Xiaomi Phones Are Collecting Personal Data: Report
Muhammad Mubeen Javed
Gabriel Cirlig, a security researcher has discovered that Xiaomi phones are collecting data from the owner. Personal Data harvested through a built-in browser. Then Data go to remote servers.
The researcher using Redmi note 8. He noted that the phone was recording anything he was doing. The built-in browser recorded the websites he visited, the screens he swiped through, the setting he changed and much more.
The data was tracked in “Incognito Mode” also. This data sent to remoted servers in Singapore and Russia. Their web domains were hosted in China by Alibaba. These were all rented by Xiaomi.
Must Read: Xiaomi Launches Affordable Smart ACs
Cirlig downloaded the firmware for Xiaomi Mi Mix 3, Xiaomi Mi 10, and Redmi K20. He found that all of them had the same browser code. So this security issue is plaguing other Xiaomi devices as well.
Andrew Tierney, another security researcher discovered that other internet browsers by Xiaomi also harvesting data.
Xiaomi denied the researchers and claimed that security and privacy was the company’s top priority. A spokesperson of the company admitted that the phones were collecting data. But it was assured that it was all encrypted and anonymized.
Xiaomi had also denied that the browser was collecting data in Incognito Mode but that was a false claim as well.