Data is being leaked from iPhones via notifications

Security researchers have determined that a series of applications, including well-known platforms such as Facebook, LinkedIn, Instagram, and Twitter, are using notifications to leak data from iPhones.

Security researcher Tommy Mysk discovered a method that exploits how iPhones handle notifications, which are otherwise known for protecting data more effectively. It is important to emphasize that this method does not involve app developers violating Apple's privacy rules.

Examinations conducted by the company Mysk Inc found that popular apps such as Facebook, LinkedIn, TikTok, and X/Twitter collect user data via notifications. This allows companies to still access user information even when the apps are closed. Many users are known to close apps to save battery life and prevent background data collection. However, the notification-based data collection method is able to bypass such measures.

According to security researchers, companies use short background commands provided for notification personalization to collect information. This information is then added to the companies' data pools and can be analyzed. Under normal circumstances, Apple does not allow apps not initiated by the user to run. However, since iOS 10, programs become active for a very short time when notifications are sent, which allows for the transmission of data related to the notification. During this short window, many companies take the opportunity to collect personal data.

The collected data includes information about the device's software and hardware, data that enables user tracking, and even information that makes it possible to monitor interactions with other applications. Apple is expected to implement stricter regulations on this issue in future iOS updates.

News Source: 12punto