in ,

Some mobile ad-blockers and VPNs siphoning user data, report finds, Ars Technica

Some mobile ad-blockers and VPNs siphoning user data, report finds, Ars Technica

      not so private –

             

Sensor Tower, the firm behind the apps, apparently helped itself to the data.

      

      

           

BuzzFeed News reports that the apps come from Sensor Tower, a firm that bills itself as “the leading provider of market intelligence and insights for the global app economy. ” The company analyzes app use across platforms to, for example, list the top-grossing applications across platforms in a given month. (Spoiler: It’s apparently always Tinder.)

Sensor Tower, founded in , has published at least Android and iOS apps of its own in the past five years , such as Luna VPN and Adblock Focus. BuzzFeed found that several of these apps, sometime after installation, prompt users to install a root certificate in order to access features. For example, Luna VPN gives users a prompt to add an extension for blocking ads in YouTube. Following-through takes users to an external website to download and install the certificate, thus doing an end run around Google and Apple restrictions.

Many users do not necessarily realize the implications of granting any company that level of access to their device, an analyst with Malwarebytes pointed out to BuzzFeed, particularly when the request is part of app use after the installation stage.

Sensor Tower also conceals its connection to the apps in public. Luna VPN, for example, is listed on the Google Play Store as distributed by Emban Networks (which has no other apps listed). Similarly, Adblock Focus ) is apparently the one and only product distributed by Orbital Software, Inc.

Sensor Tower told BuzzFeed it only collects anonymized usage and analytics data, which it then integrates into the “intelligence” products that it sells to developers, investors, and other entities. The company also claimed not to collect sensitive data or personally identifiable information from users. Given how easily researchers have been able to identify users from theoretically anonymized data time and time again in the past decade, though, one may wonder how well that claim holds up.

Most of the company’s apps are no longer available on either the iOS App Store or the Google Play Store. Sensor Tower told BuzzFeed it was “in the process of sunsetting.” An Apple spokesperson, however, told BuzzFeed that a dozen of the company apps were previously removed from the iOS App Store for policy violations. After being contacted by BuzzFeed, Apple pulled Adblock Focus and said it was investigating Luna VPN.

Google also removed a Sensor Tower app, Mobile Data, from its online storefront after being contacted by BuzzFeed and said it was investigating the others.

                                                    


What do you think?

Leave a Reply

Your email address will not be published. Required fields are marked *

GIPHY App Key not set. Please check settings

Abstract art with “pseudo-profound” BS titles seen as more meaningful, Ars Technica

Abstract art with “pseudo-profound” BS titles seen as more meaningful, Ars Technica

Coronavirus update: India temporarily closes door on nationals of France, Germany & Spain – Livemint, Livemint.com

Coronavirus update: India temporarily closes door on nationals of France, Germany & Spain – Livemint, Livemint.com