🚨EFF Warns: SDKs Share Your Location Data With Advertisers
Your App's SDK Might Be Spying on You
TL;DR
The Electronic Frontier Foundation warns that advertising SDKs in apps share users' precise location data with third parties, including advertisers and government agencies. Two Android apps with 60 million downloads are involved.
The EFF has issued a warning about how some app developers inadvertently expose user location data through third-party SDKs. When granting permission for an app to access your location, you're also giving these SDKs carte blanche to collect and share this information with advertisers and even government entities. Two Android apps boasting 60 million downloads each were found quietly sharing users' precise location data. This issue highlights the need for better transparency in how developers manage permissions and third-party integrations.
Key Points
Two Android apps with over 60 million downloads were found sharing precise location data through their SDKs
Advertising SDKs inherit app permissions and collect location data unless explicitly disabled by developers
Data brokers sell collected user information to militaries, governments, and intelligence agencies
The EFF's findings cover a small percentage of the broader advertising ecosystem but reach billions of users across tens of thousands of apps
There are currently no SDK-specific location permissions to prevent unauthorized data sharing
Why It Matters
If you're developing an app with third-party integrations like advertising SDKs, be aware that user consent for location access is not enough. Developers need to actively disable or restrict SDKs from collecting sensitive information by default. This affects millions of users and raises significant privacy concerns.
Frequently Asked Questions
Why does this matter?
If you're developing an app with third-party integrations like advertising SDKs, be aware that user consent for location access is not enough. Developers need to actively disable or restrict SDKs from collecting sensitive information by default. This affects millions of users and raises significant privacy concerns.
What happened?
The Electronic Frontier Foundation warns that advertising SDKs in apps share users' precise location data with third parties, including advertisers and government agencies. Two Android apps with 60 million downloads are involved.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.