The New York Civil Liberties Union has issued a statement expressing privacy concerns about LinkNYC, New York City’s free public Wi-Fi that officially launched last month. The free service sees old phone booths replaced with LinkNYC hubs that act as wireless routers that provide fiber Internet to anyone with a wireless device. LinkNYC is offered through a partnership between the city and CityBridge, a consortium of companies behind the LinkNYC system.

In the statement issued by the NYCLU, the civil liberties organization raised privacy concerns on two fronts. First, it says that because users must submit their email addresses to use the service, and since those addresses are retained by CityBridge along with the user’s browsing history, LinkNYC is an attractive target for hackers looking to steal personal information.

“CityBridge’s privacy policy only offers to make ‘reasonable efforts’ to clear out this massive amount of personally identifiable user information, and even then, only if there have been 12 months of user inactivity,” the NYCLU said. “New Yorkers who use LinkNYC regularly will have their personally identifiable information stored for a lifetime and beyond.”

The second serious concern NYCLU has with the LinkNYC is that it is open to “unwarranted NYPD surveillance.”

“New Yorkers’ private online activities shouldn’t be used to create a massive database that’s within the ready grasp of the NYPD,” Donna Lieberman, executive director of the NYCLU, said in the statement. “Free public Wi-Fi can be an invaluable resource for this city, but New Yorkers need to know there are too many strings attached.”

Addressing the privacy and hacking concerns Natalie Grybauskas, a spokesperson for New York City Mayor Bill de Blasio’s office, told the Huffington Post “New York City and CityBridge have created customer-first privacy protections to ensure our users’ personal information stays that way–personal. We will continue to work to ensure legitimate concerns are addressed.”

As for questions regarding surveillance of users by law enforcement, Jen Hensley, general manager of LinkNYC, told Huffington Post, ”CityBridge would require a subpoena or similar lawful request before sharing any data with the NYPD or law enforcement, and we will make every effort to communicate government requests to impacted users.”