A recent study conducted by the virtual private network (VPN) provider Surfshark has uncovered significant findings regarding data collection practices among major technology companies, particularly highlighting Meta’s approaches in comparison to its competitors. The research scrutinized privacy labels from a total of 171 iOS applications issued by tech giants, including Google, Apple, Microsoft, Amazon, and Meta.
The findings reveal a stark difference in user data collection declarations, with Meta’s applications indicating they collect an average of 25 out of 35 potential data types. This figure is notably higher than that of Apple and Microsoft, whose applications typically report collecting only seven or eight data types. Furthermore, among the twelve Meta apps evaluated, nine ranked within the top 40 of the most data-intensive applications, underscoring serious concerns about user privacy.
The methodology of this study focuses on the privacy information that developers submit to Apple’s App Store rather than conducting independent technical analyses of actual data transmissions. This means that Surfshark counts the number of categories of data an application may potentially gather, rather than measuring the actual volume or frequency of such data collection. It’s important to note that the disclosure of data categories does not mean every listed type of data is collected from all users. Thus, the conclusions drawn from this research are reflective of what companies voluntarily disclose about their data collection practices rather than an objective verification of those practices.
In particular, all the Meta applications examined in the study announced the collection of critical information such as device IDs, product interactions, performance data, and crash reports. Alarmingly, nine of these apps also indicated they collect precise location data, with researchers suggesting that this level of data collection exceeds what would likely be considered necessary for functional purposes. Among the Meta applications, seven reported collecting users’ browsing history.
While Meta leads the data collection metrics, Google’s applications also emerged prominently in this analysis, particularly across six categories of the App Store, including Photo & Video, Music, Entertainment, Utilities, Health & Fitness, and Developer Tools. Although the average number of data types reported by Google apps was less than Meta’s, twenty-nine out of forty apps that declared the broadest data collection practices were sourced from Google, with the company’s applications indicating a range of 18 to 26 data types collected.
Amazon’s Alexa represented the most data-intensive application outside of Meta, publicly disclosing the collection of 28 different data types. Amazon apps generally cited data collection of device IDs, email addresses, names, performance information, product interactions, and crash data, with eleven reporting the gathering of precise location data. Notably, Google’s significant presence was reflected in the sample size, which included 44 apps from the company—more than any other publisher—which raises questions about potential biases in the comparative results.
On the other hand, both Microsoft and Apple apps reported the fewest average number of data types collected. The most common data types listed by Microsoft apps were crash reports, device IDs, email addresses, names, and diagnostic information, with only two apps noting the collection of browsing history. Among Apple’s offerings, only the Safari application mentioned the gathering of browsing history, while six other Apple apps acknowledged collecting precise location data.
Dr. Luis Costa, the lead researcher at Surfshark, expressed concerns regarding the implications of such extensive data collection practices. By cross-referencing search histories, purchasing behaviors, and GPS location data across multiple applications, companies are able to create detailed profiles of users’ behaviors and movement patterns. This type of data aggregation raises significant ethical considerations in terms of user privacy and the potential misuse of sensitive information.
As users increasingly worry about how their data is being utilized, this study sheds light on the opaque practices of major technology companies and underscores the need for greater transparency and accountability in data collection strategies. The implications of these findings reverberate across the tech industry, as user trust and privacy remain pivotal in navigating the complexities of a data-driven digital landscape.