More than three in four Android apps contain at least one third-party âtrackerâ, according to a new analysis of hundreds of apps.
The study by French research organisation Exodus Privacy and Yale Universityâs Privacy Lab analysed the mobile apps for the signatures of 25 known trackers, which use various techniques to glean personal information about users to better target them for advertisements and services.
Among the apps found to be using some sort of tracking plugin were some of the most popular apps on the Google Play Store, including Tinder, Spotify, Uber and OKCupid. All four apps use a service owned by Google, called Crashlytics, that primarily tracks app crash reports, but can also provide the ability to âget insight into your users, what theyâre doing, and inject live social content to delight themâ.
Other less widely-used trackers can go much further. One cited by Yale is FidZup, a French tracking provider with technology that can âdetect the presence of mobile phones and therefore their ownersâ using ultrasonic tones. FidZup says it no-longer uses that technology, however, since tracking users through simple wifi networks works just as well.
The Yale researchers said: âFidZupâs practices closely resemble those of Teemo (formerly known as Databerries), the tracker company that was embroiled in scandal earlier this year for studying the geolocation of 10 million French citizens, and SafeGraph, who âcollected 17tn location markers for 10m smartphones during [Thanksgiving] last yearâ. Both of these trackers have been profiled by Privacy Lab and can be identified by Exodus scans.â
Yale Privacy Lab is using its research to call on developers, as well as Google, âfor increased transparency into privacy and security practice as it relates to these trackers.â
The researchers added: âAndroid users, and users of all app stores, deserve a trusted chain of software development, distribution, and installation that does not include unknown or masked third-party code.
âScholars, privacy advocates and security researchers should be alarmed by the data, and can provide further analysis now that these findings and the Exodus platform have been made public.â
Although Yale didnât examine iOS apps, the company warns that the situation may be no better on Appleâs App Store. âMany of the same companies distributing Google Play apps also distribute apps via Apple, and tracker companies openly advertise Software Development Kits (SDKs) compatible with multiple platforms,â said the researchers. âThus, advertising trackers may be concurrently packaged for Android and iOS, as well as more obscure mobile platforms.â