Dozens of popular iPhone apps are sharing the location data of millions of mobile devices with third-party data monetization firms, according to a group of security researchers called GuardianApp (via TechCrunch).

The apps in question are mostly news, weather, and fitness apps that require access to location data to work properly, but then share that data to earn money.

locationdatacollection
According to security researchers, the apps send both precise location and other sensitive customer data to data monetization companies "at all times, constantly" sometimes without customers being aware of the location data collection. The information is used for purposes like creating databases for ad targeting.

Researchers used tools to monitor network traffic to discover apps collecting Bluetooth LE data, GPS longitude and latitude, WiFi SSIDs, accelerometer information, battery charge percentage, location arrival/departure timestamps, and more.

While the apps say that personally identifiable information is not included in the data collection, one of the researchers, Will Strafach, told TechCrunch that latitude and longitude coordinates can provide information on a person's home or work. Many customers who agree to provide apps with location data may not be aware of the extent of the information being collected and shared.

Apps that were found to be collecting location info and sending it to data monetization firms include ASKfm, NOAA Weather Radar, Homes.com, Perfect365, C25K 5K Trainer, Classifieds 2.0 Marketplace, GasBuddy, Photobucket, Roadtrippers, Tapatalk, and more, with a full list available on the site.

The data is being sent to companies that include Reveal, Sense360, Cuebiq, Teemo, Mobiquity, and Fysical. These companies denied wrongdoing, suggested customers were able to opt out at any time, and said that developers are required to inform customers about the data collection.

Some of the apps in question do indeed have clear data collection notices when opening them up for the first time, but data monetization firms do not make sure apps are following disclosure policies and not all do.

"None of these companies appear to be legally accountable for their claims and practices, instead there is some sort of self-regulation they claim to enforce," said Strafach.

iPhone users who want to avoid having their location data shared with data monetization firms should be wary of the third-party apps they install that are using location services. Limiting ad tracking in Privacy settings by going to Privacy > Advertising is recommended.

GuardianApp also suggests users use a generic name for router SSIDs and turn off Bluetooth functionality when Bluetooth is not in use.

Top Rated Comments

fumi2014 Avatar
36 months ago
I didn't think Apple allowed this sort of thing.
Score: 16 Votes (Like | Disagree)
zorinlynx Avatar
36 months ago
The best way to be able to still use some of these apps (like Pay By Phone parking) that need your location to work well, but not share your location all the time, is to make sure Location Privacy is set to "While Using".

Any app that tries to keep using your location in the background when set to "While Using" will pop up a big blue banner saying "<app> is currently using your location." You can then remove the offending app, or at least kill it. Waze has this issue, but I suspect it's a longstanding bug and not intentional.
Score: 11 Votes (Like | Disagree)
Apple_Robert Avatar
36 months ago
I don't use any of the apps in question.

The linked article would carry more weight, if it was more than an advertisement for Guardian's new VPN app.
Score: 10 Votes (Like | Disagree)
MikeAnd Avatar
36 months ago
The best way to be able to still use some of these apps (like Pay By Phone parking) that need your location to work well, but not share your location all the time, is to make sure Location Privacy is set to "While Using".
Yes, at the risk of stating the obvious, for most apps there is a huge difference between granting Location Services access "While Using" versus "Always." For example, I do use GasBuddy, but I'm not too concerned about it because I set Location Services to "While Using," and I only fire it up once a month. There are virtually no third-party apps on my phone that I grant "Always" access to.

You can then remove the offending app, or at least kill it. Waze has this issue, but I suspect it's a longstanding bug and not intentional.
Ironically, the Waze UI is so bad that "just kill the app (and relaunch it from scratch)" is my default technique for navigating through the app.
Score: 7 Votes (Like | Disagree)
SandboxGeneral Avatar
36 months ago
Would you mind explaining all this in a bit more detail? Not familiar with much of what you’re talking about.
Only for Linux!?
More like a Question, can this be done by running Linux in a VM on my Mac and then use that one to set the DNS.
This seems to me a bit geeky if you ask me.
I do have a second generation Raspberry Pi, would that work, is there any non geeky way to set this up, most of the time if you go to those sites explaining this stuff makes it too hard for non geeks.
I am by no means a dummy but networking is not easy at all.

Yup, I too would like to know more about it, seems like you need some kind f Linux distribution to get this to work.
Pi-Hole can be set up on Linux or Raspbian. If you use Linux, don't run it on Ubuntu LTS 18.04 because it isn't yet supported.

I've tested and run it on a Raspberry Pi (Raspbian OS), Ubuntu 16.04 LTS on a Dell Optiplex 990 and I've run it in a VM (virtual machine) under Ubuntu in VMware Fusion on a Mac Mini. Currently I'm just using the Raspbery Pi as the DNS server, or Pi-Hole.

All you have to do once set up is to tell your WiFi router/access point and/or firewall to use the IP address of the Pi-Hole for it's DNS. You can also manually set each device, phone, tablet, PC, laptop et al. to point to the Pi-Hole for it's DNS.

Once you get it setup then you can add curated blocklists to the 'gravity service' of Pi-Hole and it imports all those domains on the list into your Pi-Hole for blocking. You can also blacklist and whitelist domains as needed too. There will always be some false-positives or sites that are blocked that you don't want blocked and once you square off those rough edges its smooth sailing.

Here are some sites that I get most of my block lists from:

* https://firebog.net/
* https://blog.cryptoaustralia.org.au/2017/11/15/favourite-block-lists-cryptoaustralia/
* https://github.com/StevenBlack/hosts
* https://discourse.pi-hole.net/t/to-completely-block-facebook-blocklist-facebook-domains/8141

Here is the Raspbery Pi hardware I'm using. https://www.amazon.com/gp/product/B01D92SSX6/ref=oh_aui_search_detailpage?ie=UTF8&psc=1

I'm happy to answer more questions if you have them. I love the Pi-Hole and never want to be on the Internet again without it.

Here is a video on the setup process.
Score: 6 Votes (Like | Disagree)
macfacts Avatar
36 months ago
So privacy on iOS is fake
Score: 6 Votes (Like | Disagree)

Top Stories

apple watch 6s 202009

Bloomberg: Apple Watch Series 7 to Feature Thinner Screen Bezels, Faster Processor, and Updated Ultra Wideband Tech

Monday June 14, 2021 3:41 am PDT by
This year's Apple Watch Series 7 is likely to have thinner display bezels and use a new lamination technique that brings the display closer to the front cover, according to Bloomberg's Mark Gurman. From the report: The Cupertino, California-based tech giant is planning to refresh the line this year -- with a model likely dubbed the Apple Watch Series 7 -- by adding a faster processor,...
studio buds family

Beats Studio Buds Debuting Today With Active Noise Cancellation, Stemless Design, and More for $150

Monday June 14, 2021 8:00 am PDT by
We've seen a lot of teasers about the Beats Studio Buds over the past month since they first showed up in Apple's beta software updates, and today they're finally official. The Beats Studio Buds are available to order today in red, white, and black ahead of a June 24 ship date, and they're priced at $149.99. The Studio Buds are the first Beats-branded earbuds to truly compete with AirPods...
m1 imac back

Some M1 iMac Models Shipping With Crooked Mountings

Monday June 14, 2021 12:50 pm PDT by
Some M1 iMacs appear to have a manufacturing defect that causes the display to be mounted on the stand in a way that's not perfectly aligned, leading to a crooked display. YouTuber iPhonedo over the weekend published a review of the M1 iMac, and he found that his machine appeared to be tilted on one side, a mounting disparity that was visibly noticeable and proved with a ruler. Another...
ios 15 home screen icons

iOS 15 Lets You Drag and Drop Images and Text Across Apps

Saturday June 12, 2021 3:17 pm PDT by
Apple this week previewed iOS 15, which is available now in beta for developers ahead of a public release later this year. One smaller but useful new feature added is the ability to drag and drop images, text, files, and more across apps on iPhone. MacStories editor-in-chief Federico Viticci demonstrated the new feature in a tweet: Using cross-app drag and drop on iPhone in iOS 15. Finally 🎉 #WW ...
ipad iphone duo ios 12

Apple Releases iOS and iPadOS 12.5.4 Security Fix for Older iPhones and iPads

Monday June 14, 2021 10:15 am PDT by
Apple today released new iOS and iPadOS 12.5.4 updates, with the new software aimed at older devices that are unable to run the iOS 14 update that's available on modern devices. The iOS and iPadOS 12.5.4 updates can be downloaded for free and the software is available on all eligible devices over-the-air in the Settings app. To access the new software, go to Settings > General > Software...
apple new iphone case colors

Apple Releases New Sunflower, Cloud Blue and Electric Orange iPhone 12 Cases

Monday June 14, 2021 11:12 am PDT by
Apple today released silicone iPhone cases for the iPhone 12, 12 Pro, 12 Pro Max, and 12 mini in a series of new colors that include sunflower, cloud blue, and electric orange. Sunflower is a bright yellow shade, cloud blue is a soft, light blue, and electric orange is a bright orange that's darker than the kumquat color and more orange than pink citrus. The new cases are priced starting...
files app ipados 15

iPadOS 15: Files App Gains NTFS Support, Progress Indicator, and More

Tuesday June 15, 2021 3:41 am PDT by
Apple in iPadOS 15 has added the ability to access NTFS-formatted media from within the Files app. The additional support for the Windows-related format, first discovered by YouTuber Steven Fjordstrøm, is read-only, so like on macOS you can't modify files stored on NTFS devices, but you can at least copy any data on them for working on elsewhere on your iPad. The Files app has also gotten a...
apple virtual game controller ios 15

Apple Makes New On-Screen Game Controller Available to Developers on iOS 15 and iPadOS 15

Saturday June 12, 2021 12:36 pm PDT by
During the Platforms State of the Union at WWDC this week, Apple unveiled a new API for iOS 15 and iPadOS 15 that enables developers to implement an on-screen virtual game controller in their iPhone and iPad games with just a few lines of code. While many iPhone and iPad games already offer on-screen controls, Apple's new virtual game controller is available to all developers, easy to add,...
apple store palo alto

Apple Stores to Drop Mask Requirement for Vaccinated Customers This Week

Sunday June 13, 2021 11:31 am PDT by
Apple will no longer require vaccinated customers to wear masks inside their retail stores in the U.S, a major shift in policy compared to last month, according to Bloomberg. The new change, expected to go into effect on Tuesday, will no longer require customers who have been fully vaccinated against COVID-19 to wear masks inside Apple Stores in the United States. Bloomberg notes that Apple...
nomad airtag wallet card 2

Nomad's Latest Accessory Makes It Easier to Put an AirTag in Your Wallet

Monday June 14, 2021 12:00 pm PDT by
Nomad, known for its range of accessories designed for Apple devices, today announced the Card for AirTag, which is designed to make it easier for an AirTag to fit inside a wallet for tracking purposes. With Card for AirTag, an AirTag fits inside the middle of a card-shaped holder that's then meant to fit inside of a wallet. According to Nomad, the design offers a smooth, uniform shape that...