Case 322: App required for this service requires broad device permissions

App required for this service requires broad device permissions

The app of the service requires more device permissions than necessary. As a consequence it can compromise your privacy by accessing many functions and information from your device, such as precise location, contacts, device identifiers etc.

Classification: bad

Weight: 80

Service	Title	Status	Author
Facebook	"information you allow us to receive through device settings you turn on, such as access to your GPS location, camera or photos.</li>"	APPROVED	import script Bot
Google	"We collect this information when a Google service on your device contacts our servers — for example, when you install an app from the Play Store or when a service checks for automatic updates. If you’re using an Android device with Google apps, your device periodically contacts Google servers to provide information about your device and connection to our services. This information includes things like your device type, carrier name, crash reports, and which apps you've installed."	APPROVED	Dr_Jeff Staff
Newegg.com	"we may collect information about the general location of a Device"	APPROVED	CyberSoul
Target	"When enabled, we may also use your device’s camera (e.g. Apple’s TrueDepth camera) so you can use services such as product visualization (e.g., scan room to see item in your space) or virtual fitting (e.g., scan facial data to try on accessories/beauty products). Information collected from the TrueDepth camera is used in real time - we do not store this information on our servers or share it with third parties.</p>"	DECLINED	Ardent_drub
Target	"When enabled, we may also use your device’s camera (e.g. Apple’s TrueDepth camera) so you can use services such as product visualization (e.g., scan room to see item in your space) or virtual fitting (e.g., scan facial data to try on accessories/beauty products). Information collected from the TrueDepth camera is used in real time - we do not store this information on our servers or share it with third parties.</p>"	DECLINED	Ardent_drub
Target	"When enabled, we may also use your device’s camera (e.g. Apple’s TrueDepth camera) so you can use services such as product visualization (e.g., scan room to see item in your space) or virtual fitting (e.g., scan facial data to try on accessories/beauty products). Information collected from the TrueDepth camera is used in real time - we do not store this information on our servers or share it with third parties.</p> "	APPROVED	Ardent_drub
Instagram	"We also collect contact information if you choose to upload, sync or import it from a device (such as an address book or call log or SMS log history), which we use for things like helping you and others find people you may know and for the other purposes listed below."	DECLINED	Dr_Jeff Staff
Instagram	"Device Information</b>As described below, we collect information from and about the computers, phones, connected TVs and other web-connected devices you use that integrate with our Products, and we combine this information across different devices you use. For example, we use information collected about your use of our Products on your phone to better personalize the content (including ads) or features you see when you use our Products on another device, such as your laptop or tablet, or to measure whether you took an action in response to an ad we showed you on your phone on a different device.Information we obtain from these devices includes: <ul> <li> <b>Device attributes:</b> information such as the operating system, hardware and software versions, battery level, signal strength, available storage space, browser type, app and file names and types, and plugins.</li> <li> <b>Device operations:</b> information about operations and behaviors performed on the device, such as whether a window is foregrounded or backgrounded, or mouse movements (which can help distinguish humans from bots).</li> <li> <b>Identifiers:</b> unique identifiers, device IDs, and other identifiers, such as from games, apps or accounts you use, and Family Device IDs (or other identifiers unique to Facebook Company Products associated with the same device or account).</li> <li> <b>Device signals:</b> Bluetooth signals, and information about nearby Wi-Fi access points, beacons, and cell towers.</li> <li> <b>Data from device settings:</b> information you allow us to receive through device settings you turn on, such as access to your GPS location, camera or photos.</li> <li> <b>Network and connections:</b> information such as the name of your mobile operator or ISP, language, time zone, mobile phone number,"	APPROVED	Dr_Jeff Staff
Pinterest	"In addition to log data, we collect information about the device you’re using Pinterest on, including the type of device, operating system, settings, unique device identifiers and crash data that helps us understand when something breaks."	APPROVED	Dr_Jeff Staff
Netflix	"If you use the Netflix app on a mobile device, tablet, or streaming media device, we may collect a resettable device identifier from your device. Resettable device identifiers (also known as advertising identifiers) are similar to cookies and are found on many mobile devices and tablets (for example, the "Identifier for Advertisers" (or IDFA) on Apple iOS devices and the "Google Advertising ID" on Android devices), and certain streaming media devices."	APPROVED	Agnes de Lion Staff
Snapchat	"we collect: <ul> <li>information about your hardware and software, such as the hardware model, operating system version, device memory, advertising identifiers, unique application identifiers, apps installed, unique device identifiers, browser type, language, battery level, and time zone;</li> <li>information from device sensors, such as accelerometers, gyroscopes, compasses, microphones, and whether you have headphones connected. and</li> <li>information about your wireless and mobile network connections, such as mobile phone number, service provider, IP address, and signal strength.</li> "	APPROVED	Agnes de Lion Staff
Yahoo!	"This information includes device specific identifiers and information such as IP address, cookie information, mobile device and advertising identifiers, browser version, operating system type and version, mobile network information, device settings, and software data."	APPROVED	Agnes de Lion Staff
Gfycat	"Gfycat will collect certain information that your mobile device sends when you use such Services, like a device identifier, user settings, location information, mobile carrier, and the operating system of your device. Mobile versions of Gfycat’s Services may require that users log in with an account. In such cases, information about use of mobile versions of the Services may be associated with accounts. In addition, Gfycat may enable Individuals to download an application, widget, or other tool that can be used on mobile or other computing devices. Some of these tools may store information on mobile or other devices. These tools may transmit Personal Information to Gfycat to enable Individuals to access accounts and to enable Gfycat to track use of these tools. Some of these tools may enable users to email reports and other information from the tool. "	APPROVED	Agnes de Lion Staff
Netease Cloud Music	"我们可能会根据您在软件安装及使用中授予的具体权限，接收并记录您所使用的设备相关信息（例如<u>IMEI</u>、<u>MAC</u>、<u>Serial</u>、<u>SIM卡IMSI识别码</u>、<u>设备机型</u>、<u>操作系统及版本</u>、<u>客户端版本</u>、<u>设备分辨率</u>、<u>包名</u>、<u>设备设置</u>、<u>进程及软件列表</u>、<u>唯一设备标识符（IMEI/ Android ID/Open UDID/GUID/MAC/SIM卡IMSI信息）</u>、<u>软硬件特征信息</u>）、设备所在位置相关信息（例如<u>IP地址</u>、<u>GPS位置信息</u>）。为了收集上述个人设备信息，我们将会申请访问您设备的相关权限，包括设备信息权限、位置权限等。"	APPROVED	reikousami Curator
Lofter	"我们可能会接收并记录您所使用的设备相关信息。例如设备机型、操作系统及版本、客户端版本、设备分辨率、包名、设备设置、进程及软件列表、设备标识符（设备MAC地址/IMEI/Android ID/IDFA/OpenUDID/GUID/SIM 卡IMSI 信息）、软硬件特征信息、设备所在位置相关信息（例如IP 地址、GPS位置以及能够提供相关信息的WLAN接入点、蓝牙和基站传感器信息）。<br> 为了收集上述基本的个人设备信息，我们将会申请访问您的设备信息的权限，我们收集这些信息是为了向您提供我们基本服务和基础功能，如您拒绝提供上述权限将可能导致您无法使用我们的产品和服务。"	APPROVED	reikousami Curator
Baidu Tieba	"当你使用“百度贴吧”移动应用时，为了保障您正常使用“百度贴吧”移动应用服务，更准确定位并解决您在使用“百度贴吧”移动应用服务时遇到的问题，改进及优化“百度贴吧”移动应用的服务体验，保障您的帐号安全，我们会收集设备属性信息（例如您的硬件型号、操作系统版本、设备配置、唯一设备标识符、国际移动设备身份码IMEI、网络设备硬件地址MAC、广告标识符IDFA），设备连接信息（浏览器的类型、电信运营商、使用的语言）以及设备状态信息（例如设备传感器数据，设备应用安装列表）。对于从您的各种设备上收集到的信息，我们可能会将它们进行关联，以便我们能在这些设备上为您提供一致的服务。我们可能会将您的设备信息或电话号码与您的百度帐户相关联。"	APPROVED	reikousami Curator
Однокла́ссники (Ok.ru)	App required for this service requires broad device permissions	APPROVED	Agnes de Lion Staff
Zhihu	"设备信息：包括设备型号、唯一设备标识符（如 IMEI / Android ID / IDFA / OPENUDID / GUID / IMSI 信息）、设备 MAC 地址、操作系统类型及型号、屏幕分辨率、电信运营商、软件安装列表、软件版本号、系统语言。</strong> </p> <p> <strong>日志信息：包括您在使用知乎时发布、浏览的内容，您发布内容时的操作时间、类型、网络原地址、目标地址、端口，访问的日期和时间，登录 IP 信息。"	APPROVED	reikousami Curator
12306	"<strong>设备信息</strong>：我们会根据您在软件安装及使用中授予的具体权限，接收并记录您所使用的设备相关信息（例如<strong>设备型号、操作系统版本、设备设置、唯一设备标识符</strong>等软硬件特征信息），以向您提供安全保障。"	APPROVED	reikousami Curator
LinkedIn	" If you opt to import your address book, we receive your contacts (including contact information your service provider(s) or app automatically added to your address book when you communicated with addresses or numbers not already in your list).</p> <p>If you sync your contacts or calendars with our Services, we will collect your address book and calendar meeting information to keep growing your network by suggesting connections for you and others, and by providing information about events, e.g. times, places, attendees and contacts.</p>"	APPROVED	Agnes de Lion Staff
OneSignal	" <li>Information associated with or related to devices, such as device type (e.g., mobile, tablet). type and version of operating system (e.g., Android, iOS). network provider. mobile browser (e.g. Safari, Chrome, etc.). language setting. time zone. and network status type (such as WiFi). </li> </ul> <p>As noted above, we refer to all of the above collectively as the “<strong>SDK Information </strong>.” </p>"	APPROVED	Agnes de Lion Staff
Yandex	"iv) information related to your activity while using the Sites or Services (e.g. your search history, data on purchases in the Services, data on visited organizations, likes and preferences, email addresses of your mailing contacts, phonebook data, information about interaction with other users, as well as files and content stored in Yandex systems);"	APPROVED	Agnes de Lion Staff
VPN Hamster	App required for this service requires broad device permissions	APPROVED	Agnes de Lion Staff
ADT	"Mobile Application:</b> We may collect information such as registration and activation information from our mobile application(s) associated with our service(s) and your device(s). </li> <li> <b>Device Data:</b> We may collect various types of data and event information from your device(s) by using cameras, microphones, GPS, or other monitoring sensors. </li>"	APPROVED	Agnes de Lion Staff
Instabridge	"When you use the Service and when the Service is running in the background, certain information will be collected from your online interactions, including but not limited to information about your use of the Service, your IP address, location data, device ID, time, BSSID and SSID (Wi-Fi network name), SIM card identifiers (IMEI), MAC address of access point, signal level, device location, captive portal login steps and other technology on the devices you use to access the Service."	APPROVED	Agnes de Lion Staff
Alibaba	"If you are using our communication tools on the Platform (particularly in case of voice communication), we may require access to your camera and/or microphone, and may conduct voice recordings"	APPROVED	private prawn Curator