Please ensure Javascript is enabled for purposes of website accessibility
Apple Busts Facebook for Distributing Data-Sucking App
gvw_ap_news
By Associated Press
Published 6 years ago on
January 31, 2019

Share

NEW YORK — Apple says Facebook can no longer distribute an app that paid users, including teenagers, to extensively track their phone and web use.

“I don’t think they make it very clear to users precisely what level of access they were granting when they gave permission. There is simply no way the users understood this.” — Will Strafach, mobile app security researcher
In doing so, Apple closed off Facebook’s efforts to sidestep Apple’s app store and its tighter rules on privacy.
The tech blog TechCrunch reported late Tuesday that Facebook paid people about $20 a month to install and use the Facebook Research app. While Facebook says this was done with permission, the company has a history of defining “permission” loosely and obscuring what data it collects.
“I don’t think they make it very clear to users precisely what level of access they were granting when they gave permission,” mobile app security researcher Will Strafach said Wednesday. “There is simply no way the users understood this.”
He said Facebook’s claim that users understood the scope of data collection was “muddying the waters.”
Facebook says fewer than 5 percent of the app’s users were teens and they had parental permission. Nonetheless, the revelation is yet another blemish on Facebook’s track record on privacy and could invite further regulatory scrutiny.

App Appears to Be Available for Android Phones

And it comes less than a week after court documents revealed that Facebook allowed children to rack up huge bills on digital games and that it had rejected recommendations for addressing it for fear of hurting revenue growth.
For now, the app appears to be available for Android phones, though not through Google’s main app store. Google had no comment Wednesday.
Apple said Facebook was distributing Facebook Research through an internal-distribution mechanism meant for company employees, not outsiders. Apple has revoked that capability.
TechCrunch reported separately Wednesday that Google was using the same privileged access to Apple’s mobile operating system for a market-research app, Screenwise Meter. Asked about it by The Associated Press, Google said it had disabled the app on Apple devices and apologized for its “mistake.”
The company said Google had always been “upfront with users” about how it used data collected by the app, which offered users points that could be accrued for gift cards. In contrast to the Facebook Research app, Google said its Screenwise Meter app never asked users to let the company circumvent network encryption, meaning it is far less intrusive.
Facebook is still permitted to distribute apps through Apple’s app store, though such apps are reviewed by Apple ahead of time. And Apple’s move Wednesday restricts Facebook’s ability to test those apps — including core apps such as Facebook and Instagram — before they are released through the app store.
Facebook previously pulled an app called Onavo Protect from Apple’s app store because of its stricter requirements. But Strafach, who dismantled the Facebook Research app on TechCrunch’s behalf, told the AP that it was mostly Onavo repackaged and rebranded, as the two apps shared about 98 percent of their code.

Traffic-Capturing Tools Are Only Supposed to Be for Trusted Partners

As of Wednesday, a disclosure form on Betabound, one of the services that distributed Facebook Research, informed prospective users that by installing Facebook Research, they are letting Facebook collect a range of data. This includes information on apps users have installed, when they use them and what they do on them. Information is also collected on how other people interact with users and their content within those apps, according to the disclosure.

“This is very flagrantly not allowed. It’s mind-blowing how defiant Facebook was acting.” Will Strafach, mobile app security researcher
Betabound warned that Facebook may collect information even when an app or web browser uses encryption.
Strafach said emails, social media activities, private messages and just about anything else could be intercepted. He said the only data absolutely safe from snooping are from services, such as Signal and Apple’s iMessages, that fully encrypt messages prior to transmission, a method known as end-to-end encryption.
Strafach, who is CEO of Guardian Mobile Firewall, said he was aghast to discover Facebook caught red-handed violating Apple’s trust.
He said such traffic-capturing tools are only supposed to be for trusted partners to use internally. Instead, he said Facebook was scooping up all incoming and outgoing data traffic from unwitting members of the public — in an app geared toward teenagers.
“This is very flagrantly not allowed,” Strafach said. “It’s mind-blowing how defiant Facebook was acting.”

DON'T MISS

How About an Honest Conversation About the Range of Light Monument Proposal?

DON'T MISS

UConn Coach Geno Auriemma Breaks NCAA Wins Record With 1,217th Victory

DON'T MISS

Fresno Doctors Will Pay $2.4 Million to Settle Kickback Allegations, DOJ Says

DON'T MISS

Warriors Guard De’Anthony Melton to Undergo Season-Ending Knee Surgery

DON'T MISS

Massive Ground Beef Recall Affects Restaurants Nationwide, USDA Warns

DON'T MISS

Chris Stapleton Wins 4 CMA Awards, but Morgan Wallen Is Entertainer of the Year

DON'T MISS

These Fresno Schools Are Unsafe and in Bad Condition. And No One Is Complaining

DON'T MISS

Putin Says Russia Has Tested a New Intermediate Range Missile in a Strike on Ukraine

DON'T MISS

SEC Chair Gary Gensler, Who Led US Crackdown on Cryptocurrencies, to Step Down

DON'T MISS

Is Fresno Mobile Home Park Controversy Over? Tenants Applaud Federal Judge’s Ruling

UP NEXT

Bomb Cyclone Kills 1 and Knocks Out Power to Over Half a Million Homes Across the Northwest US

UP NEXT

Volunteers Came Back to Nonprofits in 2023, After the Pandemic Tanked Participation

UP NEXT

New Study: Proposed Trump Tariffs Could Cost US Consumers $78 Billion a Year

UP NEXT

Riders Stuck in Midair for Over 2 Hours on Knott’s Berry Farm Ride

UP NEXT

Shouting Racial Slurs, Neo-Nazi Marchers Shock Ohio’s Capital

UP NEXT

More Logging Is Proposed to Help Curb Wildfires in the US Pacific Northwest

UP NEXT

Scientists Fear What’s Next for Public Health if RFK Jr. Is Allowed To ‘Go Wild’

UP NEXT

Warren Slams Biden Admin for Failing to Hold Israel Accountable on Gaza Aid

UP NEXT

Suicides in the US Military Increased in 2023, Continuing a Long-Term Trend

UP NEXT

New FDA Rules for TV Drug Ads: Simpler Language and No Distractions

Warriors Guard De’Anthony Melton to Undergo Season-Ending Knee Surgery

2 hours ago

Massive Ground Beef Recall Affects Restaurants Nationwide, USDA Warns

2 hours ago

Chris Stapleton Wins 4 CMA Awards, but Morgan Wallen Is Entertainer of the Year

2 hours ago

These Fresno Schools Are Unsafe and in Bad Condition. And No One Is Complaining

2 hours ago

Putin Says Russia Has Tested a New Intermediate Range Missile in a Strike on Ukraine

2 hours ago

SEC Chair Gary Gensler, Who Led US Crackdown on Cryptocurrencies, to Step Down

2 hours ago

Is Fresno Mobile Home Park Controversy Over? Tenants Applaud Federal Judge’s Ruling

2 hours ago

Wiggins, Curry Power Warriors to Dominant Win Over Hawks

3 hours ago

Sale and Skubal Claim Cy Young Awards After Historic Pitching Triple Crown Seasons

3 hours ago

What Will Happen to CNBC and MSNBC When They No Longer Have a Corporate Connection to NBC News?

3 hours ago

How About an Honest Conversation About the Range of Light Monument Proposal?

It sometimes seems that we have lost the ability to truly communicate with one another. It is not so much what we say to one another, but ho...

51 minutes ago

51 minutes ago

How About an Honest Conversation About the Range of Light Monument Proposal?

1 hour ago

UConn Coach Geno Auriemma Breaks NCAA Wins Record With 1,217th Victory

1 hour ago

Fresno Doctors Will Pay $2.4 Million to Settle Kickback Allegations, DOJ Says

2 hours ago

Warriors Guard De’Anthony Melton to Undergo Season-Ending Knee Surgery

2 hours ago

Massive Ground Beef Recall Affects Restaurants Nationwide, USDA Warns

2 hours ago

Chris Stapleton Wins 4 CMA Awards, but Morgan Wallen Is Entertainer of the Year

2 hours ago

These Fresno Schools Are Unsafe and in Bad Condition. And No One Is Complaining

2 hours ago

Putin Says Russia Has Tested a New Intermediate Range Missile in a Strike on Ukraine

Help continue the work that gets you the news that matters most.

Search

Send this to a friend