Candy Crush, Tinder, MyFitnessPal: See the Thousands of Apps Hijacked to Spy on Your Location
A hack of location data company Gravy Analytics has revealed which apps are—knowingly or not—being used to collect your information behind the scenes.
This doesn't look like they hijacked the apps to spy on users' location. It looks to me like these apps were already illegitimately collecting location data and passing it to Gravy Analytics where it was sold to the highest bidder. If I'm interpreting this article correctly, the hackers only hijacked Gravy Analytics so they could get the location data without paying. The location data was already in the malicious hands of Gravy Analytics.
But it seems rather nebulous. Many of the app developers' quoted responses in the article seem to be blatant lies, which the article disproves. Many of the app developers deny handing over location data, but do run ads. If those ads execute arbitrary javascript, then IP geolocation is easy. I don't know how cookies/tracking would work for in-app ads, though.
The developers probably fall into the "incompetence" bucket, and were also ignorant to the full effect of serving ads
There are quite a few apps in there I wasn't expecting. Guess you just can't trust proprietary adware, huh.
Short of deleting the offending apps and not using them, how can you protect yourself from the data collection of the app?
Protective DNS, when set up with a DNS provider that blocks known ad / tracking domains, would help with that. NextDNS, Control-D, and Mullvad all offer this service, for example.
What others said and give permissions on a "need to know basis"
paywall fucking bullshit edit: got through it, here's the list of apps : https://docs.google.com/spreadsheets/d/1Ukgd0gIWd9gpV6bOx2pcSHsVO6yIUqbjnlM4ewjO6Cs/edit?gid=1257088277#gid=1257088277
paywall fucking bullshit
If it says "You’ve read your last complimentary article this month.", clearing cookies and other site data should help.
Crazy. These are the apps that bundle location and network scraping libraries. Those libraries not only gather location data (GPS or network based) but also spy on your surrounding wifis, bluetooth beacons and cell towers.
This allows the distributors to build huge databases that allow to locate things without GPS, just cell networks.
This is actually really useful and I encourage people to help improve this. Use NeoStumbler and collect such data. It is all opensource and will be processed to not allow such tracking. But it will allow geolocation privately, for everyone.
Ironically people are already doing this all the time, and not privately at all.
Is there something like NeoStumbler for iOS?
I mean there is no way to use the database on iOS
But no, afaik there is also no Stumbler. Apps need quite some extended privileges to work well, might be restricted
Well... apple itself does this (and btw apples location data is actively scraped. Really poorly protected) but no other app can do it likely
