Report says certain Android apps send Facebook personal data without obtaining consent

by Alan Friedman / Jan 01, 2019, 1:54 PM

Report says certain Android apps send Facebook personal data without obtaining consent

You have to wonder what is really going on at Facebook when it comes to personal data. An organization called Privacy International has just published a report (via Android Police) that reveals how certain Android apps share your personal data with Facebook, even if you don't have a Facebook account. Between August and December 2018, the organization tested 34 Android apps and found that 20 of them share data with Facebook from the moment you open that app.

The data is sent to Facebook with a unique Google advertising ID that allows the recipient of the data to build a profile of a person based on other apps installed. Looking at this information, even if your name is unknown, your religion, health, gender, activities, interests and routines can be determined. The report found that some apps are sending to Facebook "incredibly detailed and sometimes sensitive" information. One example is fare aggregator Kayak, which sends Facebook information on the flights you searched for on the app, the departure date of any flights you looked up, the airports involved, the number of people traveling, class of tickets and more. Even if you decide to "Opt out of Ads Personalization"
using the settings on Android, the report says that it might not save you from having your data sent to Facebook from third party apps like Kayak, Shazam and others.

Just before the end of the year, Google wrote an email to Privacy International stating that if a user disables "ads personalization" in the device Advertising ID settings, the advertising identifier cannot be used to create user profiles for advertising purposes. But as Privacy International points out, this doesn't stop the apps from tracking users, or using collected data for non advertising purposes.

While Facebook says that the onus is on app developers to get users to agree that they have the legal right to collect and share personal data, in June the company launched a feature that allows developers to delay collecting data until the user consents. Perhaps not coincidentally, this feature was added 35 days after Europe's draconian General Data Protection Regulation (GDPR) went into effect. This regulation prevents companies from using subscriber's personal data without consent. Companies that fail to adhere to the rules could be fined 4% of global revenue or the equivalent $23 million dollar, whichever is higher.

"For example, an individual who has installed the following apps that we have tested, "Qibla Connect" (a Muslim prayer app), "Period Tracker Clue" (a period tracker), "Indeed" (a job search app), "My Talking Tom" (a children’s’ app), could be potentially profiled as likely female, likely Muslim, likely job seeker, likely parent."-Privacy International

According to Privacy International, some of the apps that share data with Facebook include Kayak, Skyscanner, Trip Advisor, Shazam, Spotify and Indeed.

Options

22 Comments

1. BGChicago

Posts: 226; Member since: Nov 16, 2014

You don't need an app for most of these anyway. Use a browser

posted on Jan 01, 2019, 2:02 PM 0

17. fatTony

Posts: 115; Member since: Dec 20, 2012

For those who like to listen to music while out for a jog or at the gym, it is not practical to use the browser version of Spotify. Android user for over eight years, but these privacy concerns are making me consider Apple. Already dumped Facebook, hasn't hurt my quality of life one bit.

posted on Jan 01, 2019, 11:34 PM 0

21. strategic_developer

Posts: 1627; Member since: Jul 17, 2018

Different security doesn't equal better security.

posted on Jan 02, 2019, 11:40 AM 1

2. lyndon420

Posts: 6861; Member since: Jul 11, 2012

Hey!! Facebook and Android is sharing your information with everyone and anything. Welcome to 2018 !!

posted on Jan 01, 2019, 2:34 PM 1

3. Subie

Posts: 2415; Member since: Aug 01, 2015

Since Apple owns Shazam I hope they have it patched by now. Because we know they don't make customers the product...

posted on Jan 01, 2019, 2:36 PM 1

4. Subie

double post

posted on Jan 01, 2019, 2:36 PM 0

9. Vancetastic

Posts: 1700; Member since: May 17, 2017

How many more reasons do we need to not use Facebook?

posted on Jan 01, 2019, 3:51 PM 5

12. SIGPRO

Posts: 2817; Member since: Oct 03, 2012

Listen some of the biggest company's are from the US like Apple, Google, Microsoft, Facebook, Cisco etc etc. And who is the biggest aggressor and spy in the world.....yes US! You see where i am going with this post?

posted on Jan 01, 2019, 4:37 PM 6

15. Peaceboy

Posts: 640; Member since: Oct 11, 2018

Apple bad news: android fans flocking, flocking and cursing. Android bad news: android fans sending links how bad apple

posted on Jan 01, 2019, 8:14 PM 3

16. worldpeace

Posts: 3135; Member since: Apr 15, 2016

I don't see anyone sending links here.. btw.. "Apple bad news: android fans flocking, flocking and cursing." That's because you can't defend Apple.. "Android bad news: android fans sending links how bad apple." That's because of your hypocrisy, you start running your mouth while going blind if Apple is the one did it.. People who send those links just want to give you some enlightenment (which we know it just wont work)

posted on Jan 01, 2019, 8:52 PM 0

19. RebelwithoutaClue unregistered

Looks exactly like your behaviour but pro-Apple instead.

posted on Jan 02, 2019, 2:06 AM 2

20. RebelwithoutaClue unregistered

It seems it's absolutely not an Android exclusive. A PiHole chart shows what an iPhone of a friend has for DNS traffic: https://imgur.com/a/nmYnE1I

posted on Jan 02, 2019, 10:34 AM 1

22. gglfore

Posts: 1; Member since: Jan 02, 2019

The best way to protect your privacy is not to share any personal data at first place with Google or other companies. I recommend using /e/ instead of Google Android. It is Android based mobile OS designed with privacy in mind. Does not send any private data like your messages or your location to Google. Instead of Google apps it uses open source android apps. You can check web site: e.foundation