Privacy Concerns With Android and iPhone Apps

carre4 writes "The Wall Street Journal has come out with an article where they examine 101 popular smartphone apps and show that 56 of them transmit various types of information including unique phone IDs, age, gender, postal codes, and location to ad companies. The article also includes responses from infringing app makers and talks about the pressure that some developers feel to share even more information, like Max Binshtok, creator of the DailyHoroscope for Android, who has been encouraged by ad-network executives to transmit users' locations."

Comments

Isn't there anything like sourceforge for android?

[splerdu]

Se we can download source and built it ourselves?

Ugh

[alvinrod]

Sorry to burst your bubble, but most developers like to eat, which means that commercialization of software comes in at some point, whether that's advertising, support, or something else. Limiting the selection of software to only non-free (as in beer) software would result in a lot less software being available (or made in the future), which isn't exactly helpful for end users either. FOSS has gone a long way to make the world a better place, but it's not a be-all, end-all solution.

Re:In other news

[Anonymous Coward]

It was uncovered today that your toilet analyzes your stools and sends the results to your proctologist. If you cannot afford a proctologist, one will be provided to you...

unless you live in the US. in which case, your shit's out of luck

Data from Article

[scruffy]

Here is a list of the apps and the information they send about you. Explanation of the columns and numbers are on the bottom of this message. The extra annoying text is to get around the GDF lameness filter.

A B C D E F IPhone App the quick brown fox jumped over the lazy dog
0 0 0 0 2 0 0.03 Seconds Pro the quick brown fox jumped over the lazy dog
0 0 0 0 2 0 Age My Face the quick brown fox jumped over the lazy dog
2 2 0 2 2 0 Angry Birds the quick brown fox jumped over the lazy dog
2 0 0 2 2 0 Angry Birds Lite the quick brown fox jumped over the lazy dog
1 0 0 2 2 0 Aurora Feint II: Lite the quick brown fox jumped over the lazy dog
0 0 0 0 2 0 Barcode Scanner (BahnTech) the quick brown fox jumped over the lazy dog
2 0 0 0 0 2 Bejeweled 2 the quick brown fox jumped over the lazy dog
0 0 0 2 2 0 Best Alarm Clock Free the quick brown fox jumped over the lazy dog
0 0 0 2 2 0 Bible App (LifeChurch.tv) the quick brown fox jumped over the lazy dog
0 0 0 0 0 0 Bump the quick brown fox jumped over the lazy dog
0 0 0 2 2 0 CBS News the quick brown fox jumped over the lazy dog
0 0 0 0 2 0 0.03 Seconds the quick brown fox jumped over the lazy dog
0 0 0 2 2 0 Dictionary.com the quick brown fox jumped over the lazy dog
2 0 0 0 1 0 Doodle Jump the quick brown fox jumped over the lazy dog
1 0 0 1 1 0 ESPN ScoreCenter the quick brown fox jumped over the lazy dog
1 1 0 1 0 0 Facebook the quick brown fox jumped over the lazy dog
0 0 0 0 0 0 Flashlight (John Haney Software) the quick brown fox jumped over the lazy dog
0 0 0 1 2 0 Fluent News Reader the quick brown fox jumped over the lazy dog
1 0 1 2 0 1 Foursquare the quick brown fox jumped over the lazy dog
0 0 0 2 2 0 Fox News the quick brown fox jumped over the lazy dog
2 0 0 2 0 0 Google Maps the quick brown fox jumped over the lazy dog
1 0 2 2 2 0 Grindr the quick brown fox jumped over the lazy dog
2 0 0 1 2 0 Groupon the quick brown fox jumped over the lazy dog
0 0 0 0 2 0 Hipstamatic the quick brown fox jumped over the lazy dog
0 0 0 0 2 0 iJewels the quick brown fox jumped over the lazy dog
0 0 0 0 0 0 iLoveBeer: Zythology the quick brown fox jumped over the lazy dog
1 0 0 1 2 0 Medscape the quick brown fox jumped over the lazy dog
1 0 1 2 2 0 MyFitnessPal the quick brown fox jumped over the lazy dog
1 0 0 1 1 0 Netflix the quick brown fox jumped over the lazy dog
0 0 0 2 2 0 NYTimes the quick brown fox jumped over the lazy dog
0 0 0 2 2 0 Ninjump the quick brown fox jumped over the lazy dog
0 0 2 2 2 0 Pandora the quick brown fox jumped over the lazy dog
0 0 0 2 2 0 Paper Toss the quick brown fox jumped over the lazy dog
0 0 0 0 0 0 PerfectPhoto the quick brown fox jumped over the lazy dog
0 0 0 2 2 0 Pimple Popper Lite the quick brown fox jumped over the lazy dog
0 0 0 2 2 0 Pumpkin Maker the quick brown fox jumped over the lazy dog
0 0 0 0 1 0 RedLaser the quick brown fox jumped over the lazy dog
0 0 0 0 2 0 Ringtone Maker the quick brown fox jumped over the lazy dog
2 0 0 0 2 0 Ringtone Maker Pro the quick brown fox jumped over the lazy dog
0 0 0 2 2 0 Shazam the quick brown fox jumped over the lazy dog
2 0 0 2 2 0 Talking Tom Cat the quick brown fox jumped over the lazy dog
1 1 2 2 2 1 TextPlus 4 the quick brown fox jumped over the lazy dog
0 0 0 2 2 0 The Moron Test the quick brown fox jumped over the lazy dog
0 0 0 0 2 0 The Moron Test: Section 1 the quick brown fox jumped over the lazy dog
0 0 0 2 2 0 Tips & Tricks: IPhone Secrets Lite the quick brown fox jumped over the lazy dog
2 0 0 2 0 0 TweetDeck the quick brown fox jumped over the lazy dog
0 0 0 0 1 0 WSJ Mobile Reader the quick brown fox jumped over the lazy dog
0 0 0 2 2 0 The Weather Channel the quick brown fox jumped over the lazy dog
0 0 0 0 0 1 WhatsApp Messenger the quick brown fox jumped over the lazy dog
1 0 0 2 2 0 Yelp the quick brown fox jumped over the lazy dog
1 0 0 0 0 0

Re:I think many people suspected this

[GIL_Dude]

Don't forget that Assisted GPS (A-GPS) requires network access: http://en.wikipedia.org/wiki/Assisted_GPS. Some of these folks may have just been trying to get you a correct fix faster by using A-GPS. Unfortunately, you can't tell from the Android permissions screen as you will just get things like "network access" which can be used for any purpose - benign, nefarious, or anything in between. I don't know what the answer is to this, but I know I would prefer to be able to tell the app what sites / services it could access.

Laws of reality

[SuperKendall]

The article stated:

"One iPhone app, Pumpkin Maker (a pumpkin-carving game), transmits location to an ad network without asking permission."

That is flat out impossible. I am an iPhone developer; there is no way for an application to obtain user location without the user being prompted if that is OK.

It makes the rest of the conclusions very suspect to me. Just how would an app get age and gender? Again I cannot think of a way that is even possible on an iPhone without being asked; no-where on my iPhone is my birthday or age stored.

Re:Laws of reality

[R3d M3rcury]

The problem is, there is no way to know what the information is being used for.

I've never used Pumpkin Maker and the description doesn't mention anything about it's capabilities. However, suppose I include a "feature" which will display a background depending on the time of day and your location. So if it's after sunset, it will be dark outside. Of course, for me to know if it's sunset, I need to know your location since sunset varies depending on where in the world you are.

Thus, Pumpkin Maker needs my location. So it comes up and says, "Would you like to allow Pumpkin Maker to access your location?" Makes sense--it needs to know my location so that it can display the appropriate background. Of course, it doesn't mention that while it's showing your appropriate background, it's sharing your location with it's advertisers.

Gender would be easy to come by--just ask. After all, it's a fun game for kids and we want to identify the kid with the appropriate pronoun. Or we ask for a name and send that off--after all, we want to identify your pumpkin as "Bob's Pumpkin" or "Sally's Pumpkin" initially, right? Then something on the backend figures out that "Bob" tends to be a boy's name and "Sally" tends to be a girl's name. "Pat" will confuse it, of course...

Age? Again, you could just ask. You have a collection of add-ons for your pumpkin and you want to filter for age-appropriateness. After all, we don't want small children adding pumpkin boobies or penises. That would be sick and wrong and we're a good company that Thinks of the Children.®

So the game collects all of this information for a good reason but it never says, "Hey, you mind if I ship it off to advertisers?"

Again, I've never used this App. I don't know much about it. But these are some ways you could get the information.