{"id":130613,"date":"2019-02-21T19:09:40","date_gmt":"2019-02-21T19:09:40","guid":{"rendered":"http:\/\/sftarticles.wpenginepowered.com\/en\/?p=130613"},"modified":"2025-07-01T22:19:42","modified_gmt":"2025-07-02T05:19:42","slug":"android-privacy-scandal","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/android-privacy-scandal\/","title":{"rendered":"Privacy scandal: Thousands of Android apps have been recording everything you do"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-130773\" src=\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2021\/04\/GOOGLE_PLAY_STORE_700.jpg\" alt=\"google play store\" width=\"700\" height=\"558\" \/><\/p>\n<p>Permissions are supposed to be a big deal for mobile apps. Our phones are constantly collecting all sorts of data based on what we do with them and apps are only supposed to be able to access that data, if we give them permission. When we say apps here, we also mean the companies behind the apps. They can only access the data we give them permission to access. At least, that is how it is <em>supposed<\/em> to go.<\/p>\n<div class=\"sc-card-starred-link\">\r\n  <div class=\"sc-card-starred-link__body\">\r\n    <div class=\"sc-card-starred-link__row clearfix\">\r\n      <div class=\"sc-card-starred-link__col-logo\">\r\n        <img decoding=\"async\" class=\"sc-card-starred-link__img\" src=\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2018\/04\/google-play-pantallas-1024x576.jpg\" width=\"100px\" height=\"100px\">\r\n      <\/div>\r\n      <div class=\"sc-card-starred-link__col-title\">\r\n        <p class=\"sc-card-starred-link__title\">How to detect fake apps in the Google Play Store in just 3 steps<\/p>\r\n        <a class=\"sc-card-starred-link__button\" href=\"https:\/\/en.softonic.com\/articles\/how-to-detect-fake-apps-in-the-google-play-store-in-just-3-steps\/\" target=\"_blank\" rel=\"noopener noreferrer sponsored\">Read now<\/a>\r\n      <\/div>\r\n    <\/div>\r\n    <a class=\"sc-card-starred-link__link\" href=\"https:\/\/en.softonic.com\/articles\/how-to-detect-fake-apps-in-the-google-play-store-in-just-3-steps\/\" target=\"_blank\" rel=\"noopener noreferrer sponsored\"><\/a>\r\n  <\/div>\r\n<\/div>\n<h2>More than 17,000 Android apps have been collecting identifying information and creating permanent records<\/h2>\n<p>This latest Privacy Scandal has hit the news thanks to <a href=\"https:\/\/blog.appcensus.mobi\/2019\/02\/14\/ad-ids-behaving-badly\/\" target=\"_blank\" rel=\"noopener noreferrer\">research by the International Computer Science Institute (ICSI)<\/a>. The report by the ICSI shows that these apps go against Google\u2019s best practices for app developers and that the data collection methods used straight-up violate <a href=\"https:\/\/play.google.com\/about\/monetization-ads\/ads\/ad-id\/\" target=\"_blank\" rel=\"noopener noreferrer\">Google\u2019s policies on collecting user data for advertising purposes<\/a>.<\/p>\n<p>The way these apps have been collecting data is by matching various ID numbers with data that is unique to your mobile phone. For example, your Advertising ID may be a resettable number, but your phone&#8217;s IMEI, Android ID, and MAC address are much more difficult (if not impossible) to change. Rather than simply taking your advertising ID number, like <a href=\"https:\/\/developer.android.com\/training\/articles\/user-data-ids\" target=\"_blank\" rel=\"noopener noreferrer\">Google\u2019s guidelines<\/a> point out, the apps in question have also been pilfering all of the <strong>permanent data unique to your device.<\/strong> This makes the data they can send to advertisers much more valuable and takes away what little control you had over your own data.<\/p>\n<figure id=\"attachment_130727\" aria-describedby=\"caption-attachment-130727\" style=\"width: 700px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-130727\" src=\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2021\/04\/New_Project_edgvba.jpg\" alt=\"Screenshots of mobile ad permissions\" width=\"700\" height=\"394\" \/><figcaption id=\"caption-attachment-130727\" class=\"wp-caption-text\">Image via: <a href=\"https:\/\/blog.appcensus.mobi\/2019\/02\/14\/ad-ids-behaving-badly\/\" target=\"_blank\" rel=\"noopener noreferrer\">Serge Egelman<\/a><\/figcaption><\/figure>\n<p>According to Serge Egelman, who led the research team at the ICSI, \u201cPrivacy disappears,\u201d when tech companies act in this way. Egelman also mentioned a few of the 17,000 apps they found to be acting in this way, which included<strong> Angry Birds Classic, Audiobooks by Audible, Flipboard,<\/strong> and <strong>Clean Master<\/strong>. To show just how far and wide this problem goes, Egelman pointed out that Clean Master alone has been downloaded and installed on over <strong>1 billion devices.<\/strong><\/p>\n<p>Google has responded to the ICSI\u2019s research, with a spokesperson saying, \u201cWe take these issues very seriously\u2026 Combining Ad ID with device identifiers for the purpose of ads personalization is strictly forbidden. We&#8217;re constantly reviewing apps &#8212; including those listed in the researcher&#8217;s report &#8212; and will take action when they do not comply with our policies.\u201d The problem Google raised, however, is that it can only enforce its policies when the violating data is sent to its own ad networks. If the data is sent to external ad networks, Google can\u2019t enforce its policies.<\/p>\n<p>Google is working on the problem, but only when it shows itself, which seems like a massive dereliction of duty on the part of the internet giant. If it is unable to enforce its policies properly, what is the point in having them?<\/p>\n<p><a href=\"https:\/\/blog.appcensus.mobi\/2019\/02\/14\/ad-ids-behaving-badly\/\" target=\"_blank\" rel=\"noopener noreferrer\">For more information on the ICSI report click here.<\/a><\/p>\n<div class=\"sc-related-articles-white\">\r\n<p class=\"sc-related-articles-white__title\">More Softonic Articles<\/p>\r\n  <div class=\"sc-related-articles-white__row\">\r\n    <a title=\"5 tips to prevent security issues with your phone \u25ba\" href=\"https:\/\/en.softonic.com\/articles\/5-tips-to-prevent-security-issues-with-your-phone\">\r\n    <div class=\"sc-related-articles-white__article\">\r\n      <div class=\"sc-related-articles-white__image\">\r\n        <div style=\"background-image:url(https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2018\/03\/Screen-Shot-2018-03-19-at-12.34.02.png)\"><\/div>\r\n      <\/div>\r\n      <div class=\"sc-related-articles-white__text\">\r\n        <p>5 tips to prevent security issues with your phone \u25ba<\/p>\r\n      <\/div>\r\n    <\/div>\r\n    <\/a>\r\n    <a title=\"8 tricks to strengthen your WhatsApp security \u25ba\" href=\"https:\/\/en.softonic.com\/articles\/8-tricks-to-strengthen-your-whatsapp-security\">\r\n    <div class=\"sc-related-articles-white__article\">\r\n      <div class=\"sc-related-articles-white__image\">\r\n        <div style=\"background-image:url(https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2017\/11\/whatsapp-web-screenshot-1024x576-1024x576.png)\"><\/div>\r\n      <\/div>\r\n      <div class=\"sc-related-articles-white__text\">\r\n        <p>8 tricks to strengthen your WhatsApp security \u25ba<\/p>\r\n      <\/div>\r\n    <\/div>\r\n    <\/a>\r\n  <\/div>\r\n  <div class=\"sc-related-articles-white__row\">\r\n    <a title=\"7 mistakes that put your internet security at risk \u25ba\" href=\"https:\/\/en.softonic.com\/articles\/mistakes-internet-security-risk\">\r\n    <div class=\"sc-related-articles-white__article\">\r\n      <div class=\"sc-related-articles-white__image\">\r\n        <div style=\"background-image:url(https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2017\/06\/5mistakesHeader-1024x576.jpg)\"><\/div>\r\n      <\/div>\r\n      <div class=\"sc-related-articles-white__text\">\r\n        <p>7 mistakes that put your internet security at risk \u25ba<\/p>\r\n      <\/div>\r\n    <\/div>\r\n    <\/a>\r\n    <a title=\"8 tricks to boost your security on Google Chrome \u25ba\" href=\"https:\/\/en.softonic.com\/articles\/8-tricks-to-boost-your-security-on-google-chrome\">\r\n    <div class=\"sc-related-articles-white__article\">\r\n      <div class=\"sc-related-articles-white__image\">\r\n        <div style=\"background-image:url(https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2017\/11\/crome-security-1024x576-1024x576.jpg)\"><\/div>\r\n      <\/div>\r\n      <div class=\"sc-related-articles-white__text\">\r\n        <p>8 tricks to boost your security on Google Chrome \u25ba<\/p>\r\n      <\/div>\r\n    <\/div>\r\n    <\/a>\r\n  <\/div>\r\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>More than 17,000 Android apps have been collecting identifying information and creating permanent records.<\/p>\n","protected":false},"author":9073,"featured_media":130774,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":0},"categories":[1015],"tags":[1082,1049,1027],"usertag":[839],"vertical":[],"content-category":[],"class_list":["post-130613","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-android","tag-google-play-store","tag-security","usertag-vpn"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/130613","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/users\/9073"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/comments?post=130613"}],"version-history":[{"count":1,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/130613\/revisions"}],"predecessor-version":[{"id":326536,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/130613\/revisions\/326536"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media\/130774"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media?parent=130613"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/categories?post=130613"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/tags?post=130613"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/usertag?post=130613"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/vertical?post=130613"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/content-category?post=130613"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}