- FBI warns that Chinese apps may expose sensitive user data
- Apps can collect contacts and personal information beyond usage
- Users advised to limit permissions and update devices regularly
The FBI is warning American citizens that using mobile apps developed by Chinese companies could put their sensitive data at risk, as well as the data of their friends, family, and others in their contacts list.
In a new PSA, the FBI said apps maintaining digital infrastructure in China are subject to the country’s national security laws which enable the government to access mobile app user data.
“Users should be aware of what user data these apps request access to upon download,” the PSA reads. “When access is permitted by the user, the app can persistently collect data and users' private information throughout the device, not just within the app or while the app is active.”
What to do instead
The FBI singled out three specific issues things: the fact that some apps offer the option to invite friends and contacts, the fact that some apps tell their users where collected personal information is being stored, and that some apps might contain information-stealing malware.
Those that offer invites, if installed with default permissions, might collect data on user’s address books, including people’s names, email addresses, and phone numbers.
“This permission gives the apps access to a host of personal information belonging to both users and non-users in their contact lists,” the FBI warned.
Although the FBI did not explicitly advise against using Chinese-made apps, it did say users should disable “unnecessary” data sharing, only download verified apps from official app stores, and change their passwords regularly. Furthermore, they are advised to regularly update their devices, and read the terms of service and end-user license agreements before downloading apps.
According to appfigures.com, top apps in the US for Android right now are:
1. ChatGPT (US-built)
2. TikTok Lite (headquartered in Singapore and Los Angeles, but Chinese app in general)
3. WhatsApp (US-built)
4. Temu (Chinese-built)
5. TikTok (same as TikTok Lite)
6. PDF & Launcher for Android (Hong Kong)
7. Monopoly Go!Chat (US-built)
8. The White House app (US-built)
9. Instagram (US-built)
10. Whatnot (US-built)
On iOS, the list is almost the same, with a few notable differences. It includes a game by Ta Ta Game Technology Limited, an app developer company that does not state where it’s from, at all, as well as a game by a Turkish developer.
Via BleepingComputer
