The Ring Doorbell App reportedly sends a lot of data to third-party trackers

-

Making your home smarter will nearly always compromise on privacy in some ways, no matter how mundane that product may be. A smart home assistant such as the Google Home or Amazon Echo will undoubtedly be an aid in any home in some ways; but for many, the privacy trade-offs simply aren’t worth it. But that’s to be expected from a device that’s so integrated into your home with an always-polling microphone. But can privacy concerns crop up for a more mundane household object, such as a doorbell? As it turns out, the official app for Ring Doorbells has a lot of third-party trackers, according to a report by the Electronic Frontier Foundation.

The EFF found that the Ring app for Android was sending a lot of data in bits and pieces to four different analytic and marketing companies. The data includes names, private IP addresses, mobile network carriers, persistent identifiers, and sensor data from paying customers. While none of this information can be paired individually to a singular user, the overall data creates a unique fingerprint for a device that can be combined and used to track a given user. Personally-Identifying Information was found to be sent to branch.io, mixpanel.com, appsflyer.com, and facebook.com.

When the Ring Doorbell app is opened, even if the user does not have a linked Facebook account on-device, Facebook receives data when you open and close the Ring app and under certain device conditions such as locking due to device inactivity. Also received by Facebook is data on time zone, device model, language preferences, screen resolution, and a unique identifier.

Branch (self-described as a “deep-linking” platform), meanwhile, receives unique identifiers along with the device’s local IP, model, screen resolution, and DPI. AppsFlyer also gets information such as in-app actions like visiting the “Neighbours” section of the app, and other data such as mobile carrier, data related to Ring app’s first installation and subsequent launches, unique identifiers, and whether AppsFlyer tracking came pre-installed. Companies can pre-install bloatware in order to offset some production costs of a smartphone, thus resulting in a lower price for the consumer at the cost of privacy. AppsFlyer even gets more in-depth sensor data such as magnetometer, gyroscope, and accelerometer.

However, MixPanel gets the most information by far. Users’ full names, email addresses, device information such as OS version and model, whether Bluetooth is enabled, and app settings such as the number of locations a user has Ring devices installed in, are all collected and reported to MixPanel. MixPanel also gets a mention in Ring’s list of third-party services, but Facebook, Branch, and AppsFlyer do not.

As you can see, a lot of data is being sent to third parties, and the extent of the data being shared is not disclosed by Ring. The data was collected via intercepting traffic sent from a device with the Ring Doorbell application installed. AFWall+ was used to block all other apps on the device from communicating with the internet, to remove any unnecessary noise. The app was found to be trying very hard to elude analysis, but the team at the EFF was eventually able to bypass its safeguards regardless.

Source: EFF

The post The Ring Doorbell App reportedly sends a lot of data to third-party trackers appeared first on xda-developers.



Comments

Post a Comment

Popular posts from this blog

Honor 20 Pro is Now Available in 14 Countries

-
Image
The Honor 20 was off to a really rocky start with the controversial U.S.A. ban on HUAWEI. While the future of the phone was initially unclear, the planned launch of the phone is now in full swing. As this phone’s complicated launch slowly starts to be available around the world, here are all the places where you can get an Honor 20 Pro.   Country Availability Date Selling Channel Russia 2019/8/2 DNS . MTS, GB 2019/8/1 Amazon.uk , CPW , o2, H3G France 2019/8/22 Amazon, Boulanger, Cdiscount, Darty, FREE, Fnac. Orange, SFR. Offline [HONOR Shop Paris & Lyon] German 2019/7/21 MSD, 1&1 mobile, Amazon , Mediamarket/ phonehouse Netherlands 2019/7/31 bol.com , Belsimpel Czechia 2019/8/15 Alza Finland 2019/8/13 ELsia DNa Poland 2019/8/8 RTV EURO AGD , X-Kom Malaysia 2019/8/15 HiHonor , Shopee . Offline [all HONOR stores in Malaysia] Saudi Arabia 2019/7/31 Pre-sell 2019/8/6 First day sale HiHonor Egypt 2019/7/29 Pre-s...
Read more

Motorola’s foldable Razr phone may be announced before year’s end

-
While Samsung’s saga with the Galaxy Fold appears to finally be coming to an end , there are other foldables destined to be released soon. The Huawei Mate X is the other big name, but it has been delayed a couple of times as well. The other foldable device that we’ve heard about a few times is the rumored Motorola Razr reboot, and a new report claims an announcement is coming this year still. Earlier this year, reports suggested Motorola would launch its foldable phone this summer. That time has come and gone without a peep from Motorola, but a new report claims it’s still coming this year. This information comes from a person close to the company speaking to CNET . It’s unlikely that the device will actually be sold this year, but we should at least see the device before 2020. Motorola has already confirmed that they are working on a foldable smartphone. The “Razr” name was also confirmed by a Bluetooth certification. We exclusively reported on the specifications of the device ,...
Read more

Behind Dynamic System Updates in Android Q: How Google is using Project Treble to improve future Android releases

-
Image
Alongside the release of Android 8.0 Oreo, Google unveiled Project Treble : a major rearchitecting in the way the Android OS framework and the vendor HALs and Linux kernel communicate. Treble is a major initiative designed to reduce Android platform version and security patch fragmentation , and all Android-branded devices launching with Android Pie are required to support Project Treble. OEMs and vendors test Treble compatibility by booting a Generic System Image (GSI)—a pure stock build of Android from AOSP—and passing the Vendor Test Suite (VTS) and Compatibility Test Suite-on-Generic System Image (CTS-on-GSI). The GSI has proven useful in not only allowing software engineers working for OEMs test Treble compatibility, but it has also opened the door for a large custom ROM community on XDA. For the Android Q release, Google wants to make GSIs useful for another group: app developers. Since the first stable release and source code drop of any given Android platform release usual...
Read more