Apple and Google have banned data broker, X-Mode Social from collecting location data from users running on their operating systems. This follows a report from the Wall Street Journal that the two tech giants have told developers to remove X-Mode’s code from their apps, or risk having it pulled from their respective app stores.
So, how does X-Mode work? Basically, the company gives developers code, known as an SDK, to put into their apps. This location collection software will then track a user’s location and send that data to X-Mode, who then sells it to contractors who may work for advertisers, companies or government agencies.
In return, X-Mode would pay developers a certain amount based on the number of daily active users their app has. The data broker’s pitch to developers is that by doing so, they would monetise their existing user base and this would enable developers to provide free media, games and other mobile services to their users. The data broker even promised developers they could earn USD10,000 or more by contributing their app data to X-Mode’s platform.
X-Mode said its technology is currently used in more than 400 apps that include Muslim prayer, dating, weather and fitness tracking apps. The company’s chief executive officer Josh Anton said the company tracks 25 million devices in the US every month.
We previously reported that one of the most notable apps affected by the X-Mode debacle was the popular Muslim prayer and Quran app, Muslim Pro (iOS, Android). The makers of the app have gone on to deny selling their users personal data to the US military and they have since terminated their relationship with X-Mode.
A review by Apple has found that 100 apps on the App Store made by 30 developers contained X-Mode’s software.
The Cupertino based company is now giving developers two weeks to remove the X-Mode SDK from their app or risk being banned from the App Store. Similarly, Google is giving developers one week to comply. However, in the Mountain View company’s case it is allowing developers to request an extension, of up to 30 days, if they need more time to comply.
Though it may seem that Apple and Google are being extra strict on protecting their user’s privacy, the fact is that government agencies buying citizen’s location data is nothing new. But based on a report by Motherboard in November, what may have gotten X-Mode banned by Apple and Google was because it sold location data it gathered to contractors that worked for the US Military.
On the flip side, X-Mode claims it has been compliant with various policies when it sells location data to third parties. This including those set by Google, Apple, the European Union’s (EU) GDPR (General Data Protection Regulation), and CCPA (California Consumer Privacy Act). For example, X-Mode’s privacy policy states that users in California have a right to opt-out of the sale of their information based on the rules set by the CCPA. Similarly, for GDPR, the X-Mode said it obtains the consent of users before they use their personal data.
Though the company has claimed this, there is no way to know for certain just whether it truly has followed through on the rules of its privacy policies.
The data broker said the ban is unfair as it claimed that other advertising SDKs follow similar practices. It also said that it is unreasonable for Apple and Google to determine how third-party enterprises collect and use mobile app data. Following this episode, the company claimed it is “re-evaluating its government work”.
Having said that, if you are concerned that your location data is being sold without your permission there are a few ways you can protect your privacy. The fact is every app on iOS and Android needs to ask your permission for it to access your location data. While there are plenty of apps like weather or navigation apps that have legitimate reasons for needing your location, if you doubt an app really needs to know, just don’t give it permission.
So, what do you think? Will you evaluate which apps you download to your phone more carefully now? Let us know in the comments below.
[SOURCE, 2, IMAGE SOURCE]