My question is: how do I verify employee status, especially being careful to protect identity and without demanding too much information from users? What is the usual modus operandi in this niche?
EDIT: Since you folk are the target demographic, you might also tell me what kind of verification you would prefer. In this particular application I do not need to collect any sensitive information, but I would need to verify employee status.
> At Glassdoor, we aim to verify as much of our data as possible. Considering the reality of our digital age, however, we're unable to fully confirm our users' identities, the truthfulness of their contributions, or their employment status.
> Through our Terms of Use, we do require users to certify their employee relationships to companies when posting any content. We also require email verification from a permanent, active email address, or a valid social networking account.
https://help.glassdoor.com/s/article/Does-Glassdoor-verify-e...
So, they don't. But if you do require verification, using an employee email address is probably the only realistic option.
If you really need to verify that the user is an employee, validating an email address at the proper domain seems to be the best option, IMO. If you don't want the privacy implications of storing the address, just don't keep it around (make sure your logs don't have it either).
I do not sign up at such sites. I do not make relevant decisions based on such websites.
I would be absolutely OK with complete lack of verification.
Again, user perspective: You will never get a grasp of the exact work culture at some potential employer by reading subjective comments. As a user i simply take in hints of red flags which i would validate or negate personally by having a chat with some of the folks.
And Blind only verifies your employee email on signup, there's no renewal of that verification - you can leave your employer and still retain your original access.
Email verification is the simplest, employer email addresses are generally considered public info, and it also helps detect/deter bots. OTOH, it goes through the employer's email system, so your boss could know that you just signed up for Glassdoor/Blind/etc.
Just filter obvious spam and hide reviews from accounts that give excessive amounts of reviews.
If you have large user base, you could do some kind of randomized peer review of reviews, so instead of asking for review to access some "free" feature you ask user to check if they think this review is helpful/good quality.
The only thing I’ve seen on this is an email address “at the company”, but that isn’t really verifying anything and certainly creates potential for “outing” the employee’s interest in whatever you’re doing.