Apps Request ‘Dangerous’ Permissions
According to the report from Incogni, online privacy researchers scanned 344 New Year’s resolution apps across 16 categories available on the Google Play Store and found that the majority asked Android users for at least one “dangerous permission.” Dangerous permissions could include a user’s precise GPS location, or the ability to read or modify internal storage, record audio or take photos and videos. “Normal” permissions would allow the app to run on startup, have full network access, or view Wi-Fi connections. “All of the apps we examined request permissions, with 84% requesting at least one dangerous permission,” researchers said. “For example, 74.4% requested permission to read the contents of your USB storage. And going one step further, 66.3% actually requested permission to modify or delete the contents of your USB storage.”
Weight Loss Apps Deemed Least Private
Researchers assigned app categories a “privacy risk score,” determined by how many permissions were requested, how risky they were to a user’s privacy, and the number of advertisers they shared them with. Based on that score, Incogni determined that weight loss apps were by far worse, while apps aiding users with home decoration and renovation, increased exercise, and cutting down on social media followed closely behind. Generally, the more popular the app, the higher the privacy risk score. High-risk categories like weight loss and home improvement had a privacy risk score of about 50, while the most private apps — like quitting smoking or stopping or cutting back on drinking — had scores around 23. Apps geared toward budgeting and saving money or general personal improvement teetered on an average score of around 38.
Permissions Shared with Advertisers
One kicker for these scores, though, is how permissions were shared with advertisers, researchers said. Ad libraries — or Advertisement Software Development Kits (SDKs) — are built into apps by the developers, and send ads to monetize the software. Although these libraries might seem harmless, they can compromise privacy by sharing sensitive permissions across networks, Incogni said. “The trouble lies in how permissions are shared between ad libraries and their host apps. Ad libraries automatically have access to any permissions the host app has. This means that if the app has permission to record audio on your device, for example, any ad libraries (and subsequent ad networks) can do the same.” More than half of the New Year’s resolution apps researchers examined used ad libraries. Of those, six out of ten used one ad library, while the remainder used two, Incogni added. Apps catering to home decoration and renovation, reducing stress, social media reduction, and general personal improvements categories had the highest average ad library count per category, researchers said.
Incogni’s App Privacy Tips
Incogni noted that anyone planning to download a New Year’s resolution app from the Google Play Store should proceed with caution. The study recommends users choose an app with a low privacy risk score and stay away from popular New Year’s resolution-type apps with 500,000 or more downloads. To improve your online privacy, it is important to know the app you are downloading as well as delete the data scattered online about you. Remember, privacy risks do not only affect New Year’s resolution apps but can affect all kinds of apps, such as news apps. You must scrutinize what an app is requesting from you. For instance, if you find that a weight loss app needs your location or access to your camera, do not allow these permissions and delete the app. As far as data deletion tools go, we’ve found that Incogni’s data-deletion tool is the best in class. We also recommend you use one of our top free VPNs this month to throw off various online data-gathering algorithms and stop them from profiling you. The Google Play Store is also no stranger to apps that spread malicious malware. If you’re concerned that an app you’ve downloaded might be malicious, study our mobile spyware guide.
