AccuWeather for iOS Sending Location Data to Monetization Company Even When Location Sharing is Off [Updated]

Popular and well-known iOS weather app AccuWeather has been caught collecting and sharing user location data even when location sharing permissions are turned off, according to a blog post recently shared by security researcher Will Strafach.

According to Strafach, AccuWeather was partnering with data monetization firm Reveal Mobile to collect GPS coordinates, including speed and altitude, the name and BSSID of a user's Wi-Fi router, and whether a device has Bluetooth on and off, all of which was available to Reveal Mobile when location services were enabled.

accuweatherbackgroundaccess
With location services disabled, AccuWeather was still sending the Wi-Fi router name and BSSID, which still offered Reveal Mobile location data.

During a testing period of 36 hours, specifically while the AccuWeather application was not in the foreground, my test iPhone (located on a desk in an office building) sent the above information to RevealMobile a total of 16 times, occuring roughly once every few hours.

Reval Mobile is a firm that uses location data to gather information on a user's home, work, and frequently visited locations, pairing that data with demographic targeting criteria to allow retailers to deliver targeted ads. From the company's website:

By expanding the use case of location data to pre- and post-shopping experiences, entirely new possibilities open up for online and offline retailers. The value lies in understanding the path of a consumer and where they go throughout the day. Traveling from home to work to retail to soccer practice to dinner is vital to knowing the customer, and represents the new opportunity of mobile location data.

In response to Strafach's blog post, Reveal Mobile says the data it collects is anonymized and grouped into audience segments. "We offer no product or service that permits anyone to see an individual device's location data," reads a statement on the Reveal Mobile website. The company also says it does not reverse engineer a device's location when location sharing is turned off.

We do not attempt to reverse engineer a device's location based upon other data signals like Bluetooth when location services are disabled. In looking at our current SDK's behavior, we see how that can be misconstrued. In response to that, we're releasing a new version of our SDK which will no longer send any data points which could be used to infer location when someone opts out of location sharing. We do collect IP address, but do not use this data to determine location, as covered in our privacy policy.

AccuWeather vice president of emerging platforms David Mitchell told ZDNet that AccuWeather will use data through Reveal Mobile for "audience segmentation and analysis, to build a greater audience understanding and create more contextually relevant and helpful experiences for users and for advertiser."

Following Strafach's discovery, many people have been uninstalling the AccuWeather app, and given the wealth of weather apps available in the App Store, this is not surprising. AccuWeather does not apparently have plans to end its relationship with Reveal Mobile, so users may want to find another weather app.

Update: AccuWeather and Reveal Mobile have provided a joint statement on the issue:

Despite stories to the contrary from sources not connected to the actual information, if a user opts out of location tracking on AccuWeather, no GPS coordinates are collected or passed without further opt-in permission from the user.

Other data, such as Wi-Fi network information that is not user information, was for a short period available on the Reveal SDK, but was unused by AccuWeather. In fact, AccuWeather was unaware the data was available to it. Accordingly, at no point was the data used by AccuWeather for any purpose.

AccuWeather and Reveal Mobile are committed to following the standards and best practices of the industry. We also recognize this is a quickly evolving field and what is best practice one day may change the next. Accordingly, we work to update our practices regularly.

To avoid any further misinterpretation, Reveal is updating its SDK and pushing out new versions of the SDK in the next 24 hours, with the iOS update going live tonight. The end result should be that zero data is transmitted back to Reveal Mobile when someone opts out of location sharing. In the meanwhile, AccuWeather had already disabled the SDK, pending that update.

Reveal has stated that the SDK could be misconstrued, and they assure that no reverse engineering of locations was ever conducted by any information they gathered, nor was that the intent.

AccuWeather will work with Reveal to restore the SDK when it has been amended and will continue to update its ULAs to be transparent and current with evolving standards. AccuWeather and Reveal continue to enhance methods for handling data and strive to provide superior, seamless, and secure user experiences.

We are grateful to have a supportive community that highlights areas where we can optimize and be more transparent.

Update 2: AccuWeather has updated its app to remove the Reveal Mobile SDK.

Top Rated Comments

farewelwilliams Avatar
55 months ago
"The value lies in understanding the path of a consumer and where they go throughout the day."

no means no.
Score: 72 Votes (Like | Disagree)
826317 Avatar
55 months ago
Disgusting business practice. It's so difficult to find genuinely honest businesses these days..
Score: 50 Votes (Like | Disagree)
camnchar Avatar
55 months ago
Repeat after me: “if you don’t pay for the product, you ARE the product”
Score: 50 Votes (Like | Disagree)
Munky Avatar
55 months ago
This was my go to weather app. Any suggestions for a replacement?

App store reviews are already getting hit hard.
Wunderground.
Score: 24 Votes (Like | Disagree)
now i see it Avatar
55 months ago
AccuWeather does not apparently have plans to end its relationship with Reveal Mobile....
But we have plans for AccuTracker. Long press/click X.
Score: 23 Votes (Like | Disagree)
maflynn Avatar
55 months ago
Well, looks like Accuweather is getting deleted off my iDevices.
Score: 23 Votes (Like | Disagree)

Related Stories

studio buds family

Beats Studio Buds Debuting Today With Active Noise Cancellation, Stemless Design, and More for $150

Monday June 14, 2021 8:00 am PDT by
We've seen a lot of teasers about the Beats Studio Buds over the past month since they first showed up in Apple's beta software updates, and today they're finally official. The Beats Studio Buds are available to order today in red, white, and black ahead of a June 24 ship date, and they're priced at $149.99. The Studio Buds are the first Beats-branded earbuds to truly compete with AirPods...
macos catalina legacy system extension alert

Apple Begins Warning Users That 'Legacy System Extensions' Won't Work With a Future Version of macOS

Wednesday March 25, 2020 9:53 am PDT by
Apple has shared a new support document that indicates kernel extensions — which it calls "legacy system extensions" — will not be compatible with a future version of macOS because they "aren't as secure or reliable as modern alternatives."System extensions are a category of software that works in the background to extend the functionality of your Mac. Some apps install kernel extensions, which...
General Spotify Feature

Spotify Pauses Plans to Add AirPlay 2 Support to iOS App [Update: Spotify Clarifies]

Friday August 6, 2021 9:07 am PDT by
See update at bottom of article Spotify this week confirmed that its plans to add AirPlay 2 support to its iOS app have been placed on indefinite hiatus. In an online discussion forum post, a Spotify representative said the streaming music service had been working on supporting AirPlay 2, but the company has paused the efforts "for now" due to "audio driver compatibility issues." The...
apple privacy

Apple Publishes FAQ to Address Concerns About CSAM Detection and Messages Scanning

Monday August 9, 2021 1:50 am PDT by
Apple has published a FAQ titled "Expanded Protections for Children" which aims to allay users' privacy concerns about the new CSAM detection in iCloud Photos and communication safety for Messages features that the company announced last week. "Since we announced these features, many stakeholders including privacy organizations and child safety organizations have expressed their support of...
youtube apple tv

YouTube Discontinuing 3rd-Generation Apple TV App, AirPlay Still Available

Wednesday February 3, 2021 3:09 pm PST by
YouTube is planning to stop supporting its YouTube app on the third-generation Apple TV models, where YouTube has long been available as a channel option. A 9to5Mac reader received a message about the upcoming app discontinuation, which is set to take place in March.Starting early March, the YouTube app will no longer be available on Apple TV (3rd generation). You can still watch YouTube on...
m1 macbook air

Kuo: Mini-LED MacBook Air Coming in Mid-2022

Thursday July 22, 2021 7:48 pm PDT by
Apple will release a new version of the MacBook Air around the middle of 2022, Apple analyst Ming-Chi Kuo said today in note to investors seen by MacRumors. The upcoming MacBook Air will feature a 13.3-inch mini-LED display, which would make it the second Mac to gain mini-LED technology after the 2021 MacBook Pro, which is rumored to include a mini-LED display and is expected to launch later ...
Apple Films Tom Hanks Finch First Look

Apple Original Film 'Finch' Starring Tom Hanks to Premiere November 5

Thursday August 12, 2021 8:52 am PDT by
Apple today announced that the original film "Finch," starring Tom Hanks in its titular role, will premiere on Apple TV+ on Friday, November 5 and shared a first-look image from the film. The first look at "Finch," shared by Apple. The film, which is anticipated to be an awards season contender, revolves around a man, a robot (played by "Get Out" actor Caleb Landry Jones), and a dog that form ...
whatsintheboxiphonexs

Apple's iPhone XS, XS Max and XR Won't Ship With Lightning to 3.5mm Headphone Jack Adapter

Wednesday September 12, 2018 12:58 pm PDT by
Since the headphone jack was removed from the iPhone with the launch of the iPhone 7, Apple has bundled iPhones with a Lightning to 3.5mm Headphone Jack Adapter for customers who continue to have 3.5mm headphones. With the launch of the iPhone XS, iPhone XS Max, and iPhone XR, Apple is discontinuing this practice and will not include the Lightning to 3.5mm Headphone Jack Adapter. On the...
macbook air m1 first benchmark

Apple Silicon M1 Chip in MacBook Air Outperforms High-End 16-Inch MacBook Pro

Wednesday November 11, 2020 4:43 pm PST by
Apple introduced the first MacBook Air, MacBook Pro, and Mac mini with M1 Apple Silicon chips yesterday, and as of today, the first benchmark of the new chip appears to be showing up on the Geekbench site. The M1 chip, which belongs to a MacBook Air with 8GB RAM, features a single-core score of 1687 and a multi-core score of 7433. According to the benchmark, the M1 has a 3.2GHz base...
iphone 13 teal with text

Apple Begins Preparation for iPhone 13 Production Ahead of Fall Launch

Monday June 28, 2021 3:29 am PDT by
We're just a few months away from when Apple is expected to reveal the 2021 iPhone, dubbed the "iPhone 13." In preparation for its launch, it has been pulling in shipments of different components needed to produce the new iPhones, according to a report from DigiTimes. In years past, Apple released its latest iPhone lineup, alongside a new Apple Watch, during a September event at Apple Park....