Facebook has been covertly collecting deeply personal information from a number of popular apps, often without users’ knowledge
At least 11 popular apps have been sending the data to Facebook, including period-tracking app Flo Period & Ovulation Tracker, real estate app Realtor, and Instant Heart Rate: HR Monitor, a Wall Street Journal investigation found.
The apps collected highly sensitive data, which ranged from things like users’ average weight and height to their blood pressure, ovulation cycles and pregnancy status.
In some cases, the ‘highly sensitive information’ is sent to Facebook mere seconds after it’s entered into the app – even if the user doesn’t have an account on the social media network, according to the Journal.
Facebook can collect the data as a result of its Software Development Kit (SDK), a set of open source software tools that can be used by developers to create apps.
Apps use Facebook’s SDK to build their software and, in exchange, Facebook often gets access to data those apps collect, for the purpose of targeting ads.
It marks the latest in a litany of recent privacy scandals for Facebook, which have cratered its two billion-plus users’ trust in the site and raised questions over the need for regulators to rein in the social media giant.
The Wall Street Journal tested more than 70 apps and found that at least 11 apps sent highly sensitive information to Facebook.
The apps often fail to alert users that the data is being shared with Facebook.
While users can control how apps collect data from their device, such as location, contacts or cookies, they have no way of stopping them from sharing sensitive data recorded in the apps with third parties such as Facebook.
For the investigation, the Journal used software to monitor the internet communications transmitted by the app and worked with a privacy software company, Disconnect, to test some of the apps.
They found that at least six of the top 15 health and fitness apps shared personal information with Facebook.
‘This is a big mess,’ Patrick Jackson, chief technology officer at Disconnect, told the Journal.
‘This is completely independent of the functionality of the app.’
Among the cases it found, Instant Heart Rate: HR Monitor transmitted a user’s heart rate to Facebook within seconds of it being recorded, while Flo told Facebook when a user was ovulating or hoped to get pregnant.
Additionally, the Realtor.com app told Facebook the location and price of home listings viewed by users.
The Android version of ‘Better Me: Weight Loss Workouts’ was sending users’ weights and heights to Facebook, the Journal said.
Source: dailymail
22 thoughts on “Facebook, Apps Secretly Share ‘Highly Sensitive’ Data Without Users’ Consent”