Android Apps Are Leaking Users’ Geolocation Data

Experts at the Electronic Frontier Foundation (EFF) have discovered that developers of mobile apps for the Android operating system have been sharing users’ precise geolocation data with advertisers and data brokers without their knowledge. This serious issue once again highlights the urgency of privacy and security concerns in today’s digital environment. As TechCrunch.com reports .

Many apps need precise location data to perform their core functions. For example, it is natural for weather apps to request users’ coordinates to provide local forecasts, or for fitness apps to track running routes. However, according to information published by TechCrunch, the problem lies not in the apps’ functions themselves but in the third-party software development kits (SDKs) embedded in them.

The Hidden Risks of Advertising SDKs

The EFF study notes that most developers integrate advertising SDKs into their apps to generate revenue. However, this code runs actively by default and, unless a developer specifically disables it, inherits all permissions granted to the main app, including the user’s precise location data.

Most developers are not even aware that their users’ private coordinates are being transmitted to third parties through their apps. Companies that create SDKs, meanwhile, have a commercial incentive to collect more data, putting users’ privacy at risk.

Where Is the Data Going, and What Are the Consequences?

According to the EFF’s analysis, collected location history is sent to data brokers, who in turn sell it to government agencies, law enforcement bodies, and military organizations. The theft or leakage of such sensitive databases into the hands of cybercriminals also poses a major threat to user safety.

Experts say that although such SDKs represent a small part of the advertising market, they reach billions of users through tens of thousands of apps. In particular, two Android apps examined by the EFF that secretly shared users’ locations had been downloaded more than 60 million times combined.

Researchers say the Android ecosystem has no separate location permissions specifically for SDKs. In other words, once a user allows an app to access their location, that data is automatically exposed to all third-party advertisers as well. The EFF is urging developers to disable unnecessary data-collection features wherever possible.