Collect only what delivers a service, then strip identifiers, aggregate early, and publish understandable summaries. Replace images with counts, meshes, or heatmaps. Offer a public changelog for firmware and datasets. Explain what exists, what doesn’t, and how to appeal. Plain language beats legal fog every single time.
Public space complicates consent, yet options still exist. Provide opt-out zones, pause buttons, and QR links describing sensors nearby. For participation features—surveys, Wi‑Fi sign-in—use revocable consent, per-purpose toggles, and no dark patterns. Partner with community groups to test comprehension before deployment, especially across languages and literacy levels.
Write RFPs that reward transparency: public APIs, documentation, and local repair networks. Insist on privacy-by-design, accessibility certification, and open file formats. Score vendors on governance maturity as much as hardware specs. Pilot small, measure openly, and scale only when communities confirm benefits outweigh friction and clutter.
Maintenance is a public promise. Schedule cleanings like transit timetables, rotate spare modules, and track graffiti turnaround times. Train crews to check accessibility features, tactile paths, and audio jacks. When outages happen, kiosks should degrade gracefully with paper maps, printed notices, and a visible repair countdown.
Plan removal the day you install. Use standardized fasteners, easy-to-recycle metals, and secure data wipes verified by third parties. Offer component buybacks, donate refurbished parts to training programs, and publish decommissioning reports that tally waste avoided, carbon saved, and lessons that inform the next generation.