Report: the official COVID-19 contact tracing app for North Dakota is sharing location data with Foursquare and an advertising ID with Google
seems that the creators weren't trying to share the data, but the use of 3rd party components led to data leaking. Sounds like a job for... #SBOM and SW component transaprency! https://www.washingtonpost.com/ ... Albert Fox Cahn / @foxcahn : So, #NorthDakota decided to create a #ContactTracing app that ran all its data through Foursquare?! Oh, and it associates you “anonymous” locatation data with your NAME and advertising ID?🤯 Repeat after me “Tech won't save us, it will make things worse” https://blog.jumboprivacy.com/ ... @jason_kint : Confirming. Not good. https://twitter.com/... @saysdana : Anytime someone asks you to download an app, shouldn't you question it? If it was my Governor in CA, I'd still question it and make sure it was vetted properly. Something is very wrong with this whole thing. We're missing more of the story. https://twitter.com/... Geoffrey A. Fowler / @geoffreyfowler : North and South Dakota's contact-tracing app Care19 promises your location “will not be shared with anyone.” But a new study finds it is sending data to Foursquare. States are scrambling with few resources to make these apps. Who's vetting them? https://www.washingtonpost.com/ ... Jennifer Valentino-DeVries / @jenvalentino : I have some interesting data points about this! My colleagues & I wrote a story several weeks ago about the crazy glut of Covid apps. @Aaron_Krolik evaluated the code and traffic from this N.D. app (among others), and Foursquare was definitely NOT in there at that time. 1/ https://twitter.com/... Ken Yeung / @thekenyeung : Is there a reason why a contact tracing app would need to send data, even if it was “benign” to Foursquare? Shouldn't this be prevented? https://www.fastcompany.com/ ... @granick : North Dakota's location tracking contact tracing app sends location data and a unique user identifier to Foursquare—and other data to Google and a bug-tracking company: https://www.fastcompany.com/ ... #ContactTracing Roger McNamee / @moonalice : The state of @NorthDakota has implemented a contact tracing app with privacy invasions that violate its own terms of service, per @JumboPrivacy. https://www.fastcompany.com/ ... Ryan Calo / @rcalo : ND app sending data to Foursquare and Google? Why we need privacy legislation for automated (and all) contact tracing. https://www.fastcompany.com/ ... https://twitter.com/... Rebecca MacKinnon / @rmack : This is EXACTLY why we need a strong national data privacy law, NOW! https://twitter.com/... Charlie Warzel / @cwarzel : so @JumboPrivacy just published a report that North Dakota's contact tracing app is sharing user location data with Foursquare. Which, idk about you, sounds not great. https://blog.jumboprivacy.com/ ... Harry McCracken / @harrymccracken : Typical app practices may not cut it when public health is involved. https://www.fastcompany.com/ ... Thanks: @technologizer
Tracing apps that share you location with FourSquare, and are not anonymous after all - excellent example of why privacy needs to be a primary consideration in building these apps https://blog.jumboprivacy.com/ ...
Contact tracing and exposure notification apps are arguably the most important consumer tech launch of 2020. They're off to a terrible start: https://www.washingtonpost.com/ ... Silicon Valley is failing us. So is the government charged with protecting us.
“I'm not saying hard no to contact tracing, but there are a lot of possible misuses that we need to watch for.” “No one is going to do that in an emergency, it'll be fine.” https://twitter.com/...
A fascinating note around the tracking app privacy issue—seems that the creators weren't trying to share the data, but the use of 3rd party components led to data leaking. Sounds like a job for... #SBOM and SW component transaprency! https://www.washingtonpost.com/ ...
So, #NorthDakota decided to create a #ContactTracing app that ran all its data through Foursquare?! Oh, and it associates you “anonymous” locatation data with your NAME and advertising ID?🤯 Repeat after me “Tech won't save us, it will make things worse” https://blog.jumboprivacy.…
Anytime someone asks you to download an app, shouldn't you question it? If it was my Governor in CA, I'd still question it and make sure it was vetted properly. Something is very wrong with this whole thing. We're missing more of the story. https://twitter.com/...
North and South Dakota's contact-tracing app Care19 promises your location “will not be shared with anyone.” But a new study finds it is sending data to Foursquare. States are scrambling with few resources to make these apps. Who's vetting them? https://www.washingtonpost.com/ ..…
I have some interesting data points about this! My colleagues & I wrote a story several weeks ago about the crazy glut of Covid apps. @Aaron_Krolik evaluated the code and traffic from this N.D. app (among others), and Foursquare was definitely NOT in there at that time. 1/ https:…
Is there a reason why a contact tracing app would need to send data, even if it was “benign” to Foursquare? Shouldn't this be prevented? https://www.fastcompany.com/ ...
North Dakota's location tracking contact tracing app sends location data and a unique user identifier to Foursquare—and other data to Google and a bug-tracking company: https://www.fastcompany.com/ ... #ContactTracing
The state of @NorthDakota has implemented a contact tracing app with privacy invasions that violate its own terms of service, per @JumboPrivacy. https://www.fastcompany.com/ ...
ND app sending data to Foursquare and Google? Why we need privacy legislation for automated (and all) contact tracing. https://www.fastcompany.com/ ... https://twitter.com/...
so @JumboPrivacy just published a report that North Dakota's contact tracing app is sharing user location data with Foursquare. Which, idk about you, sounds not great. https://blog.jumboprivacy.com/ ...