Chinese VPN Apps Harvest User Data

A report released by Proton has exposed significant privacy risks associated with certain virtual private network (VPN) applications. The study found that 64 VPN apps downloaded in the United States are owned by Chinese companies and contain trackers designed to collect extensive user information.

These trackers gather data such as device IDs, network details, and mobile carrier information. Worryingly, 25% of the implicated apps were discovered to actively monitor and record user locations. This collection of data, potentially from millions of users, could be exploited by authoritarian governments like China's.

Such exploitation poses a severe threat to individuals in sensitive professions, including public officials, law enforcement, journalists, and protesters who rely on VPNs for their safety. While China is highlighted, companies in Israel, Russia, and Five Eyes countries also collect similar tracking data from millions of people.

The report also points to a lack of stringent verification processes by Apple and Google. Both companies rely on developer-submitted paperwork with minimal independent audits, making it difficult for users to discern trustworthy VPN apps from those that compromise privacy. Experts advise opting for transparent VPNs with clear policies on data collection and jurisdiction.