What Is a Personal Data Pod?

Right now, your data doesn't live in one place, it lives in whoever's app you happened to use. Your photos sit in one company's database, your contacts in another's, your medical history in a third's, each reachable only through that company's app, on that company's terms. Switching to a different app usually means starting over, or hoping there's an export button that actually works. You don't have one place you control; you have a scatter of copies, each owned by whoever stored it.

A personal data pod inverts that. It's a personal store, think of it as a private, permissioned vault: that holds your data in one place you choose, instead of one place each app vendor chose for you. Apps don't get to keep their own copy anymore; they ask your pod for permission to read or write specific parts of it, and you grant or revoke that permission. Add a new app, drop an old one, and nothing needs to migrate, because the data never left your pod in the first place.

Where the idea comes from

This is not a new idea, and it isn't ours. The personal data pod comes from Solid, a specification designed by Tim Berners-Lee, the person who invented the World Wide Web, starting around 2015 at MIT. Solid is developed commercially through Inrupt, the company he co-founded to build it, and specified openly through the W3C Solid Community Group, which publishes the actual technical documents. It is not a lab experiment: the BBC, the UK's NHS, and the Flanders regional government in Belgium have all run real Solid deployments or pilots, entirely independent of any vendor pushing the idea as a pitch.

In Solid's vocabulary, this personal store is called a Pod (short for Personal Online Datastore), and it's one piece of a larger specification. Identity in Solid is handled by WebID. A web address that, when fetched, returns a document describing who you are. Read and write mechanics run over LDP, the Linked Data Platform. Permissions are governed by WAC/ACL (Web Access Control), a small vocabulary for saying which identities may read, write, or append to a given resource. And the data itself is represented as RDF, typically written in Turtle, formats designed so that data described this way is interoperable across any app that speaks the same vocabulary, not locked to whichever app wrote it first. The full protocol page, Solid Protocol, walks through how these pieces fit together; this page only needs you to know that a pod is one part of that larger picture, not the whole of it.

How it works, in plain terms

Mechanically, a pod behaves less like a hard drive an app reads from and more like a landlord an app has to ask. Say you use a to-do app and a note-taking app, and both want access to a shared "projects" list. Under the old model, each app keeps its own copy of that list, and the two copies drift apart the moment you edit one and not the other. With a pod, the projects list lives in exactly one place, your pod, and both apps ask it for permission to read or write that specific resource. You can grant one app read-only access and the other read-write access, or revoke either at any time, and the data underneath never moves. Swap the to-do app for a different one next year, and the switch is instant: point the new app at the same pod, grant it permission, and every past record is already there. Nothing to export, nothing to import, nothing to lose in translation. The mechanism behind this, checking who's allowed to touch what before an app ever gets to the data, is what LDP and WAC actually do under the hood; this page keeps that at the level of a working mental model rather than a spec, because both terms get their own full explanation elsewhere.

The practical upshot is that your data stops being hostage to any single app's business model. If a service shuts down, gets acquired, or changes its terms in a way you don't like, you haven't lost anything: the pod was never the app's to take with it.

Keep reading

What Is a Personal Data Pod? · Solidus