Dozens of popular iPhone apps are sharing the location data of millions of mobile devices with third-party data monetization firms, according to a group of security researchers called GuardianApp (via TechCrunch).
The apps in question are mostly news, weather, and fitness apps that require access to location data to work properly, but then share that data to earn money.
According to security researchers, the apps send both precise location and other sensitive customer data to data monetization companies "at all times, constantly" sometimes without customers being aware of the location data collection. The information is used for purposes like creating databases for ad targeting.
Researchers used tools to monitor network traffic to discover apps collecting Bluetooth LE data, GPS longitude and latitude, WiFi SSIDs, accelerometer information, battery charge percentage, location arrival/departure timestamps, and more.
While the apps say that personally identifiable information is not included in the data collection, one of the researchers, Will Strafach, told TechCrunch that latitude and longitude coordinates can provide information on a person's home or work. Many customers who agree to provide apps with location data may not be aware of the extent of the information being collected and shared.
Apps that were found to be collecting location info and sending it to data monetization firms include ASKfm, NOAA Weather Radar, Homes.com, Perfect365, C25K 5K Trainer, Classifieds 2.0 Marketplace, GasBuddy, Photobucket, Roadtrippers, Tapatalk, and more, with a full list available on the site.
The data is being sent to companies that include Reveal, Sense360, Cuebiq, Teemo, Mobiquity, and Fysical. These companies denied wrongdoing, suggested customers were able to opt out at any time, and said that developers are required to inform customers about the data collection.
Some of the apps in question do indeed have clear data collection notices when opening them up for the first time, but data monetization firms do not make sure apps are following disclosure policies and not all do.
GuardianApp also suggests users use a generic name for router SSIDs and turn off Bluetooth functionality when Bluetooth is not in use.
The apps in question are mostly news, weather, and fitness apps that require access to location data to work properly, but then share that data to earn money.
According to security researchers, the apps send both precise location and other sensitive customer data to data monetization companies "at all times, constantly" sometimes without customers being aware of the location data collection. The information is used for purposes like creating databases for ad targeting.
Researchers used tools to monitor network traffic to discover apps collecting Bluetooth LE data, GPS longitude and latitude, WiFi SSIDs, accelerometer information, battery charge percentage, location arrival/departure timestamps, and more.
While the apps say that personally identifiable information is not included in the data collection, one of the researchers, Will Strafach, told TechCrunch that latitude and longitude coordinates can provide information on a person's home or work. Many customers who agree to provide apps with location data may not be aware of the extent of the information being collected and shared.
Apps that were found to be collecting location info and sending it to data monetization firms include ASKfm, NOAA Weather Radar, Homes.com, Perfect365, C25K 5K Trainer, Classifieds 2.0 Marketplace, GasBuddy, Photobucket, Roadtrippers, Tapatalk, and more, with a full list available on the site.
The data is being sent to companies that include Reveal, Sense360, Cuebiq, Teemo, Mobiquity, and Fysical. These companies denied wrongdoing, suggested customers were able to opt out at any time, and said that developers are required to inform customers about the data collection.
Some of the apps in question do indeed have clear data collection notices when opening them up for the first time, but data monetization firms do not make sure apps are following disclosure policies and not all do.
"None of these companies appear to be legally accountable for their claims and practices, instead there is some sort of self-regulation they claim to enforce," said Strafach.iPhone users who want to avoid having their location data shared with data monetization firms should be wary of the third-party apps they install that are using location services. Limiting ad tracking in Privacy settings by going to Privacy > Advertising is recommended.
GuardianApp also suggests users use a generic name for router SSIDs and turn off Bluetooth functionality when Bluetooth is not in use.
103 comments
This Monday, May 27 is Memorial Day, a federal holiday in the United States that honors individuals who have died while serving in the Armed Forces. Marking the unofficial beginning of the summer,...
Apple today told The Canadian Press that it is aiming to bring ECG functionality to Apple Watch Series 4 devices in Canada "as quickly as possible."
The news comes after Health Canada...
Former Apple retail chief Angela Ahrendts today did an interview with Bloomberg, where she spoke about her time at Apple.
The opportunity to take the Apple Store experience "to the next...
OnePlus earlier this month unveiled its new flagship smartphone, the OnePlus 7 Pro, which offers multiple attractive and unique features along with an affordable price tag.
MacRumors...
Apple in 2018 acquired Tueo Health, a startup working on an app to help parents monitor asthma symptoms in sleeping children, reports CNBC.
Tueo's CEO and COO, Brownwyn Harris and Anura...
A week and a half after releasing iOS 12.3 with a revamped TV app, Apple today released iOS 12.3.1, a bug fix update that isn't expected to include any significant new features.
The iOS...
Apple surprised us with a MacBook Pro refresh earlier this week. 2019 models feature faster Intel processors with up to eight cores for the first time, as well as "new materials" added to the...
Barclays analyst Blayne Curtis and his associates today shared their expectations for both 2019 and 2020 model iPhones following their trip to Asia earlier this month, where they met with some...
