A couple of days ago the British IT & Tech Blogger Christopher Moore published an analysis of the Oneplus’ data stream back to the manufacturer. From the conversation he intercepted between the manufacturer and the smartphone it becomes clear that Oneplus included mechanisms in their firmware that enables the logging of private user data and sending this data to the manufacturer (Moore, 2017).
Especially problematic is, that these data streams are not even anonymized (containing the phone’s serial number) and comprise all kinds of sensible information. Oneplus smartphones can only be ordered directly over the manufacturer, meaning that it is easily possible to tell which serial number belongs to which customer. Oneplus logs all kind of usage data such as on-time, dates and times of restarts, shutdowns, battery usage as well as phone numbers and mobile network names. Moveover, the phone transmits information about all installed apps, at which times they were used and for how long (Moore, 2017). When asked for further information, Oneplus confirmed that this is not an unwanted error but actually a conscious “feature” (Heise, 2017).
While the standard user might thing this is not too worrisome, personalized data like that can quickly be used to compile very specific personal profiles. With modern data analytics methods and the combination of different data sources, i.e. the Oneplus’ data in combination with social media accounts, personal activities, location and all other sorts of conclusions can be drawn over the user. It is scary to think that some simple datasets can make it possible to surveillance a person’s life.
However Oneplus is by far from the first incident like that. For example it is possible to compile a time profile of a person only from their “last seen” WhatsApp status (Heaton, 2017).
Of course it gets tiring for normal users to have to listen about privacy issues all the time and most people tend to simply shut out the concerns over time. The problem with privacy concerns is, that normal users will only realize the importance of the topic when serious real life negative consequences occur for them personally.
Companies need to start acting more ethically in their use with personal data. Big Data offers great opportunities, however companies should be encouraged and if needed forced to abide by privacy standards. Is it really necessary to know for a smartphone manufacturer to know what apps their users utilize? Probably not. Also user information that is actually beneficial to the company can easily be transferred anonymized, the company does not have a (morally acceptable) use for this kind of private data anyways.
Sources:
https://www.chrisdcmoore.co.uk/post/oneplus-analytics/
https://robertheaton.com/2017/10/09/tracking-friends-and-strangers-using-whatsapp/
https://www.heise.de/newsticker/meldung/Oneplus-loggt-Daten-der-Smartphone-User-3858834.html