Business / news
Android Apps May Share Location Data With Advertisers Without Developers’ Knowledge
New findings from the Electronic Frontier Foundation show that third-party code embedded in Android apps can automatically collect precise location data from users, often without app developers realizing it.
The Electronic Frontier Foundation (EFF) has published new findings warning that common software development kits (SDKs) used in Android apps may inherit an app’s location permissions and transmit users’ precise location data to third parties by default. The research aims to alert developers that simply adding a code snippet to their app can trigger unintended data sharing.
Many apps legitimately require location access, such as weather apps that need a user’s area for forecasts or fitness apps that track running routes. However, the EFF found that unless developers actively disable the collection feature, SDKs will automatically collect location data whenever the app itself has been granted location permission.
That data can then be shared with advertisers, data brokers, and other external parties. The EFF emphasizes that developers may not be aware that this data-sharing setting is enabled by default, making the exposure unintentional.
The foundation urges app makers to review their third-party code, disable unnecessary data collection whenever possible, and be more transparent about how location information is handled. The findings highlight a broader privacy concern in the mobile ecosystem, where user permissions granted for one purpose can be silently reused by embedded code.