Apps used by millions around the world track everything you do

NEWS CENTER

Created: July 22, 2025 11:50

UK-based consumer magazine Which? examined 20 popular apps across social media, online shopping,smart home systems , and fitness categories. The research, conducted in collaboration with cybersecurity firm Hexiosec, found that these apps requested access to sensitive data such as location, microphone, and device files.

“IT’S LIKE FREE, BUT IT’S PAID FOR WITH USER DATA”

"Millions of people rely on these apps every day for everything from health tracking to online shopping. But our research has shown that users are actually 'paying' for vast amounts of personal data in exchange for these seemingly free services," said Harry Rose, editor of Which?

�

28 BILLION DOWNLOADS, 882 PERMISSIONS

The 20 apps examined in the study have been downloaded more than 28 billion times worldwide. If a person installs all 20 apps, they are granted a total of 882 separate permissions.

• China-based Xiaomi Home topped the list with 91 permissions, five of which are in the "risky" category.
• Samsung Smart Things requires 82 permissions (8 of which are risky), Facebook requires 69 permissions (6 of which are risky), and WhatsApp requires 66 permissions (6 of which are risky).
• TikTok requires 41 permissions (3 of which are risky), while YouTube requires 47 permissions (4 of which are risky).

DATA GOES TO CHINA

Xiaomi Home and AliExpress were also found to be sending data to China. AliExpress requests six risky permissions, such as microphone access and precise location, while also subjecting users to intense email marketing.

BEWARE OF RISKY PERMITS

Risky permissions include sensitive data like microphone access, precise location access, or access to on-device files. Experts say this data holds significant commercial value for companies and allows them to target "disturbingly accurate" ads to users.

Meta (owner of Facebook, WhatsApp, and Instagram) argued that the microphone doesn't work without user permission. Samsung said all its apps comply with UK data protection laws. TikTok said "privacy and security are at the core of every product."

“DO NOT APPROVE PERMISSIONS BLINDLY”

"Recklessly accepting the permissions we grant when downloading a new app seriously risks our privacy. Users need to be more vigilant," warned Which? editor Rose.