Whatever buttons are pushed or information is entered is recorded, and worse, while the feature can be configured to prevent recording of sensitive data like credit card numbers, they didn't always block it out fully. By using man-in-the-middle software to intercept data going to Glassbox's servers, The App Analyst showed how this happens in Air Canada's app, where it could screenshot credit card info and user passwords.
The companies do only get recordings of activity that happens within their apps, but the potential for a data leak or misuse of information that users don't even know they're giving out is worrying. Glassbox isn't the only analytics company with such software running in iOS apps, and a report last year by Gizmodo uncovered a number of Android apps with similar screen recording capabilities built-in. The company in that case, AppSee, like Glassbox, openly advertises its capture abilities to developers, but for users it's just another thing to think about every time you pick up your phone.
0 comments
Post a Comment