Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Popular Apps Used to Spy on Location Data Hacked files from Gravy Analytics reveal that thousands of popular apps, including Candy Crush, Tinder, and MyFitnessPal, are being exploited to collect sensitive location data through real-time bidding (RTB), often without users' or developers' knowledge. Gravy, a data broker, sources location data from the ad ecosystem, not embedded app code, enabling it to track users via ads. This data is sold to clients, including U.S. government agencies like ICE and the FBI. The leaked data includes millions of device locations tied to apps like Grindr, Subway Surfers, and religious prayer apps. Experts confirm much of the data is inferred from IP addresses, highlighting privacy risks in ad-driven platforms. Many apps deny links to Gravy, but the exploit underscores the unchecked risks of RTB systems. The FTC has previously banned similar practices, yet the scope of this leak reveals the extensive vulnerabilities in digital advertising and user privacy safeguards.

Download link

Popular Apps Used to Spy on Location Data Hacked files from Gravy Analytics reveal that thousands of popular apps, including Candy Crush, Tinder, and MyFitnessPal, are being exploited to collect sensitive location data through real-time bidding (RTB), often without users' or developers' knowledge. Gravy, a data broker, sources location data from the ad ecosystem, not embedded app code, enabling it to track users via ads. This data is sold to clients, including U.S. government agencies like ICE and the FBI. The leaked data includes millions of device locations tied to apps like Grindr, Subway Surfers, and religious prayer apps. Experts confirm much of the data is inferred from IP addresses, highlighting privacy risks in ad-driven platforms. Many apps deny links to Gravy, but the exploit underscores the unchecked risks of RTB systems. The FTC has previously banned similar practices, yet the scope of this leak reveals the extensive vulnerabilities in digital advertising and user privacy safeguards.
https://media.mstdn.social/media_attachments/files/113/816/835/098/951/895/original/77ff6585586cb2a7.png

Notices where this attachment appears

Embed this notice
vruz (vruz@mstdn.social)'s status on Monday, 13-Jan-2025 04:25:35 JST vruz

There's no such thing as cynical cyber rights activists, there's only informed people, and uninformed people.
https://www.wired.com/story/gravy-location-data-app-leak-rtb/

In conversation about 6 days ago from mstdn.social permalink