▲ 236 ▼ Proton analyzed 7,000+ mobile VPN apps. 64 apps actively collect physical location via GPS or other geolocation, 3 are owned by market research firms, and 85% of them contain trackers. (protonvpn.com) submitted 4 days ago* (last edited 4 days ago) by beep@piefed.world to c/technology@lemmy.world 49 comments fedilink hide all child comments cross-posted from: https://piefed.world/c/tech/p/1366113/proton-analyzed-7000-mobile-vpn-apps-64-apps-actively-collect-physical-location-via-gps
[–] Babalugats@feddit.uk 82 points 4 days ago (5 children) Any chance of seeing the list broken down by ownership and trackers? It seems a bit pointless otherwise. permalink fedilink source hideshow 10 child comments replies: [–] victorz@lemmy.world 95 points 4 days ago (2 children) Not important, this is just a disguised advertisement for Proton VPN. permalink fedilink source parent hideshow 4 child comments replies: [–] tb_@lemmy.world 66 points 4 days ago (2 children) Just because it is, doesn't mean it can't contain useful data. See also: https://www.mozillafoundation.org/en/blog/privacy-nightmare-on-wheels-every-car-brand-reviewed-by-mozilla-including-ford-volkswagen-and-toyota-flunks-privacy-test/ permalink fedilink source parent hideshow 4 child comments replies: [–] lemmyvore@feddit.nl 2 points 3 days ago useful data The extent of which is "Proton good, others bad". permalink fedilink source parent [–] victorz@lemmy.world 1 point 4 days ago* I know lol, I was being facetious. 😉 I also want to see the list. permalink fedilink source parent [–] Valmond@lemmy.dbzer0.com -2 points 4 days ago (1 child) I don't see a problem with that. permalink fedilink source parent hideshow 2 child comments replies: [–] victorz@lemmy.world 7 points 4 days ago (1 child) It can be healthy to question your sources and their motives. 👍 permalink fedilink source parent hideshow 2 child comments replies: [–] Valmond@lemmy.dbzer0.com 4 points 3 days ago (1 child) Proton is a stellar VPN, but people cannot live without dragging out an old twitter post about a CEO praising the instauration of some judge by trump. That's it. That's all the critic that has been found over the years. Mullvad is super fasho and show me one that doesn't store and sell all the data... permalink fedilink source parent hideshow 2 child comments replies: [–] victorz@lemmy.world 1 point 3 days ago (1 child) people cannot live without dragging out an old twitter post Kind of like that Nazi salute people just can't seem to forget, gosh. Proton is a stellar VPN. 🤷♂️ Perhaps it is. Perhaps Teslas are great cars. Show me one that doesn't store and sell all the data... Ah yes, well, if everyone is doing it... 👍👍 permalink fedilink source parent hideshow 2 child comments replies: [–] Valmond@lemmy.dbzer0.com 2 points 2 days ago (1 child) Praising a democratically elected moron because he appointed a specific judge? Believe it or not, Nazi. Guess everything you don't like is nazi nazi nazi lol. permalink fedilink source parent hideshow 2 child comments replies: [–] victorz@lemmy.world -1 points 2 days ago* I didn't say the CEO of Proton was a Nazi, lol. I think you misunderstood how they were similar to each other. Not the Nazi part, but how people don't easily forget things that break their trust. permalink fedilink source parent [–] beep@piefed.world [S] 49 points 4 days ago (4 children) Source: David Peterson, Proton VPN General Manager. permalink fedilink source parent hideshow 8 child comments replies: [–] Cris_Citrus@piefed.zip 46 points 4 days ago Its unfortunate they really only name and shame random shovelware vpns it looks like. So it feels difficult to tell whether their points apply to any other real options people have heard of before... permalink fedilink source parent [–] 01189998819991197253@infosec.pub 4 points 3 days ago* ProtonVPN Mulvad VPN CalyxVPN RiseUpVPN PIA VPN Proton has 1 tracker, while the others have 0. PIA has GPS location permissions, though. Edit. All links go to the Exodus Project page for those products. The same site that the David P post uses Edit 2. Some (including Proton) have camera permission, and I don't understand why a VPN app would need access to my camera. permalink fedilink source parent [–] artyom@piefed.social 24 points 4 days ago* Its a good thing they posted them on inaccessible Xitter in a confusing as fuck "thread" instead of their own God damn website... permalink fedilink source parent [–] user224@lemmy.sdf.org 29 points 4 days ago (1 child) Surely it's too hard to upload a spreadsheet on the internet. permalink fedilink source parent hideshow 2 child comments replies: [–] Valmond@lemmy.dbzer0.com -2 points 4 days ago Some people just have to complain about everything. Maybe a specific excel format? permalink fedilink source parent [–] Th4tGuyII@fedia.io 26 points 4 days ago (1 child) Yeah, it would be nice to have an actual list so we're not reliant on their numbers alone. But unfortunately telling only half the story is something Proton seems to do quite a lot. On the bright side, the actual privacy data for this was by Proton's own admission from Exodus, so while its probably not feasible for you to skim 65K apps on your own, you can at least see the data for specific VPN apps you might be worried about. permalink fedilink source parent hideshow 2 child comments replies: [–] CosmoNova@lemmy.world 15 points 4 days ago (1 child) They would probably get sued if they dropped names of direct competitors. permalink fedilink source parent hideshow 2 child comments replies: [–] Th4tGuyII@fedia.io 7 points 4 days ago Yeah true enough. Even if the data they've got was 100% accurate and easy to prove in court, they'd still be stuck having to pay out the arse for lawyers just to appear in court. permalink fedilink source parent [–] MolochHorridus@piefed.social 12 points 4 days ago It’s an ad for Proton. Obviously. permalink fedilink source parent [–] Zarobi@aussie.zone 11 points 4 days ago (1 child) They listed a few in their article, but yeah a full list would be nice. Three of the VPN services we looked at are actually owned by market research companies: Phone Guardian Safe WiFi (Sensor Tower), My Mobile Secure VPN (Comscore), and Urban VPN (BiScience, which has been been shown to capture user conversations across several services and share them with AI chat platforms). In what many could reasonably see as the ultimate act of betrayal, 64 VPN apps actively track your physical location using GPS and other geolocation data. [...] These apps include some of the most popular VPNs in the US, such as VPN Proxy Master, VPN-Fast VPN Super, and X-VPN permalink fedilink source parent hideshow 2 child comments replies: [–] PineRune@lemmy.world 20 points 4 days ago Those all sound like fake VPN apps that I wouldn't trust anyway. permalink fedilink source parent
[–] victorz@lemmy.world 95 points 4 days ago (2 children) Not important, this is just a disguised advertisement for Proton VPN. permalink fedilink source parent hideshow 4 child comments replies: [–] tb_@lemmy.world 66 points 4 days ago (2 children) Just because it is, doesn't mean it can't contain useful data. See also: https://www.mozillafoundation.org/en/blog/privacy-nightmare-on-wheels-every-car-brand-reviewed-by-mozilla-including-ford-volkswagen-and-toyota-flunks-privacy-test/ permalink fedilink source parent hideshow 4 child comments replies: [–] lemmyvore@feddit.nl 2 points 3 days ago useful data The extent of which is "Proton good, others bad". permalink fedilink source parent [–] victorz@lemmy.world 1 point 4 days ago* I know lol, I was being facetious. 😉 I also want to see the list. permalink fedilink source parent [–] Valmond@lemmy.dbzer0.com -2 points 4 days ago (1 child) I don't see a problem with that. permalink fedilink source parent hideshow 2 child comments replies: [–] victorz@lemmy.world 7 points 4 days ago (1 child) It can be healthy to question your sources and their motives. 👍 permalink fedilink source parent hideshow 2 child comments replies: [–] Valmond@lemmy.dbzer0.com 4 points 3 days ago (1 child) Proton is a stellar VPN, but people cannot live without dragging out an old twitter post about a CEO praising the instauration of some judge by trump. That's it. That's all the critic that has been found over the years. Mullvad is super fasho and show me one that doesn't store and sell all the data... permalink fedilink source parent hideshow 2 child comments replies: [–] victorz@lemmy.world 1 point 3 days ago (1 child) people cannot live without dragging out an old twitter post Kind of like that Nazi salute people just can't seem to forget, gosh. Proton is a stellar VPN. 🤷♂️ Perhaps it is. Perhaps Teslas are great cars. Show me one that doesn't store and sell all the data... Ah yes, well, if everyone is doing it... 👍👍 permalink fedilink source parent hideshow 2 child comments replies: [–] Valmond@lemmy.dbzer0.com 2 points 2 days ago (1 child) Praising a democratically elected moron because he appointed a specific judge? Believe it or not, Nazi. Guess everything you don't like is nazi nazi nazi lol. permalink fedilink source parent hideshow 2 child comments replies: [–] victorz@lemmy.world -1 points 2 days ago* I didn't say the CEO of Proton was a Nazi, lol. I think you misunderstood how they were similar to each other. Not the Nazi part, but how people don't easily forget things that break their trust. permalink fedilink source parent
[–] tb_@lemmy.world 66 points 4 days ago (2 children) Just because it is, doesn't mean it can't contain useful data. See also: https://www.mozillafoundation.org/en/blog/privacy-nightmare-on-wheels-every-car-brand-reviewed-by-mozilla-including-ford-volkswagen-and-toyota-flunks-privacy-test/ permalink fedilink source parent hideshow 4 child comments replies: [–] lemmyvore@feddit.nl 2 points 3 days ago useful data The extent of which is "Proton good, others bad". permalink fedilink source parent [–] victorz@lemmy.world 1 point 4 days ago* I know lol, I was being facetious. 😉 I also want to see the list. permalink fedilink source parent
[–] lemmyvore@feddit.nl 2 points 3 days ago useful data The extent of which is "Proton good, others bad". permalink fedilink source parent
[–] victorz@lemmy.world 1 point 4 days ago* I know lol, I was being facetious. 😉 I also want to see the list. permalink fedilink source parent
[–] Valmond@lemmy.dbzer0.com -2 points 4 days ago (1 child) I don't see a problem with that. permalink fedilink source parent hideshow 2 child comments replies: [–] victorz@lemmy.world 7 points 4 days ago (1 child) It can be healthy to question your sources and their motives. 👍 permalink fedilink source parent hideshow 2 child comments replies: [–] Valmond@lemmy.dbzer0.com 4 points 3 days ago (1 child) Proton is a stellar VPN, but people cannot live without dragging out an old twitter post about a CEO praising the instauration of some judge by trump. That's it. That's all the critic that has been found over the years. Mullvad is super fasho and show me one that doesn't store and sell all the data... permalink fedilink source parent hideshow 2 child comments replies: [–] victorz@lemmy.world 1 point 3 days ago (1 child) people cannot live without dragging out an old twitter post Kind of like that Nazi salute people just can't seem to forget, gosh. Proton is a stellar VPN. 🤷♂️ Perhaps it is. Perhaps Teslas are great cars. Show me one that doesn't store and sell all the data... Ah yes, well, if everyone is doing it... 👍👍 permalink fedilink source parent hideshow 2 child comments replies: [–] Valmond@lemmy.dbzer0.com 2 points 2 days ago (1 child) Praising a democratically elected moron because he appointed a specific judge? Believe it or not, Nazi. Guess everything you don't like is nazi nazi nazi lol. permalink fedilink source parent hideshow 2 child comments replies: [–] victorz@lemmy.world -1 points 2 days ago* I didn't say the CEO of Proton was a Nazi, lol. I think you misunderstood how they were similar to each other. Not the Nazi part, but how people don't easily forget things that break their trust. permalink fedilink source parent
[–] victorz@lemmy.world 7 points 4 days ago (1 child) It can be healthy to question your sources and their motives. 👍 permalink fedilink source parent hideshow 2 child comments replies: [–] Valmond@lemmy.dbzer0.com 4 points 3 days ago (1 child) Proton is a stellar VPN, but people cannot live without dragging out an old twitter post about a CEO praising the instauration of some judge by trump. That's it. That's all the critic that has been found over the years. Mullvad is super fasho and show me one that doesn't store and sell all the data... permalink fedilink source parent hideshow 2 child comments replies: [–] victorz@lemmy.world 1 point 3 days ago (1 child) people cannot live without dragging out an old twitter post Kind of like that Nazi salute people just can't seem to forget, gosh. Proton is a stellar VPN. 🤷♂️ Perhaps it is. Perhaps Teslas are great cars. Show me one that doesn't store and sell all the data... Ah yes, well, if everyone is doing it... 👍👍 permalink fedilink source parent hideshow 2 child comments replies: [–] Valmond@lemmy.dbzer0.com 2 points 2 days ago (1 child) Praising a democratically elected moron because he appointed a specific judge? Believe it or not, Nazi. Guess everything you don't like is nazi nazi nazi lol. permalink fedilink source parent hideshow 2 child comments replies: [–] victorz@lemmy.world -1 points 2 days ago* I didn't say the CEO of Proton was a Nazi, lol. I think you misunderstood how they were similar to each other. Not the Nazi part, but how people don't easily forget things that break their trust. permalink fedilink source parent
[–] Valmond@lemmy.dbzer0.com 4 points 3 days ago (1 child) Proton is a stellar VPN, but people cannot live without dragging out an old twitter post about a CEO praising the instauration of some judge by trump. That's it. That's all the critic that has been found over the years. Mullvad is super fasho and show me one that doesn't store and sell all the data... permalink fedilink source parent hideshow 2 child comments replies: [–] victorz@lemmy.world 1 point 3 days ago (1 child) people cannot live without dragging out an old twitter post Kind of like that Nazi salute people just can't seem to forget, gosh. Proton is a stellar VPN. 🤷♂️ Perhaps it is. Perhaps Teslas are great cars. Show me one that doesn't store and sell all the data... Ah yes, well, if everyone is doing it... 👍👍 permalink fedilink source parent hideshow 2 child comments replies: [–] Valmond@lemmy.dbzer0.com 2 points 2 days ago (1 child) Praising a democratically elected moron because he appointed a specific judge? Believe it or not, Nazi. Guess everything you don't like is nazi nazi nazi lol. permalink fedilink source parent hideshow 2 child comments replies: [–] victorz@lemmy.world -1 points 2 days ago* I didn't say the CEO of Proton was a Nazi, lol. I think you misunderstood how they were similar to each other. Not the Nazi part, but how people don't easily forget things that break their trust. permalink fedilink source parent
[–] victorz@lemmy.world 1 point 3 days ago (1 child) people cannot live without dragging out an old twitter post Kind of like that Nazi salute people just can't seem to forget, gosh. Proton is a stellar VPN. 🤷♂️ Perhaps it is. Perhaps Teslas are great cars. Show me one that doesn't store and sell all the data... Ah yes, well, if everyone is doing it... 👍👍 permalink fedilink source parent hideshow 2 child comments replies: [–] Valmond@lemmy.dbzer0.com 2 points 2 days ago (1 child) Praising a democratically elected moron because he appointed a specific judge? Believe it or not, Nazi. Guess everything you don't like is nazi nazi nazi lol. permalink fedilink source parent hideshow 2 child comments replies: [–] victorz@lemmy.world -1 points 2 days ago* I didn't say the CEO of Proton was a Nazi, lol. I think you misunderstood how they were similar to each other. Not the Nazi part, but how people don't easily forget things that break their trust. permalink fedilink source parent
[–] Valmond@lemmy.dbzer0.com 2 points 2 days ago (1 child) Praising a democratically elected moron because he appointed a specific judge? Believe it or not, Nazi. Guess everything you don't like is nazi nazi nazi lol. permalink fedilink source parent hideshow 2 child comments replies: [–] victorz@lemmy.world -1 points 2 days ago* I didn't say the CEO of Proton was a Nazi, lol. I think you misunderstood how they were similar to each other. Not the Nazi part, but how people don't easily forget things that break their trust. permalink fedilink source parent
[–] victorz@lemmy.world -1 points 2 days ago* I didn't say the CEO of Proton was a Nazi, lol. I think you misunderstood how they were similar to each other. Not the Nazi part, but how people don't easily forget things that break their trust. permalink fedilink source parent
[–] beep@piefed.world [S] 49 points 4 days ago (4 children) Source: David Peterson, Proton VPN General Manager. permalink fedilink source parent hideshow 8 child comments replies: [–] Cris_Citrus@piefed.zip 46 points 4 days ago Its unfortunate they really only name and shame random shovelware vpns it looks like. So it feels difficult to tell whether their points apply to any other real options people have heard of before... permalink fedilink source parent [–] 01189998819991197253@infosec.pub 4 points 3 days ago* ProtonVPN Mulvad VPN CalyxVPN RiseUpVPN PIA VPN Proton has 1 tracker, while the others have 0. PIA has GPS location permissions, though. Edit. All links go to the Exodus Project page for those products. The same site that the David P post uses Edit 2. Some (including Proton) have camera permission, and I don't understand why a VPN app would need access to my camera. permalink fedilink source parent [–] artyom@piefed.social 24 points 4 days ago* Its a good thing they posted them on inaccessible Xitter in a confusing as fuck "thread" instead of their own God damn website... permalink fedilink source parent [–] user224@lemmy.sdf.org 29 points 4 days ago (1 child) Surely it's too hard to upload a spreadsheet on the internet. permalink fedilink source parent hideshow 2 child comments replies: [–] Valmond@lemmy.dbzer0.com -2 points 4 days ago Some people just have to complain about everything. Maybe a specific excel format? permalink fedilink source parent
[–] Cris_Citrus@piefed.zip 46 points 4 days ago Its unfortunate they really only name and shame random shovelware vpns it looks like. So it feels difficult to tell whether their points apply to any other real options people have heard of before... permalink fedilink source parent
[–] 01189998819991197253@infosec.pub 4 points 3 days ago* ProtonVPN Mulvad VPN CalyxVPN RiseUpVPN PIA VPN Proton has 1 tracker, while the others have 0. PIA has GPS location permissions, though. Edit. All links go to the Exodus Project page for those products. The same site that the David P post uses Edit 2. Some (including Proton) have camera permission, and I don't understand why a VPN app would need access to my camera. permalink fedilink source parent
[–] artyom@piefed.social 24 points 4 days ago* Its a good thing they posted them on inaccessible Xitter in a confusing as fuck "thread" instead of their own God damn website... permalink fedilink source parent
[–] user224@lemmy.sdf.org 29 points 4 days ago (1 child) Surely it's too hard to upload a spreadsheet on the internet. permalink fedilink source parent hideshow 2 child comments replies: [–] Valmond@lemmy.dbzer0.com -2 points 4 days ago Some people just have to complain about everything. Maybe a specific excel format? permalink fedilink source parent
[–] Valmond@lemmy.dbzer0.com -2 points 4 days ago Some people just have to complain about everything. Maybe a specific excel format? permalink fedilink source parent
[–] Th4tGuyII@fedia.io 26 points 4 days ago (1 child) Yeah, it would be nice to have an actual list so we're not reliant on their numbers alone. But unfortunately telling only half the story is something Proton seems to do quite a lot. On the bright side, the actual privacy data for this was by Proton's own admission from Exodus, so while its probably not feasible for you to skim 65K apps on your own, you can at least see the data for specific VPN apps you might be worried about. permalink fedilink source parent hideshow 2 child comments replies: [–] CosmoNova@lemmy.world 15 points 4 days ago (1 child) They would probably get sued if they dropped names of direct competitors. permalink fedilink source parent hideshow 2 child comments replies: [–] Th4tGuyII@fedia.io 7 points 4 days ago Yeah true enough. Even if the data they've got was 100% accurate and easy to prove in court, they'd still be stuck having to pay out the arse for lawyers just to appear in court. permalink fedilink source parent
[–] CosmoNova@lemmy.world 15 points 4 days ago (1 child) They would probably get sued if they dropped names of direct competitors. permalink fedilink source parent hideshow 2 child comments replies: [–] Th4tGuyII@fedia.io 7 points 4 days ago Yeah true enough. Even if the data they've got was 100% accurate and easy to prove in court, they'd still be stuck having to pay out the arse for lawyers just to appear in court. permalink fedilink source parent
[–] Th4tGuyII@fedia.io 7 points 4 days ago Yeah true enough. Even if the data they've got was 100% accurate and easy to prove in court, they'd still be stuck having to pay out the arse for lawyers just to appear in court. permalink fedilink source parent
[–] MolochHorridus@piefed.social 12 points 4 days ago It’s an ad for Proton. Obviously. permalink fedilink source parent
[–] Zarobi@aussie.zone 11 points 4 days ago (1 child) They listed a few in their article, but yeah a full list would be nice. Three of the VPN services we looked at are actually owned by market research companies: Phone Guardian Safe WiFi (Sensor Tower), My Mobile Secure VPN (Comscore), and Urban VPN (BiScience, which has been been shown to capture user conversations across several services and share them with AI chat platforms). In what many could reasonably see as the ultimate act of betrayal, 64 VPN apps actively track your physical location using GPS and other geolocation data. [...] These apps include some of the most popular VPNs in the US, such as VPN Proxy Master, VPN-Fast VPN Super, and X-VPN permalink fedilink source parent hideshow 2 child comments replies: [–] PineRune@lemmy.world 20 points 4 days ago Those all sound like fake VPN apps that I wouldn't trust anyway. permalink fedilink source parent
[–] PineRune@lemmy.world 20 points 4 days ago Those all sound like fake VPN apps that I wouldn't trust anyway. permalink fedilink source parent