According to the article, the app is tracking lots of things happening on the devices. So, I thought, I’m curious about what Exodus Privacy says about this app, so I found the results here: https://reports.exodus-privacy.eu.org/en/reports/com.systoon.dongaotoon/latest/ . I was shocked to see that Exodus Privacy says that there are no trackers with this app.
My first thought is, I’m misunderstanding something, I’m not properly interpreting the results from Exodus Privacy.
How do I reconcile what Exodus Privacy tells me about trackers on this app versus what the article is reporting?
Technically, Exodus can be correct in saying there are no trackers detectable in the app, even if there are serious vulnerabilities in its code that could enable sensitive data gathering at some point.
See the original analysis and reporting by Citizen Lab, and pay attention to the summary findings up top:
Additionally, according to reporting, the app collects a lot of sensitive data (self-reported by the user), which is likely loaded onto servers at the parent company, just as part of the app functionality, with no trackers required.