1] Kuttner, R., 10/6/26, “Identity crisis,” The American Prospect (https://prospect.org/2026/10/06/identity-crisis-federal-government-access-id-me/)




































































