• 16 hours Low Prices Plague Beleaguered Lithium Miners
  • 1 day Is This The Big Biotech Bust?
  • 2 days Funding Is The Biggest Hurdle For Clean Energy
  • 2 days Walmart Reaches Out To Chilean Government For Protection
  • 3 days The Most Exciting Gold Find Of The Decade
  • 3 days Mining Boom Sparks Deforestation Concerns
  • 3 days The Cannabis Culling Has Wall Street Disappointed
  • 4 days Vigilante Offers $100,000 Bounty To Hack Banks
  • 4 days The Dairy Industry Is Dying
  • 5 days The Most Impressive Electric Vehicle Of The Year
  • 6 days Gold Miners Are Having A Stellar Second Half
  • 7 days How 3D Printing Is Turning Each And Every Industry On Its Head
  • 7 days Is The $3.5 Trillion Healthcare Industry About To Get Much More Transparent?
  • 7 days Gamblers Are Betting Big On Trump’s Impeachment
  • 8 days Even Banks Can't Answer Aramco's Trillion Dollar Question
  • 8 days Will Bezos Buy The Seattle Seahawks?
  • 9 days 6 Tech Trends Transforming The Travel Industry
  • 9 days Ousted Uber CEO Cashes Out $500 Million In Stock
  • 10 days Trump Prepares For Another Key Tariff Decision
  • 10 days The Free Money Bubble Is About To Burst
Ousted Uber CEO Cashes Out $500 Million In Stock

Ousted Uber CEO Cashes Out $500 Million In Stock

Ousted Uber co-founder Travis Kalanick…

6 Tech Trends Transforming The Travel Industry

6 Tech Trends Transforming The Travel Industry

Greener and leaner transportation is…

  1. Home
  2. Tech
  3. Tech News

Chinese App Collects Data On 10 Million Users Without Permission

Data

TCL, a Chinese producer of consumer electronics, has been collecting data without permission from mobile phones that have downloaded its free weather forecast smartphone app. This app has been downloaded more than 10 million times by users around the world since it was released in December 2016.

TCL is a listed company on the Hong Kong and Shenzhen stock exchanges. It is a multinational electronics conglomerate, whose products include television sets, air conditioners, washing machines, refrigerators, and mobile phones.

TCL Communication Technology Holdings, a subsidiary that manufactures smart devices and develops mobile apps, is one of TCL’s core businesses. TCL Communication also owns French phone manufacturer Alcatel and Canadian phone brand Blackberry. In 2016, TCL sold 68.77 million cell phones in 160 countries and regions.

The Wall Street Journal first reported Jan. 2 that Upstream Systems, a London-based security firm, discovered that TCL’s weather app collects user data.

The app in question is “Weather Forecast—World Weather Accurate Radar,” which is designed for Google’s Android system, and is a free download in the Google Play store. It provides weather predictions 21 days into the future, providing estimates on specific weather aspects such as humidity, wind speed, and visibility.

According to App Annie, a smartphone app analytics and marketing data supplier, TCL’s app is among the top five weather apps in about 30 countries, including the United Kingdom and Canada. In the United States, it’s among the top 20. Related: Cautious Optimism Returns On Trade Thaw And Fed Hesitation

Upstream Systems found that TCL’s app collects users’ geographic locations, email addresses, and International Mobile Equipment Identity, a unique ID assigned to each authenticated cell phone, and keeps the data on TCL servers in China.

The security firm also discovered that the weather app surreptitiously subscribed users of TCL’s low-cost Alcatel smartphone in Brazil, Malaysia, Nigeria, and other developing countries to its paid virtual-reality services. About 100,000 Alcatel phones were automatically subscribed, which would have billed the users more than $1.5 million had the firm not discovered it.

After the Wall Street Journal made inquiries to TCL, the company updated the weather app in November 2018. The app stopped automatically subscribing users, according to Upstream. But the data collection continues.

China-Made Apps May Be Unsafe

This isn’t the first time that TCL products brought risks to its users.

In November 2017, Alcatel updated a photo-editing app named “Gallery” (later named “Candy Gallery”), available for download on the Google Play store. Different from the previous version that only asked for access to files in the smartphone, the updated version asked for permission to access device ID information, SMS text messaging, Wi-Fi connection, and other information not related to photo-editing.

Security concerns prompted U.S. company Inseego to terminate an agreement to sell its mobile internet solutions company, Novatel Wireless, to TCL in June 2017, after the Committee on Foreign Investment in the United States, an inter-agency government organization that reviews business deals for potential national security risks, flagged the deal.

In December 2018, Google suspended two Chinese smartphone apps after an internal investigation. The two apps—CM File Manager app developed by Cheetah Mobile Inc. and Keyboard app developed by Kika Tech Inc.—allegedly exploited users’ permissions, allowing the developers to conduct an ad fraud scheme, according to a Wall Street Journal report.

Related: The Biggest Threat To Industrial Metals In 2019

The Indian Times reported in Dec. 2017 that the Indian government asked all army personnel to uninstall 42 Chinese smartphone apps if they had previously installed them.

The apps, available on both Android and iOS (iPhone) systems, collected user data and sent them back to China, according to Indian intelligence agencies. The apps also had the potential to carry out cyber attacks against Indians.

The predecessor to TCL was founded in 1981 by a government mechanical bureau of Huiyang district in Huizhou City, located in China’s Guangdong Province. TCL’s headquarters is still in Huizhou City.

The company was named TKK at the time. TKK produced cassette tapes that closely resembled those made by Japanese electronics firm, TDK. In 1985, TKK was sued by TDK and subsequently changed its name to TCL. Its product line then expanded into telephones and TV sets.

By Zerohedge

More Top Reads From Safehaven.com

Back to homepage

Leave a comment

Leave a comment