The FBI Warns Users About Apps Developed Abroad.
When you download an app from the App Store or Play Store, how thoroughly do you research it before using it? Do you find out who developed the app and where that company is based? Do you review the app’s privacy policy to ensure your data is handled responsibly? You might not, but as it turns out, the FBI requires it.
On Tuesday, the FBI issued a warning regarding “mobile apps developed by foreign developers.” (Thanks, FBI, for that clarification.) The FBI’s point is this: many of the most popular apps in the US are not developed here, but are often created and supported by foreign companies. These discussions could veer dangerously close to xenophobia, especially given the current US administration, but some of the FBI’s concerns are well-founded. The FBI’s primary concern is the security laws of countries like China, which the FBI believes could allow the Chinese government to access US user data. This was one of the reasons TikTok was banned and why the platform is now majority-owned by the US.
In its advisory, the FBI emphasizes that some apps encourage you to invite friends or contacts to use the app. The companies behind these apps may then store this contact information, including names, email addresses, phone numbers, user IDs, and home addresses. Even if you don’t personally use the app or share your contact information with it, someone else with your contact information may share it themselves. The FBI also points to the privacy policies of some apps, which acknowledge that data is stored on servers in China “for as long as the developers deem necessary.” Finally, some apps may contain malware that exploits security vulnerabilities in your devices’ operating systems. The FBI emphasizes that this malware can run programs in the background without your knowledge, designed to steal your data.
What the FBI recommends you do
This informational video details a number of steps you can take to protect your data and devices—regardless of whether you use apps developed in the US. These include:
-
Disable data sharing whenever possible.
-
Download apps from official app stores, not from unregulated online platforms.
-
Change and update your passwords regularly.
-
Install updates as they become available.
-
When downloading apps, please review the terms of service and license agreements.
The FBI also recommends that you file a report with IC3 if you believe your information has been compromised.
The FBI’s tips above are generally helpful, but none of them are groundbreaking. They’re fairly standard cybersecurity recommendations, although frequently changing passwords without reason is no longer recommended. However, following these tips will help protect your data while using the internet.
Be wary of dubious apps in general, not just those from “foreign” developers.
Asking Americans to refrain from using apps developed abroad, or even to be wary of them, is somewhat impractical. While other countries have different security laws than the US, current US laws allow companies to harvest our data for profit. Otherwise, Meta and Google would face serious difficulties. The FBI, of course, isn’t concerned about American companies accessing Americans’ data; it’s only concerned about foreign governments.
I understand the logic, but I don’t think you, as an American with a smartphone, should be overly concerned about this. Instead, I think your concern should be more general: instead of worrying about where an app was developed, figure out what data it’s asking for. It doesn’t matter whether the app is American, Chinese, or created by a company in another country: if the app asks for a lot of data, don’t give it to it without a reason. If you use a messenger and want to sync your contacts, that’s one thing; if your meditation app asks for your contacts, it’s probably best to decline.
Malware is undoubtedly one of the most serious problems today, especially with attackers exploiting serious vulnerabilities in platforms like iOS . While this advisory highlights malware issues, I believe this is where the FBI should focus its attention. Downloading an app from a random website or a dubious listing in the App Store or Play Store can put your device and its data at risk. It really doesn’t matter where the app comes from: a little research before hitting the “install” button can save you from serious problems down the road.