At eight in the morning, Lidia's phone showed a different screen when she opened the neighbourhood app. She used it to find out whether the municipal market had surplus food, book a place at the bicycle repair workshop, and report a broken streetlight. The update said that, from that day onward, the app would share aggregated location data to “improve nearby services.” Under three dense paragraphs there was one blue button: “Accept and continue.” There was no equally visible second option, no account of what would change in practice, and no time to review it before the consumer group meeting. Lidia closed the screen. When she returned that afternoon, the notice still filled the app. The choice looked small, but it shaped access to things that had become part of her routine.

It is tempting to call any tap that dismisses a notice consent. Yet accepting is not the same as being able to decide. A decision requires understanding what is proposed, comparing the alternatives, and declining without losing something essential. When a neighbourhood platform turns those three steps into a screen that blocks access, it is not checking a preference; it is taking advantage of a dependency created by its own usefulness. The question is not whether aggregated data can offer valuable insight. It can. The question is what relationship is formed with the people who make that data possible when the only workable response is to carry on.

A broad phrase does not explain a specific change#

“Aggregated location” sounds careful because it stops us picturing a precise dot on a map. But no one can assess a proposal from a reassuring label. People need to know what is collected, how often, at what level of precision, who receives the result, and what decisions will be made with it. Nor is using information for a three-month trial to organise community resources the same as adding it to an open-ended arrangement with no review date.

“Aggregated location” sounds careful because it stops us picturing a precise dot on a map.

A useful explanation can fit on a short card, but it must be written as though someone is about to make a decision, not as though it is a defence against a future complaint. For example: “Once a day, the app will count how many enquiries were made in each neighbourhood. It will not keep individual routes or use location for advertising. The municipal mobility team will see the report for six months to decide where to place two repair points. You can keep using bookings and alerts without taking part. We will review this measure in October.” That account gives people something to discuss. “Improve your experience,” by contrast, gives them no reasonable basis either for agreement or for challenge.

Notice design distributes power as well#

A prominent button and a hidden exit are not decorative details. They instruct someone to carry the effort. If declining means opening three menus, repeating the choice every week, or losing market bookings, the organisation has transferred the burden to the person asking for a boundary. It can later say it offered an option, even when that option is costly, confusing, or socially difficult to use. Measuring consent by the share of favourable clicks in that setting creates a misleading number: it measures design pressure, not informed agreement.

Timing matters too. A change announced while the application is locked does not leave room for comparison. A resident who needs an after-school support place that afternoon does not have the same freedom as someone who can delete the app and wait for a week. A more honest practice gives notice before the change takes effect, preserves the previous version for a defined period, and provides a comparison page. The comparison should show what is added, what stops happening, what remains the same, and what follows from each choice.

An alternative matters only when it is equivalent#

Offering “do not share” is not enough if the consequence is exclusion. In Lidia's app, an equivalent alternative need not duplicate every experimental feature, but it must allow people to book, receive alerts, and communicate with the neighbourhood with the same dignity and reasonable effort. It might be a setting that switches off participation in aggregated reports, a web route with no geolocation, or a phone channel given the same priority for particular tasks. What matters is that it does not become a slow queue or a test of patience.

That equivalence should be tested through real situations rather than a feature list. Can a person book a slot from an older phone? Do they receive a water-outage alert with the same notice? Must they explain repeatedly why they do not want to share their location? Does the person answering know how to resolve the case without improvising? They also prevent a common trap: presenting a setting as voluntary when the alternative path requires knowledge, devices, or time that not everyone has.

From an individual tap to a shared conversation#

One person's location may look like an individual datum, but patterns made from many people can describe an entire neighbourhood. They may reveal which streets are felt to be unsafe, which parks are used less, where care journeys are concentrated, or which areas sit outside local services. Even if a report names no one, its effects may be distributed unevenly. That is why a community app should not limit deliberation to each personal screen. It should open a conversation about purpose, risks, and evaluation criteria before the change becomes routine.

That conversation does not require an endless assembly or an inaccessible technical consultation. It can begin by publishing a proposal with examples: the exact data set, two permitted uses, two prohibited uses, the recipient, the duration, and the mechanism for stopping the trial. A follow-up group including users, service staff, and neighbourhood representatives can then examine questions and exceptions. Participation becomes more credible when it leaves a trace: which observation was received, what changed, what was rejected, and why. A comment collected without an answer resembles too closely a button that merely appears to offer a choice.

Recording a decision without turning it into surveillance#

A consent record can help show which version was offered and when a choice was made, but it can create a new problem if it stores more than is needed. This case does not require retaining the location of a person who does not participate, or an intimate explanation for their refusal. It is enough to record the proposal version, the selected option, the date, the channel, and the ability to change one's mind. The record must be accessible to the person: they should be able to inspect it, correct an error, and withdraw participation without starting an argument.

Periodic review completes the cycle. At the end of the trial, the team should publish what it did with the information, what outcome it sought, what effects it observed, and whether the measure will continue, change, or end. This review need not be turned into publicity. It is more useful to acknowledge that a hypothesis was not confirmed or that an alternative proved inadequate. Trust does not depend on every initiative succeeding; it depends on being able to correct course without hiding harm or blaming the person who pointed it out.

The next screen can open a choice#

Lidia did not need the app to stop improving. She needed to know what was being proposed and to retain the ability to use familiar services if she chose not to take part. When she raised the question at the consumer group meeting, other people described different concerns: one did not want their routines to contribute to commercial profiles; another wanted to help plan safer cycling routes; several wanted to decide later. The right response was not to gather them so they could press the same button with greater enthusiasm. It was to redesign the proposal.

The next update can begin with a clear comparison, a genuine decision date, and two routes that work. It can explain what information is aggregated, what it will be used for, who will see it, and when it will be deleted. It can invite the community to assess the trial against visible criteria and allow consent to be withdrawn without punishment. These are modest process changes, but they transform the underlying message: a neighbourhood is not a passive source of data, and its residents are not obstacles to efficiency. They are the people who know the needs the application says it wants to serve.

Before approving a similar update, it is worth asking four simple questions: Can I explain the change in my own words? Can I keep using what is essential if I say no? Do I have time and an accessible channel to decide? Do I know how to alter or withdraw my choice? If any answer is no, another click is not what is missing. What is missing is a decision that has not yet been made possible.