• 288 days Will The ECB Continue To Hike Rates?
  • 288 days Forbes: Aramco Remains Largest Company In The Middle East
  • 290 days Caltech Scientists Succesfully Beam Back Solar Power From Space
  • 690 days Could Crypto Overtake Traditional Investment?
  • 695 days Americans Still Quitting Jobs At Record Pace
  • 697 days FinTech Startups Tapping VC Money for ‘Immigrant Banking’
  • 700 days Is The Dollar Too Strong?
  • 700 days Big Tech Disappoints Investors on Earnings Calls
  • 701 days Fear And Celebration On Twitter as Musk Takes The Reins
  • 703 days China Is Quietly Trying To Distance Itself From Russia
  • 703 days Tech and Internet Giants’ Earnings In Focus After Netflix’s Stinker
  • 707 days Crypto Investors Won Big In 2021
  • 707 days The ‘Metaverse’ Economy Could be Worth $13 Trillion By 2030
  • 708 days Food Prices Are Skyrocketing As Putin’s War Persists
  • 710 days Pentagon Resignations Illustrate Our ‘Commercial’ Defense Dilemma
  • 711 days US Banks Shrug off Nearly $15 Billion In Russian Write-Offs
  • 714 days Cannabis Stocks in Holding Pattern Despite Positive Momentum
  • 715 days Is Musk A Bastion Of Free Speech Or Will His Absolutist Stance Backfire?
  • 715 days Two ETFs That Could Hedge Against Extreme Market Volatility
  • 717 days Are NFTs About To Take Over Gaming?
JEDI Drama Continues With Microsoft Contract Cut

JEDI Drama Continues With Microsoft Contract Cut

Following complaints from tech giants,…

Ransomware Netted Criminals $350M In 2020 Alone

Ransomware Netted Criminals $350M In 2020 Alone

Global ransomware attacks soared in…

Business Opportunities In the New Metaverse

Business Opportunities In the New Metaverse

What exactly is the metaverse?

  1. Home
  2. Tech
  3. Tech News

Chinese App Collects Data On 10 Million Users Without Permission

Data

TCL, a Chinese producer of consumer electronics, has been collecting data without permission from mobile phones that have downloaded its free weather forecast smartphone app. This app has been downloaded more than 10 million times by users around the world since it was released in December 2016.

TCL is a listed company on the Hong Kong and Shenzhen stock exchanges. It is a multinational electronics conglomerate, whose products include television sets, air conditioners, washing machines, refrigerators, and mobile phones.

TCL Communication Technology Holdings, a subsidiary that manufactures smart devices and develops mobile apps, is one of TCL’s core businesses. TCL Communication also owns French phone manufacturer Alcatel and Canadian phone brand Blackberry. In 2016, TCL sold 68.77 million cell phones in 160 countries and regions.

The Wall Street Journal first reported Jan. 2 that Upstream Systems, a London-based security firm, discovered that TCL’s weather app collects user data.

The app in question is “Weather Forecast—World Weather Accurate Radar,” which is designed for Google’s Android system, and is a free download in the Google Play store. It provides weather predictions 21 days into the future, providing estimates on specific weather aspects such as humidity, wind speed, and visibility.

According to App Annie, a smartphone app analytics and marketing data supplier, TCL’s app is among the top five weather apps in about 30 countries, including the United Kingdom and Canada. In the United States, it’s among the top 20. Related: Cautious Optimism Returns On Trade Thaw And Fed Hesitation

Upstream Systems found that TCL’s app collects users’ geographic locations, email addresses, and International Mobile Equipment Identity, a unique ID assigned to each authenticated cell phone, and keeps the data on TCL servers in China.

The security firm also discovered that the weather app surreptitiously subscribed users of TCL’s low-cost Alcatel smartphone in Brazil, Malaysia, Nigeria, and other developing countries to its paid virtual-reality services. About 100,000 Alcatel phones were automatically subscribed, which would have billed the users more than $1.5 million had the firm not discovered it.

After the Wall Street Journal made inquiries to TCL, the company updated the weather app in November 2018. The app stopped automatically subscribing users, according to Upstream. But the data collection continues.

China-Made Apps May Be Unsafe

This isn’t the first time that TCL products brought risks to its users.

In November 2017, Alcatel updated a photo-editing app named “Gallery” (later named “Candy Gallery”), available for download on the Google Play store. Different from the previous version that only asked for access to files in the smartphone, the updated version asked for permission to access device ID information, SMS text messaging, Wi-Fi connection, and other information not related to photo-editing.

Security concerns prompted U.S. company Inseego to terminate an agreement to sell its mobile internet solutions company, Novatel Wireless, to TCL in June 2017, after the Committee on Foreign Investment in the United States, an inter-agency government organization that reviews business deals for potential national security risks, flagged the deal.

In December 2018, Google suspended two Chinese smartphone apps after an internal investigation. The two apps—CM File Manager app developed by Cheetah Mobile Inc. and Keyboard app developed by Kika Tech Inc.—allegedly exploited users’ permissions, allowing the developers to conduct an ad fraud scheme, according to a Wall Street Journal report.

Related: The Biggest Threat To Industrial Metals In 2019

The Indian Times reported in Dec. 2017 that the Indian government asked all army personnel to uninstall 42 Chinese smartphone apps if they had previously installed them.

The apps, available on both Android and iOS (iPhone) systems, collected user data and sent them back to China, according to Indian intelligence agencies. The apps also had the potential to carry out cyber attacks against Indians.

The predecessor to TCL was founded in 1981 by a government mechanical bureau of Huiyang district in Huizhou City, located in China’s Guangdong Province. TCL’s headquarters is still in Huizhou City.

The company was named TKK at the time. TKK produced cassette tapes that closely resembled those made by Japanese electronics firm, TDK. In 1985, TKK was sued by TDK and subsequently changed its name to TCL. Its product line then expanded into telephones and TV sets.

By Zerohedge

More Top Reads From Safehaven.com

Back to homepage

Leave a comment

Leave a comment