NSA and GCHQ target ‘leaky’ phone apps like Angry Birds to scoop user data
GCHQ documents use Angry Birds - reportedly downloaded more than 1.7bn times - as a case study for app data collection. — The National Security Agency and its UK counterpart GCHQ have been developing capabilities …
Context & Ripple Effects
This lands in the middle of a dense January 2014 run of Snowden-derived reporting: within three weeks, documents showed the NSA collecting almost 200 million text messages a day, Obama moving to curb domestic phone-data collection on 17 January, and software implants in roughly 100,000 machines worldwide on 14 January. Earlier revelations had already established that major platforms were targeted, with an exclusive report on surveillance programs aimed at Google, Facebook and Microsoft dating to 7 January.
What is new here is the layer below the platforms: leaked GCHQ documents confirm the agency uses Angry Birds — reportedly downloaded more than 1.7bn times — as a case study for pulling user data straight out of 'leaky' phone apps, meaning intelligence agencies need not go through Google or Facebook at all when third-party app code hands over location and profile data freely. The story travelled unusually wide for a document dump, picked up same-day by NBC News, the New York Times, ProPublica, USA Today and others.
First-order effects
- App publishers and the ad-SDK ecosystem behind titles like Angry Birds now face the scrutiny previously aimed at large platforms: their routine analytics and advertising data flows are documented intelligence-collection channels for NSA and GCHQ.
Second-order effects
- The commercial damage compounds an existing pattern — NSA officials discussed the leaks' impact on the tech industry on 13 January, and Peer1 findings showed surveillance driving businesses' data-storage relocation decisions — pushing buyers toward vendors who can demonstrate tighter control over what their apps transmit.
Third-order effects
- If collection migrates from platform APIs to embedded third-party code, privacy accountability shifts onto the mobile SDK and advertising supply chain, giving reform efforts like Obama's phone-data curbs a broader target: untargeted sweeps of consumer app traffic rather than named-company programs.
The trend: Intelligence collection is moving down the mobile stack from major platforms to the third-party app and SDK layer, where user data is shared by default and oversight lags furthest behind.