Study: smartphones from Xiaomi, Realme and other Chinese brands are spying on their owners

A study published by computer scientists from several universities shows that Chinese smartphone manufacturers Xiaomi, OnePlus, Oppo and Realme collect a large amount of sensitive user data through the operating system and applications preinstalled on the device.

The researchers experimented with a number of devices purchased from manufacturers in China and performed network analysis on them to understand how serious the data breach was. The results paint an alarming picture of the state of user privacy in the world’s largest Android marketplace.

Diagram showing execution permissions granted by default to third party packages in each smartphone

The collected personal information (Personally Identifiable Information or PII) includes quite important data: basic information about the user, such as phone numbers and permanent device identifiers (IMEI and MAC addresses, advertising identifiers, etc.) and geolocation data (which obviously reveal the physical location). In addition, social data is also collected: contacts, phone numbers, calls, text and voice messages data. All this indicates that the recipient of such information will have a fairly clear idea of ​​​​who is using a particular device, where he is and with whom he is talking. In China, however, phone numbers are linked to an individual “citizen ID”, meaning that they are inextricably linked to the real and legal identity of the user.

According to the researchers, this data is collected without any notice or consent from the user, and there is no way to opt out. Data collection also does not stop when the device and user leave China, even though different countries have different privacy laws that should affect how a user’s personal information is collected. The researchers found that data was sent to Chinese mobile operators even when they were not providing services (for example, when no SIM card was inserted into the device).

Diagram of important sensitive data – what, with which package and where it is sent

All this raises concerns about widespread surveillance of smartphone users in China. The study’s findings appear to run counter to the August 2021 privacy law, which is supposed to protect Chinese consumers from collecting data without their consent. Gizmodo has reached out to the phone makers involved in the study for comment.

Source: Trash Box

You may also like