Key facts
- Android apps may share user location data with advertisers by default.
- Third-party software development kits (SDKs) are involved in this data sharing.
- Precise location data can be collected and shared.
- This occurs even when users grant location permissions only to the app itself.
- The Electronic Frontier Foundation (EFF) issued a warning about this practice.
- Data may be shared with advertisers and data brokers.
The Electronic Frontier Foundation (EFF) has issued a warning to Android app developers regarding the potential for precise user location data to be shared with advertisers and data brokers by default. This data collection and sharing is facilitated by third-party code known as software development kits (SDKs) that are integrated into many applications. The EFF highlights that these SDKs may collect and transmit users' location data even when users have granted location permissions only to the primary application itself. This means that users might not be aware that their location data is being shared with entities beyond the app they are directly interacting with. The practice raises significant privacy concerns, as it circumvents user expectations regarding data sharing based on app permissions alone. The default nature of this data sharing by SDKs suggests a widespread issue across the Android ecosystem, potentially impacting a large number of users who believe they have control over their location data through app-specific permissions.