FBI Issues Warning About Mobile App Data Security Risks

The FBI recently issued a Public Service Announcement to highlight data security risks linked to foreign-developed mobile applications. Some widely used apps are developed and maintained by companies based outside the United States. Depending on where an app stores or processes data, it may be subject to foreign laws that could allow that country's government access to certain user data. 

Data Collection and Security RisksBefore installing an app, review what data it requests. If you grant permissions, an app may collect data across your device, not just inside the app or while it is in use.

• Some apps request access to your contacts to help you invite friends. If you allow it, the developer may collect and store contact details, including information about people who do not use the app.

• Privacy policies may explain what data is collected and where it is stored, including user prompts. Some apps state that data may be stored on servers in other countries and retained as long as the developer deems necessary. Some offer a local version that may reduce cloud data transfer.

• Some apps may include malware that collects data beyond what you approved. Avoid unfamiliar websites and third-party app stores; official stores typically scan apps for malicious content, which can reduce (but not eliminate) risk.

Tips to Protect Your DataPracticing good cyber hygiene helps protect your digital identity when using mobile apps.

• Disable unnecessary data sharing.

• Download apps only from official app stores and verify the publisher.

• Use strong, unique passwords and update them regularly.

• Install device and app updates as soon as they are available.

• Read the terms of service or end user license agreement before downloading.

Visit FBI.gov to read the full announcement: Data Security Risks of Using Foreign-Developed Mobile Apps in the United States