Parents beware: These popular Android child tracking apps might be spying on you
If you are a parent or a guardian and have installed parental control apps to keep an eye on your kids, you might want to check if the apps you have installed are reliable enough.
Cybernews has published a report that says the top Android apps for tracking kids and family members which have been downloaded over 85 million times on the Google Play store could be exposing your and your children's information to bad actors. Each of them was downloaded more than a million times, and the most popular one has been installed 50 million times.
Turns out, these apps can be dangerous for your family. While some of the most popular monitoring apps have weak security and privacy features, others contain links to malicious websites and all have trackers. These apps even keep tabs on the parents that have downloaded them to keep their kids safe.
A security analysis tool called the Mobile Security Framework (MobSF) was used to evaluate the security and privacy of the apps. Seven out of ten apps received a B for privacy, the second-best grade, and two got Cs. Phone Tracker By Number, which has been downloaded over 50 million times, received the lowest F grade.
The app also shares Broadcast Receivers, which is an Android component that lets an app respond to messages broadcast from the operating system (OS) or another app. This could allow other apps on the device to access the Phone Tracker By Number app and access its data, such as the location of the kid that a parent is tracking.
These apps have not properly implemented the Secure Sockets Layer (SSL) certificate, making them vulnerable to man-in-the-middle (MITM) attacks., which could allow an attacker to eavesdrop on the traffic flowing through them.
It's like making cheap sausage, and you don't know what kind of ingredients are going into it. The problem for the end-user is that you really don't know all that is in the app or how many different parties are receiving this information." - Karim Hijazi
All the apps that were reviewed contained third-party trackers, which means they collect data on both the parents and children. That means any data shared with the apps, including accounts, passwords, and personal information can be stolen.
The companies behind tracking apps are interested in collecting specific data to track the user who has installed the app and third parties could use this info for many purposes, such as targeted advertising or monitoring.
Find my kids: location tracker, which has been installed over 10 million times, and Family Locator - GPS Tracker & Find Your Phone App, contain nine trackers. MMGuardian App For Child Phone (1 million +) and Find my Phone. Family GPS Locator by Familo (1 million +) were found to have eight trackers. My Family locator, GPS tracker (5 million +), and FamiSafe: Parental Control App had seven trackers.
Four out of the ten reviewed apps had malicious links. So even though the apps themselves might not be affected, the links may lead users to sites with malware. For instance, FamiSafe: Parental Control App had two links that some security vendors thought were nasty. Phone Tracker by Number, Find my kids: location tracker, and Family GPS tracker KidsControl had one malicious link each.
Some experts are outright against such apps as they believe they violate the bond of trust between parents and kids. They believe that you should instead teach children about online safety.
At the end of the day, it's your call as a parent whether you want to use a tracking app or not, but you must do your research to ensure that the app you intend to install will not put you and your kids in the harm's way.
By installing this type of app on the child's phone, you've essentially embedded a fully capable trojan on their most personal of devices, which, in addition to having access to their browsing activity, communications, friends, etc, can also track their real-time location. " - Karim Hijazi
- Browse privately with ExpressVPN
FCC OKs Cingular\'s purchase of AT&T Wireless
Things that are NOT allowed: