IT expert reveals: Xiaomi smartphones must spy on their users

IT expert reveals: Xiaomi smartphones collect too much data about their users

IT security experts have discovered that Xiaomi smartphones record user behavior and send it to servers in China. Xiaomi promises a data protection update.

Xiaomi smartphones are becoming increasingly popular in Europe, and therefore are increasingly becoming the focus of security and data protection experts. Now, a report by the American magazine “Forbes” warns that the Chinese manufacturer’s devices collect more data than users suspect.

Among other things, the Xiaomi browser causes criticism. Computer security specialist Gabriel Cîrlig He found out that the browser records all visited websites and search entries and transfers the data to a Xiaomi server in China. Incognito mode cannot prevent this either. The same phenomenon occurs with other Xiaomi browser applications on the Play Store. Entries in search engines, such as Google and Duck Duck Go, were also transferred to Xiaomi. However, the Chinese cell phone maker tracks much more.

Xiaomi is not only interested in browsing and search behavior, but also monitors the report, what folder and files the user opens on their smartphone and what settings they use. The Xiaomi music app is also said to have transferred the played tracks, including the timestamp. According to Cîrlig, this goes far beyond the usual collection of telemetry data from the application (for example, bug reports) to improve the software. Thus, he sees a massive invasion of user privacy. Smartphone owners could be spied on in this way.

Xiaomi responds to the accusations

Xiaomi has largely confirmed the report, but is defending itself in a statement against the espionage allegations. Accordingly, information about smartphone settings, user interface usage, memory performance and usage, crash reports, and general system information is logged. The company emphasizes that it adheres to the applicable data protection rules. The browser URL is registered to identify slow loading websites.

According to Xiaomi, usage data is collected together to improve services. The individual user remains anonymous. According to critics, it would be entirely possible to assign data collections to a specific user, for example, based on the identification of the smartphone.

It is unclear to what extent Xiaomi’s data collection practice differs from that of other manufacturers such as Samsung or Apple. Samsung users are also asked to set up an account when setting up their smartphone. They agree to the collection and analysis of their data. In accordance with the European General Data Protection Regulation, companies need user permission if they want to store personal data on foreign servers.

In any case, Xiaomi wants to improve and equip its browser applications (Mint Browser, Mi Browser) with a switch that users can use to disable the collection and evaluation of their browser data in incognito mode.

(oli / str / t-online.de)