Meta stored millions of Instagram passwords in plaintext format, readable by thousands of employees from 2012-2019. This security failure was discovered during an internal investigation and affected a significa...
X has been using user posts, interactions, and potentially private messages to train its Grok AI system without meaningful user consent. The default opt-in setting was enabled without notification, and the opt-...
TikTok knowingly collected data from millions of children under 13, built backdoors into the app to allow children to bypass age verification, and failed to honor parent deletion requests. The DOJ/FTC lawsuit a...
X sells user data to Dataminr, a surveillance firm used by US Secret Service and law enforcement to monitor social media activity, while Musk publicly opposes government surveillance. This creates a profitable...
Apple receives $20 billion annually from Google to make it Safari's default search engine, profiting from Google's user tracking while marketing itself as privacy-focused. This creates a financial conflict of i...
Unlike Signal, Telegram's default chats are NOT end-to-end encrypted. Messages are stored on Telegram's servers in a format the company can access. Only 'Secret Chats' are encrypted, but these don't sync across...
Google has provided location data to law enforcement through 'geofence warrants' that request data on all users in a geographic area, sometimes leading to wrongful arrests of innocent people who happened to be...
While popular, Spotify Wrapped demonstrates the detailed personal profile Spotify builds, tracking not just songs but listening times, moods inferred from music, activities, and social comparisons. This annual...
Users cannot delete their Threads account without also deleting their entire Instagram account, effectively trapping users who want to leave Threads but keep Instagram. This dark pattern prevents users from exe...
Multiple investigations found Discord is used by predators to groom children, with the platform's private servers and DMs enabling exploitation. Discord's moderation has been criticized as inadequate despite re...
Amazon admitted Ring provided user footage to law enforcement at least 11 times without user consent or a warrant, citing 'emergency' circumstances. This creates a private surveillance network accessible by pol...
Despite WhatsApp's end-to-end encryption for message content, Meta collects extensive metadata including: who you communicate with, how frequently, when you're online, your IP address, phone model, mobile netwo...
WhatsApp updated its privacy policy to require users to share data with Facebook or stop using the service. This includes phone numbers, transaction data, IP addresses, and how you interact with businesses. The...
iOS 14 revealed LinkedIn was secretly accessing users' clipboard data with every keystroke, potentially capturing passwords, crypto wallet addresses, and sensitive information copied from other apps.
Investigation revealed Amazon employs thousands of workers worldwide to listen to Alexa voice recordings from users' homes, including private conversations, arguments, and even suspected sexual assaults. Worker...
Investigation revealed third-party app developers were reading users' private Gmail messages. Google allowed this through its API permissions system, enabling hundreds of companies to read emails of millions of...
Uber employees used internal 'God View' tool to track users' real-time locations without authorization, including journalists investigating the company and employees tracking ex-partners. This demonstrated seve...
Small focused tools for privacy, spending, and skills.