Top Android Phones From China are Packed With Spyware, Research Finds

upstart writes:

A recent study shows that top-of-the-line Android phones sold in China are a total privacy nightmare:

New research suggests that users of top-of-the-line Android devices sold in China are getting their personal data pilfered left, right and center, according to new research. The collection, which is happening without notification or consent, could easily lead to the persistent tracking of users and the easy unmasking of their identities.

A study published by computer scientists at several different universities reveals that phone makers like Xiamoi, OnePlus, and Oppo Realme, some of the most popular in China, are all collecting massive amounts of sensitive user data via their respective operating systems, as are a variety of apps that come pre-installed on the phones. The data is also getting hoovered up by an assortment of other private actors, and researchers worry that the devices in question "send a worrying amount of Personally Identifiable Information (PII) not only to the device vendor but also to service providers like Baidu and to Chinese mobile network operators." Given private industry's close relationship with the Chinese government, it's more than enough to raise the specter of broader surveillance concerns for mobile users in China.

The PII being collected includes pretty sensitive stuff, including basic user information like phone numbers and persistent device identifiers (IMEI and MAC addresses, advertising IDs, and more), geolocation data (which, obviously, would allow an observer to unmask your physical location), and data related to "social connections"-such as contacts, their phone numbers, and phone and text metadata, the study found. In other words, the recipients of this data would have a pretty clear picture of who is using a particular device, where they are doing it, and who they're talking to. Phone numbers in China are also tied to an individual "citizen ID," meaning that it's inextricably tied to the user's real, legal identity.

Read more of this story at SoylentNews.