abusesaffiliationarrow-downarrow-leftarrow-rightarrow-upattack-typeburgerchevron-downchevron-leftchevron-rightchevron-upClock iconclosedeletedevelopment-povertydiscriminationdollardownloademailenvironmentexternal-linkfacebookfiltergenderglobegroupshealthC4067174-3DD9-4B9E-AD64-284FDAAE6338@1xinformation-outlineinformationinstagraminvestment-trade-globalisationissueslabourlanguagesShapeCombined Shapeline, chart, up, arrow, graphLinkedInlocationmap-pinminusnewsorganisationotheroverviewpluspreviewArtboard 185profilerefreshIconnewssearchsecurityPathStock downStock steadyStock uptagticktooltiptwitteruniversalityweb
Story

27 Mar 2023

Researchers discover that Android devices sold in China collect & distribute sensitive data without user consent

On February 2023, technical researchers from the University of Edinburgh and Trinity College Dublin published a paper analysing the degrees to which data is unknowingly transmitted from Android smartphones originating from China. They focused on devices sold by three of the most popular vendors in the country--OnePlus, Xiaomi and Oppo Realme--knowing that China has the largest number of Android smartphone users in the world.

By using a combination of static and dynamic code analysis techniques, they found that an "alarming number of preinstalled system, vendor and third-party apps are granted dangerous privileges." Privacy sensitive information related to the device, its geolocation, the user profile, and call history is being transmitted without prior consent or notification. This information is being sent to the device vendor, service operators and the mobile network operators. These findings have strong implications for the right to privacy and freedom of expression.

Notably, this information continues to be collected and distributed when the user leaves China, affecting Chinese diaspora communities and human rights defenders who are carrying out their work abroad.

The media outlet The Register asked OnePlus, Xiaomi, and Oppo Realme to comment but they did not.

On March 2023, the Business & Human Rights Resource Centre invited Google to respond to these allegations on 20 March 2023, but the company did not respond. Google is the developer of Android.

Privacy information

This site uses cookies and other web storage technologies. You can set your privacy choices below. Changes will take effect immediately.

For more information on our use of web storage, please refer to our Data Usage and Cookies Policy

Strictly necessary storage

ON
OFF

Necessary storage enables core site functionality. This site cannot function without it, so it can only be disabled by changing settings in your browser.

Analytics cookie

ON
OFF

When you access our website we use Google Analytics to collect information on your visit. Accepting this cookie will allow us to understand more details about your journey, and improve how we surface information. All analytics information is anonymous and we do not use it to identify you. Google provides a Google Analytics opt-out add on for all popular browsers.

Promotional cookies

ON
OFF

We share news and updates on business and human rights through third party platforms, including social media and search engines. These cookies help us to understand the performance of these promotions.

Your privacy choices for this site

This site uses cookies and other web storage technologies to enhance your experience beyond necessary core functionality.