by Tom Kaneshige

9 iPhone-iPad Apps That Invade Your Privacy, and 1 That Doesn’t

News
Jan 29, 20137 mins
Mobile SecuritySmall and Medium BusinessiPhone

Most iPhone and iPad apps appear harmless and fun, but don't fall for them. Some apps are virtual Trojan horses that swipe personal data when you're not looking. Appthority has put together a list of some of the worst offenders and you may be shocked to learn that a couple of the most popular apps made the list, such as Facebook and Angry Birds Star Wars. Be sure to check out the app at the end of the list for the one most honest.

“When we’re looking to download the latest mobile app, we’re generally not thinking about what it will do with our personal information. But many apps collect user information and share it with third parties, such as ad networks and analytics companies, in order to make a profit. They often access contact lists and calendar details, track our location and more. Plus, as many of us start using our own mobile devices for work use, we’re putting company data at risk simply from the apps we’ve already downloaded. As more people bring their own mobile devices and apps into the workplace, security and education on app risk will become increasingly important.”- Domingo Guerra, President & Co-founder, Appthority

StoneWater Church

StoneWater Church app

What it does: Religion-based apps promise to make daily deliveries of truth. StoneWater Church (free) gives “life-changing messages of Jesus Christ” over the iPhone and iPad. But I wouldn’t have too much faith in the privacy and security of this app.

What are the risks: • Not compiled as a Position Independent Executable (PIE), which could expose the app to memory corruption attacks. • Uses Google Maps (location tracking) and transmits source or destination location values unencrypted via HTTP. • Can access a user’s Location, Calendar and Contacts Book. • Includes file paths to source code files in debug information, stored within the app’s executable. These file paths often include usernames or other information related to the app developer or development company.

WhatsApp Messenger

WhatsApp Messenger

What it does: This popular messaging app, which lets users send free instant messages to other smartphones, disappeared from the App Store earlier this month. We’re not sure why. But one thing is certain: It was a risky app.

What are the risks: • Sends some sensitive data in clear text (no encryption). • Can access a user’s Location and Contacts Book. • Sends some sensitive data in clear text (no encryption). • Has ability to read SMS message body. • Has access to location data from FourSquare and Google Maps.