{"id":3491521,"date":"2026-08-04T20:26:53","date_gmt":"2026-08-04T20:26:53","guid":{"rendered":"https:\/\/techingeek.com\/index.php\/2026\/08\/04\/android-application-developers-might-be-inadvertently-disclosing-their-users-location-information-to-advertisers\/"},"modified":"2026-08-04T20:26:53","modified_gmt":"2026-08-04T20:26:53","slug":"android-application-developers-might-be-inadvertently-disclosing-their-users-location-information-to-advertisers","status":"publish","type":"post","link":"https:\/\/techingeek.com\/index.php\/2026\/08\/04\/android-application-developers-might-be-inadvertently-disclosing-their-users-location-information-to-advertisers\/","title":{"rendered":"Android application developers might be inadvertently disclosing their users\u2019 location information to advertisers."},"content":{"rendered":"
<\/div>\n
\n

For numerous applications, allowing access to your device\u2019s exact location is logical. Your preferred weather application needs to understand your location to provide the daily forecast, just like your favorite fitness application for monitoring your running path.\u00a0<\/p>\n

However, certain applications unintentionally share their users\u2019 location information with third parties, including advertisers and data brokers, as the app developer might be unaware that this data-sharing option is set to active by default.<\/p>\n

Recent research from the Electronic Frontier Foundation aims to alert app developers that some third-party code integrated into their applications may also gather their users\u2019 location data once permission has been granted to the app.\u00a0<\/p>\n

Unless the developer explicitly disables this collection, the code snippet (known as software development kits, or SDKs) will automatically acquire the app\u2019s permissions and collect the user\u2019s exact location data.<\/p>\n

The EFF states that many developers may not be aware they are, by default, sharing their users\u2019 location data with third parties and encouraged app creators to turn off unnecessary data collection whenever feasible.\u00a0<\/p>\n

While advertising SDKs are marketed as a method for developers to monetize their apps, the trade-off is that users\u2019 location histories are passed to data brokers, who profit from that data, which can subsequently be sold to military organizations, governments, and intelligence agencies, such as the FBI.\u00a0This data also poses a security and privacy threat if it is hacked or stolen, a risk that some data brokers have faced.<\/p>\n

Among the Android apps identified by the EFF that were discreetly sharing users\u2019 location data were two that had been downloaded a total of 60 million times to date.<\/p>\n

The EFF conducted its analysis by examining the apps\u2019 network traffic and determining which services were receiving users\u2019 location data.<\/p>\n

Bill Budington, a senior staff technologist at the EFF, informed TechCrunch that the SDKs they reviewed represent a minor fraction of the larger advertising landscape, yet they claim to engage billions of users across tens of thousands of applications. This illustrates the extent of this form of location data harvesting.\u00a0<\/p>\n

The EFF\u2019s report mentioned that there are \u201cno SDK-specific location permissions,\u201d meaning that once the user permits their location data to be shared with the application, that data is likewise shared with advertisers.\u00a0The entities providing those SDKs are typically motivated commercially to encourage their clients to gather more data.<\/p>\n

\u201cApp-level location permissions alone cannot convey significant consent to location collection and sharing by third-party advertising SDKs,\u201d stated the EFF. \u201cAdvertising SDKs should not default to sharing personal data, particularly for sensitive information such as an individual\u2019s location.\u201d<\/p>\n<\/div>\n

When you make purchases through links in our articles, we may receive a small commission. This doesn\u2019t influence our editorial independence.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

<\/div>\n
\n

For numerous applications, allowing access to your device\u2019s exact location is logical. Your preferred weather application needs to understand your location to provide the daily forecast, just like your favorite fitness application for monitoring your running path.\u00a0<\/p>\n

However, certain applications unintentionally share their users\u2019 location information with third parties, including advertisers and data brokers, as the app developer might be unaware that this data-sharing option is set to active by default.<\/p>\n

Recent research from the Electronic Frontier Foundation aims to alert app developers that some third-party code integrated into their applications may also gather their users\u2019 location data once permission has been granted to the app.\u00a0<\/p>\n

Unless the developer explicitly disables this collection, the code snippet (known as software development kits, or SDKs) will automatically acquire the app\u2019s permissions and collect the user\u2019s exact location data.<\/p>\n

The EFF states that many developers may not be aware they are, by default, sharing their users\u2019 location data with third parties and encouraged app creators to turn off unnecessary data collection whenever feasible.\u00a0<\/p>\n

While advertising SDKs are marketed as a method for developers to monetize their apps, the trade-off is that users\u2019 location histories are passed to data brokers, who profit from that data, which can subsequently be sold to military organizations, governments, and intelligence agencies, such as the FBI.\u00a0This data also poses a security and privacy threat if it is hacked or stolen, a risk that some data brokers have faced.<\/p>\n

Among the Android apps identified by the EFF that were discreetly sharing users\u2019 location data were two that had been downloaded a total of 60 million times to date.<\/p>\n

The EFF conducted its analysis by examining the apps\u2019 network traffic and determining which services were receiving users\u2019 location data.<\/p>\n

Bill Budington, a senior staff technologist at the EFF, informed TechCrunch that the SDKs they reviewed represent a minor fraction of the larger advertising landscape, yet they claim to engage billions of users across tens of thousands of applications. This illustrates the extent of this form of location data harvesting.\u00a0<\/p>\n

The EFF\u2019s report mentioned that there are \u201cno SDK-specific location permissions,\u201d meaning that once the user permits their location data to be shared with the application, that data is likewise shared with advertisers.\u00a0The entities providing those SDKs are typically motivated commercially to encourage their clients to gather more data.<\/p>\n

\u201cApp-level location permissions alone cannot convey significant consent to location collection and sharing by third-party advertising SDKs,\u201d stated the EFF. \u201cAdvertising SDKs should not default to sharing personal data, particularly for sensitive information such as an individual\u2019s location.\u201d<\/p>\n<\/div>\n

When you make purchases through links in our articles, we may receive a small commission. This doesn\u2019t influence our editorial independence.<\/em><\/p>\n","protected":false},"author":2,"featured_media":3491522,"comment_status":"open","ping_status":"closed","sticky":false,"template":"Default","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-3491521","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/posts\/3491521"}],"collection":[{"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/comments?post=3491521"}],"version-history":[{"count":0,"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/posts\/3491521\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/media\/3491522"}],"wp:attachment":[{"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/media?parent=3491521"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/categories?post=3491521"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/tags?post=3491521"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}