abusesaffiliationarrow-downarrow-leftarrow-rightarrow-upattack-typeburgerchevron-downchevron-leftchevron-rightchevron-upClock iconclosedeletedevelopment-povertydiscriminationdollardownloademailenvironmentexternal-linkfacebookfiltergenderglobegroupshealthC4067174-3DD9-4B9E-AD64-284FDAAE6338@1xinformation-outlineinformationinstagraminvestment-trade-globalisationissueslabourlanguagesShapeCombined Shapeline, chart, up, arrow, graphLinkedInlocationmap-pinminusnewsorganisationotheroverviewpluspreviewArtboard 185profilerefreshIconnewssearchsecurityPathStock downStock steadyStock uptagticktooltiptwitteruniversalityweb

这页面没有简体中文版本,现以English显示

文章

12 六月 2025

作者:
Kevin Collier. NBC News

Free VPN apps allegedly sharing user data with Chinese government, watchdog report warns

"Your VPN could be giving your browsing data to China, watchdog says", 12 June 2025

Using a free app to hide your internet traffic? The company behind it could be quietly tied to China, where the government maintains the ability to surveil all user data, according to a report published... by the Technology Transparency Project.

The report accuses 17 Apps — six on Apple’s App Store, four on the Google Play Store and seven on both — of having undisclosed ties to China. In several cases, the TTP linked the app developers to a prominent Chinese cybersecurity company, Qihoo 360, which is under U.S. government sanctions.

The apps are all virtual private networks, or VPNs, which allow a user to divert their internet traffic through a company’s internet connection. With names like VPNify, Ostrich VPN and Now VPN, none of them make overt references to China or Chinese ownership on the app stores.

VPNs are primarily used to either protect a user’s privacy by making it harder for a website to know who’s visiting them, or to skirt around censorship measures. But unless a VPN company takes significant steps to automatically and permanently delete its users’ search histories, a company is likely to keep records of its customers’ internet activity.

That is particularly notable if the company is Chinese, as national law there stipulates that intelligence and law enforcement agencies do not need a warrant to view any personal data that is stored there.

...

Justin Sherman, a nonresident senior fellow at the Atlantic Council who studies data privacy, told NBC News that using a Chinese-owned VPN would be tantamount to handing over one’s browsing history to Beijing.

...

The TTP, a tech-focused arm of the Campaign for Accountability, an investigative nonprofit that seeks to expose “corruption, negligence, and unethical behavior,” previously published a report on Chinese VPN apps on April 1. Apple soon took down three of the apps with alleged ties to Qihoo 360: Thunder VPN, Snap VPN and Signal Secure VPN. The other apps — Turbo VPN and VPN Proxy Master, which are also available on the Google Play Store, as well as three others that Google offers — are all still available.

None of the apps are listed as being developed directly by Qihoo 360. Instead, they are developed by Singapore-based companies, including Lemon Seed, Lemon Clove, Autumn Breeze and Innovative Connecting. The TTP cited business filings in China that show Qihoo 360 saying it had acquired those companies in 2019 and corporate registration documents for those companies in the Cayman Islands from March that all list the director as a Chinese citizen who is a top Qihoo 360 employee.

NBC News approached developers listed for the 17 apps. Only two claimed not to have ties to China or Qihoo 360. Autumn Breeze, the developer of Snap VPN, which Apple previously removed but is still available on the Google Play store, told the TTP it has "no affiliation with Qihoo 360" despite those registration documents, and claimed it does not "record, monitor, or retain any user online activity."

Paul told NBC News, "Autumn Breeze fails to explain clear connections to the sanctioned PLA-linked entity that are detailed in publicly available documents."

The other is WireVPN, which an employee claimed in an email is “an independent service” with “no ties to Chinese entities or government organizations.”

“We are neither affiliated with Qihoo 360 nor any other PRC-based enterprises, and our operations are entirely autonomous,” the employee said.

However, WireVPN’s privacy policy makes clear that users are expected to adhere to Chinese law and bans them from “Violating the basic principles established by the Chinese Constitution” and “Violating the traditional virtues of the Chinese nation, social morality, rational morality, and socialist spiritual civilization.”

Qihoo 360 didn’t respond to a request for comment. But China Daily, a state-run newspaper, has reported that its cybersecurity clients include the Chinese military and “at least eight ministries” of the Chinese government. ...

Both Apple and Google declined to address the specific apps that the TTP highlighted as tied to Qihoo 360 and said they follow U.S. laws regarding sanctions. Neither bans VPN app developers simply for following Chinese law.

Peter Micek, general counsel at Access Now, a tech policy and human rights advocacy nonprofit, told NBC News that he was surprised to see the tech companies had potentially overlooked a sanctioned company offering apps under innocuous developer names.

“It seems like this project has done the homework and due diligence that Apple and Google should have done, and it does seem like those ties would constitute indirect contact with, transactions with folks who are sanctioned,” he said. Tech companies can sometimes face significant fines for violating sanctions, Micek said.

Sanctions are put in place by the federal government as a penalty on foreign entities and individuals, preventing U.S. companies and individuals from doing business with them. They are often imposed after a foreign entity or individual is shown to have conducted some sort of condemned behavior or have links to condemned groups, such as cybercriminals or terrorist organizations. Qihoo 360 faced sanctions from the Commerce Department in 2020, which said the company could become involved in supplying materials to the Chinese military. The sanctions prevent American companies from exporting technology or software to Qihoo 360. It’s not clear if app stores hosting apps tied to Qihoo could be in violation of those sanctions.

The Commerce Department did not respond to a request for comment.

隐私资讯

本网站使用 cookie 和其他网络存储技术。您可以在下方设置您的隐私选项。您所作的更改将立即生效。

有关我们使用网络存储的更多信息,请参阅我们的 数据使用和 Cookie 政策

Strictly necessary storage

ON
OFF

Necessary storage enables core site functionality. This site cannot function without it, so it can only be disabled by changing settings in your browser.

分析 cookie

ON
OFF

您浏览本网页时我们将以Google Analytics收集信息。接受此cookie将有助我们理解您的浏览资讯,并协助我们改善呈现资讯的方法。所有分析资讯都以匿名方式收集,我们并不能用相关资讯得到您的个人信息。谷歌在所有主要浏览器中都提供退出Google Analytics的添加应用程式。

市场营销cookies

ON
OFF

我们从第三方网站获得企业责任资讯,当中包括社交媒体和搜寻引擎。这些cookie协助我们理解相关浏览数据。

您在此网站上的隐私选项

本网站使用cookie和其他网络存储技术来增强您在必要核心功能之外的体验。