For years, conspiracy theories about smart phones listening to users without their permission to show them advertisements have abounded.
While some researchers have shown this could happen, a first of its kind study just found something far more insidious. Academics at Northeastern University have just proven that your phone is recording your screen - as in taking video - and uploading it to third parties.
For the last year, Elleen Pan, Jingjing Ren, Martina Lindorfer, Christo Wilson, and David Choffnes ran an experiment involving more than 17,000 of the most popular Android apps using ten different phones. Their findings were alarming, to say the least.
As Gizmodo points out, during the study, the researchers started to see that screenshots and video recordings of what people were doing in apps were being sent to third-party domains. For example, when one of the phones used an app from GoPuff, a delivery start-up for people who have sudden cravings for junk food, the interaction with the app was recorded and sent to a domain affiliated with Appsee, a mobile analytics company. The video included a screen where you could enter personal information - in this case, their zip code.
GoPuff did not disclose in its terms of use that its app was recording users screens and uploading this data to a third party. What’s more, when they were contacted by the researchers GoPuff merely added a disclosure to their policy acknowledging that “ApSee” might receive users PII.
The fact that these apps can record your screen without you knowing and use this data is chilling. It illustrates how easy it would be for a malicious actor to be able to look at your private messages, personal information, passwords, photos, and videos. None of this is stopped by your phone’s security either as it is a function built into the apps and you don’t have an option to disallow it.
