How the iPhone spills your secrets

December 18, 2010, 1:12 PM UTC

A Wall Street Journal investigation caught smartphone apps sharing information with advertisers about users’ age, gender, location, political views and even sexual orientation



Source: Wall Street Journal

Grindr is a free social networking application for Apple’s (AAPL) iPhone, iPad and iPod touch that uses the devices’ geolocation technology to help gay and bisexual men see photos, chat with and hook up with partners that happen to be nearby.

What Grindr’s more than 1 million users may not know is that its owner, Nearby Buddy Finder, LLC, has stored their user names, passwords, locations and unique device IDs and is sharing some of that data — including phone identifier, city, zipcode and latitude/longitude coordinates — to three different mobile advertising networks.

One of those networks, Millennium Media, lists 11 types of information about people that developers may transmit to “help Millennial provide more relevant ads,” including age, gender, income, ethnicity, sexual orientation and political views.

Grindr is one of the 101 apps highlighted in Your Apps Are Watching You, a Wall Street Journal investigative report published Saturday that details how iPhone and Android apps are breaching the privacy of smartphone users. And Grindr isn’t even the leakiest. According to the Journal, Pandora and TextPlus 4, share their user data with eight partners each. Four apps, including Bejeweled 2, actually give out phone numbers.

The report, by Scott Thurm and Yukari Iwatani Kane, includes an interactive tool that displays the types of  data being collected and with whom it is being shared for each of the applications the Journal tested — including the paper’s own iPhone app.

As Andrew Lewis once quipped (now available as a T-shirt), “If you are not paying for it, you’re not the customer, you’re the product.”

Below: A WSJ.com video in which Julia Angwin explains to Simon Constable how this works.

[vodpod id=Video.5148271&w=425&h=350&fv=videoGUID%3D%7BA0E0DF80-9235-4DAC-9206-1E9D25354A55%7D%26amp%3Bplayerid%3D1000%26amp%3BplyMediaEnabled%3D1%26amp%3BconfigURL%3Dhttp%3A%2F%2Fwsj.vo.llnwd.net%2Fo28%2Fplayers%2F%26amp%3BautoStart%3Dfalse]

[Follow Philip Elmer-DeWitt on Twitter @philiped]