The latest versions of iOS and Android operating systems have built-in mechanisms that block individual applications access to private data users. It turns out, however, that it is darkest under the lantern. Or at least when it comes to Google and Android.
“What Data Do The Google Dialer and Messages Apps On Android Send to Google?” By prof. Douglas J. Leith from Trinity College Dublin shows that two popular applications from Mountain View companies collected and then sent to servers sensitive user data – without their consent or even informing them about this fact.
It’s all about the Google News apps and Google phonewhich are installed by default on most Android smartphones. As Leith explains, both tools collect data and then send it to Google Play Services Clearcut and Google Firebase Analytics.
What information is it exactly? In the case of SMS, the application collects and transmits data on the time of sending the message and the phone number. On the other hand, in the case of voice calls, the length of the conversation and the number of the caller are recorded. Similar data on smartphone users is also collected by the Google News application.
The author of the report points out that the fact of collecting is particularly disturbing SMS body hashes (SHA256). According to Leith, in theory such metadata could be used to decode short text messages, although it would of course be extremely difficult.
It is worth noting that not only were Google customers not informed about the fact of being “tracked” by two popular applications, but they were also unable to block the collection and sending of data about them. Moreover, this data cannot be retrieved with Google Takeout services. The company played a dangerous game with customers, which may end with the EU imposing a fine on the giant.
Google knows about the problem. The company promises change
The author of the report came across his discovery in November 2021. Leith himself decided to contact Google first and give the giant time to react. As Douglas Leith explains, the company promised to take care of the case, and the manufacturer’s applications will clearly inform users about the collected data and the fact that it is sent to Google’s servers.
So far, however, the company has not lived up to these promises. Douglas Leith decided to publish the report to persuade the Mountain View giant to take the necessary action.
***
The latest news from Ukraine in Ukrainian
Source: Gazeta
Ricardo is a renowned author and journalist, known for his exceptional writing on top-news stories. He currently works as a writer at the 247 News Agency, where he is known for his ability to deliver breaking news and insightful analysis on the most pressing issues of the day.
