New: we've obtained a large dataset of the precise movement…

We previously reported how Muslim Pro sold data to X-Mode which sold to U.S. military contractors. Now, through a leaked dataset and independent analysis, we've found another highly popular Muslim app called Salaat First also sold granular location data https://t.co/y9iJHoDuQe

This leaked dataset of precise locations of Muslims shows not only the continued use of religious apps to harvest and sell location data without informed consent, but also just how easily this data is being traded in the location industry. https://t.co/y9iJHoDuQe

The leaked location data we got from a source isn't just for the Muslim prayer app Salaat First, but also for other apps selling data to Predicio. Because it had their advertising ID, let me filter down and follow specific Muslim app users https://t.co/y9iJHoDuQe

As for how we know the prayer app Salaat First with 10 million users was selling location data:
- leaked data of actual GPS coords included data marked as Salaat First
- my own analysis of apps that use Predicio SDK includes Salaat
- the dev confirmed it https://t.co/y9iJHoDuQe

I spoke to a Salaat First user and told them about the location data selling. Unsurprisingly, because the app is not clear about the issue, this user had no idea the app was selling their granular location data https://t.co/y9iJHoDuQe

Before receiving the leaked data, we were already making a list of apps that contained the Predicio SDK. We did this by searching them for the string sdk[.]predic[.]io, and then verifying one by one. This helped confirm leaked data https://t.co/y9iJHolTYG

Another app included in both the leaked location data and our own analysis of apps is Weawow, a weather app. App was selling some location data to Predicio (this was off by default, however) https://t.co/y9iJHoDuQe

Through the app analysis and by finding some (now deleted) documentation online, Predicio's SDK is called Telescope. The doc claimed it could also harvest hashed emails. https://t.co/y9iJHoDuQe

After Motherboard and NRK reported how app data gets sent to ICE contractor Venntel, and Motherboard reported how X-Mode sells Muslim location data to military, Predicio added this to their website. Failed to say they were collecting info from a Muslim app https://t.co/y9iJHoDuQe

Council on American-Islamic Relations said "In light of these latest revelations, the owners of all major Muslim applications should thoroughly investigate how their companies handle user data" https://t.co/y9iJHoDuQe

Activist group Foxglove, which previously threatened legal action against prayer app Muslim Pro, says that companies who do this could end up facing a lawsuit https://t.co/y9iJHoDuQe

Google said apps selling personal/sensitive data (including location data) is against Google's terms. That's quite big—Google confirming publicly that a lot of these location data companies shouldn't be on the Play Store at all. But they haven't enforced https://t.co/y9iJHoDuQe

Multiple app devs wouldn't tell us how much Predicio paid them for users' location data. But regardless, we've confirmed Predicio pays the devs for the data. That is against Google's policies. If Google does enforce, it could remove all Predicio apps, like it did with X-Mode

And with that in mind, Senator Wyden says Apple and Google need to take action on the location data industry as a whole, not bit by bit https://t.co/y9iJHoDuQe

New: we've obtained a large dataset of the precise movements of people using a Muslim prayer app. People near mosques. Source was concerned this data could be abused. Company selling this data linked to supply chain to U.S. contractor which works with ICE

You May Also Like