I've recently had to learn about fiduciary duty, and it struck me that this seems to apply to software developers. So my questions are
- Am I right in thinking that a developer has a fiduciary duty to the user?
- If so, what does this mean for a lot of software development organisations with business models that depend on software that does not entirely respect the interests of its users. For instance, would the developer of an ad-blocker who takes money from advertisers for allowing their adverts to bypass his block be considered in breach of this duty?
The rest of this post will explain my reasoning that this fiduciary relationship exists. Suppose that Alice writes some software and sells it to Bob to use. I happen to live in the UK, but from what I have read the same legal framework exists in many countries.
The Wex legal dicationary says:
Fiduciary duty is imposed whenever confidence is reposed on one side in a contractual relationship, so as to allow that side to exert influence and dominance over the other.
Bob is clearly reposing confidence in Alice here. Alice could have included hidden functionality in the program which would work to Bob's detriment. Bob has no practical way of finding out if Alice has done so. In effect Alice has been given control of a part of Bob's computer. In addition to the physical resources, Alice also has indirect access to information stored on the computer that Bob may wish to keep confidential. Alice has "influence and dominance" over those parts of the computer that her program can access.
The Free Dictionary says:
Courts have neither defined the particular circumstances of fiduciary relationships nor set any limitations on circumstances from which such an alliance may arise. [...]
A fiduciary relationship extends to every possible case in which one side places confidence in the other and such confidence is accepted; this causes dependence by the one individual and influence by the other.
I've seen lists of fiduciary relationships, but it is plain that all of these are illustrative rather than complete. It may be that a court has never found that a software developer has a fiduciary duty (Google hasn't turned up any), but there doesn't seem to be an obstacle to such a finding.
Looking at the second paragraph, it is clear that Bob has placed confidence in Alice. It is not necessarily clear that Alice has accepted such a relationship with Bob in particular, but it seems to me that
- By offering her program for sale, Alice has accepted a duty to her customers, and
- That this duty is a fiduciary one by the nature of the trust placed in her by her customers.
When Alice wrote the program she was unaware that Bob in particular was going to run it, so it would not be possible for Alice to know exactly what the interests of Bob are under all circumstances. However she will still have a clear understanding of the general interests of her users as a class, and she has a duty to act in those interests rather than her own.