Extent of Instagram and Facebook tracking exposed
Meta apps inject a tracking code into websites when people are viewing them
Instagram and Facebook apps track what people do when browsing third-party websites without their consent, privacy researcher Felix Krause has warned.
Krause, a former Google engineer, wrote on a blogpost on Wednesday that the iOS app injects codes into every website shown and uses “a custom in-app browser” instead of the built-in Safari to monitor users’ activity.
The app does so “without the consent from the user, nor the website provider,” Krause wrote.
The researcher said that he could not determine the exact data Instagram is tracking but stressed that such in-app browsers allow everything a user does on a website to be tracked, including “every tap” and “scrolling behavior.”
He added that such browsers could be exploited to steal sensitive data, such as home addresses.
In a statement to The Guardian on Thursday, Instagram’s parent company Meta said that injecting a tracking code was in accordance with users’ preferences on whether or not they allowed apps to follow them.
“We intentionally developed this code to honor people’s [Ask to track] choices on our platforms,” a spokesperson said. “The code allows us to aggregate user data before using it for targeted advertising or measurement purposes.”
The spokesperson added: “For purchases made through the in-app browser, we seek user consent to save payment information for the purposes of autofill.”
In response to Meta’s statement, Krause argued that the practice still “exposes a big risk for the user,” and that “there is no way to opt-out of the custom in-app browser.”
Commenting on its privacy white paper released last month, Meta said its goal was to “balance privacy and integrity when using people’s data to reduce bad experiences with our technologies.”
Krause, a former Google engineer, wrote on a blogpost on Wednesday that the iOS app injects codes into every website shown and uses “a custom in-app browser” instead of the built-in Safari to monitor users’ activity.
The app does so “without the consent from the user, nor the website provider,” Krause wrote.
The researcher said that he could not determine the exact data Instagram is tracking but stressed that such in-app browsers allow everything a user does on a website to be tracked, including “every tap” and “scrolling behavior.”
He added that such browsers could be exploited to steal sensitive data, such as home addresses.
In a statement to The Guardian on Thursday, Instagram’s parent company Meta said that injecting a tracking code was in accordance with users’ preferences on whether or not they allowed apps to follow them.
“We intentionally developed this code to honor people’s [Ask to track] choices on our platforms,” a spokesperson said. “The code allows us to aggregate user data before using it for targeted advertising or measurement purposes.”
The spokesperson added: “For purchases made through the in-app browser, we seek user consent to save payment information for the purposes of autofill.”
In response to Meta’s statement, Krause argued that the practice still “exposes a big risk for the user,” and that “there is no way to opt-out of the custom in-app browser.”
Commenting on its privacy white paper released last month, Meta said its goal was to “balance privacy and integrity when using people’s data to reduce bad experiences with our technologies.”
AI Disclaimer: An advanced artificial intelligence (AI) system generated the content of this page on its own. This innovative technology conducts extensive research from a variety of reliable sources, performs rigorous fact-checking and verification, cleans up and balances biased or manipulated content, and presents a minimal factual summary that is just enough yet essential for you to function as an informed and educated citizen. Please keep in mind, however, that this system is an evolving technology, and as a result, the article may contain accidental inaccuracies or errors. We urge you to help us improve our site by reporting any inaccuracies you find using the "Contact Us" link at the bottom of this page. Your helpful feedback helps us improve our system and deliver more precise content. When you find an article of interest here, please look for the full and extensive coverage of this topic in traditional news sources, as they are written by professional journalists that we try to support, not replace. We appreciate your understanding and assistance.
