Beware, OnePlus users! Your private-data is being collected without permission
Chinese smartphone maker OnePlus seems to have landed in soup, as it is being accused of "stealing" private data from its users. Christopher Moore, a software engineer, discovered the issue and revealed OnePlus is collecting "personally identifiable data" like phone numbers, IMEI numbers, app usage statistics without permission. He said such data is encrypted with the serial number of the devices. Know more!
What information is OnePlus collecting from users?
Christopher Moore says phone numbers, IMEI numbers, mobile network names, MAC addresses, Wi-Fi connection details, and IMSI prefix codes are being collected from users. Also, "timestamps" for device wake-up/shutdown, screen on/off, data on abnormal boots, etc. are being collected. Any device and its location can be precisely identified using all this information. User habits and schedules can be easily determined from this data.
Christopher Moore's blogpost
In a blogpost, Moore wrote, "They're collecting timestamped metrics on certain events, some of which I understand - from a development point of view, wanting to know about abnormal reboots seems legitimate - but the screen on/off and unlock activities feel excessive."
We securely transmit analytics: OnePlus
OnePlus claimed that it was only collecting data comprising "usage analytics" to fine-tune the software and "provide better after-sales support." It stated, "We securely transmit analytics in two different streams over HTTPS to an Amazon server." However, the Chinese company so far made no attempt to inform users about the data collection and didn't even give them an option to completely stop it.
The two different streams
OnePlus stated: "The first stream is usage analytics, which we collect in order for us to more precisely fine-tune our software according to user behavior. The second stream is device information, which we collect to provide better after-sales support."
OnePlus support team on Twitter
Christopher Moore tried to contact the OnePlus team on Twitter to find a solution to turn off the event data collection, but got no help. On his blog, Moore wrote: "I took to Twitter to ask OnePlus on Twitter how this could be turned off, which disappointingly led down the usual path of "troubleshooting" suggestions, before being met with radio silence."
Users can "prevent" data collection
OnePlus reportedly told Android Police that "much" of this "data collection" could be prevented by users. Users can do the same by going to their device "Settings" and disabling the "Join User Experience Program" in the "Advanced" section.
OnePlus ends up in a huge controversy
It is not unknown that phone manufacturers collect data, including private information, from devices with or without the users' permission. It is acceptable if companies gather usage analytics with consent, but collecting "personally identifiable data" is not! OnePlus is only one of such device makers that have been caught "stealing" data. Meanwhile, OnePlus India is yet to comment on this matter.
