Privacy defects - These Android apps secretly copy screen content

US researchers have investigated whether smartphone apps secretly listen to users via the microphone. It turned out that some apps recorded the screen content during use and send it to developers.

Researchers at Northeastern University in Boston, Massachusetts, tested a total of 17,260 of the most popular Android apps in 2017. Actually, to find out if they make unwanted audio recordings and secretly send them to strangers. Among the apps were more than 8,000 who transferred their data to Facebook. Around 9,000 apps wanted permission to use the smartphone's camera and microphone. No app was caught listening.

But the researchers discovered apps that recorded the screen content of a user when using the app and send these images to other servers.

Log-ins, passwords and credit card details copied

An example is also called "GoPuff", the app of a delivery service. It contains the analysis software "Appsee". This secretly sends screen content to the company's servers. These contain personal information, such as postal code of the user. However, other data such as logins, passwords or credit card information can also be recorded.

App developers can exclude certain areas in their app from being recorded. At the same time, these developers must inform their users that recordings are taking place. "GoPuff" does not use this option and does not alert users.

Google checks the process

Only after a contact of the researchers, the developers removed the analysis software from their app. It is unclear how many other apps are still using this software.

Now Google wants to take a closer look at this process. A spokesperson told Giga.de that they work with developers to make sure that users are accurately informed. Google Play Store policies dictate that developers must inform their users how their data is recorded.

Please take care what you install!!