The Real Cost of Free Email: What You Pay When You Do Not Pay
Gmail has 1.8 billion users. Outlook has 400 million. Yahoo Mail has 225 million. None of them charge for personal use. So how do they make money?
The short answer: your data. The long answer is more nuanced — and less alarming than the privacy community sometimes suggests.
What Gmail actually does with your email
Google stopped scanning email content for ad targeting in 2017. This is important context that often gets lost in privacy discussions. What Google still does:
- Automated content scanning for features — Smart Reply, Smart Compose, flight tracking, package tracking, event detection. No human reads your email. Machine learning models process it.
- Metadata collection — Who you email, when, how often, from what device, from what IP address. This metadata feeds Google's advertising profile of you, even though the email content does not.
- Ads in the Gmail interface — Ads appear in the Promotions tab. They are targeted based on your Google profile (search history, YouTube, Maps, etc.), not on email content specifically.
- Government compliance — Google complies with valid legal requests (warrants, subpoenas) and provides email data to law enforcement when legally required.
What Outlook does
- Feature scanning — Similar to Gmail: Focused Inbox, suggested replies, event extraction
- Telemetry — The Outlook app collects usage data, crash reports, and feature interaction metrics
- Microsoft 365 commercial — Business accounts have contractual limits on data use. Consumer accounts have fewer protections.
What Yahoo does
- Content scanning for ads — Yahoo (Verizon Media) is the most aggressive of the three. They scan email content to deliver targeted advertising in the Yahoo Mail interface.
- Data sharing — Yahoo's privacy policy explicitly allows sharing data with Verizon and advertising partners.
For a detailed breakdown, see What Email Providers Don't Tell You About Your Privacy.
The hidden costs
1. Vendor lock-in
Your Gmail address is tied to Google. Your Outlook address is tied to Microsoft. If you ever want to leave, every service, contact, and account linked to that address stays behind. You cannot take yourname@gmail.com with you.
With a custom domain (you@yourdomain.com), you can switch providers without changing your address. The domain is yours regardless of which service delivers the email.
2. The attention tax
Free email providers make money when you spend time in the app. Gmail's Promotions tab, Outlook's Focused Inbox — these features keep you engaged with marketing email rather than helping you eliminate it. The business model is not aligned with inbox zero.
3. Tracking pixels work
When a marketer sends you an email with a tracking pixel, your provider loads it (unless you disabled remote images). The marketer knows you opened the email, when, and from what device. Free email providers do not block this by default. Apple Mail is the exception with Mail Privacy Protection.
4. Your email data trains AI
All major providers use aggregated email data to improve their machine learning models. Your emails contribute to training data for spam filters, language models, and feature improvements. The terms of service allow this.
The spectrum of privacy
Not everyone needs maximum privacy. Here is the spectrum:
| Level | Approach | Cost |
|---|---|---|
| I do not care | Gmail/Outlook as-is | $0 |
| Practical privacy | Gmail + aliases + disable remote images | $0-5/mo |
| Serious privacy | Custom domain + alias service + privacy-focused provider | $5-20/mo |
| Maximum privacy | ProtonMail + Tor + self-hosted domain | $5-50/mo + technical skill |
Most people belong in the "practical privacy" range. Use a free provider for convenience, but add layers where they matter: aliases to limit data exposure, custom domains to avoid lock-in, and tracking protection to stop surveillance marketing.
The goal is not to be invisible. It is to be in control of who knows what about you.
