The TikTok mobile app is reported to collect data not only while using the mobile app, but on all activities across the device while the mobile app is installed, even if not in use. Of particular concern from a security perspective is the reference in TikTok's Terms of Service that the app may capture all keystroke patterns used on the device which would allow usernames and passwords to be exposed.
It is also believed that TikTok collects information about the use of the mobile device beyond the use of the TikTok application based on its Privacy Policy.
This data collection is similar to other social media platforms that collect a significant amount of data, however, some aspects identified in TikTok's Privacy Policy, such as keystroke logging, are unique to TikTok and pose a significant security risk. Additionally, there is concern that TikTok is sharing all of the data that it collects with its parent company ByteDance with the risk that it in turn could provide this data to China's government under its national security law. This could pose risks to UBC's broader systems and the personal data of its community, in addition to intellectual property rights, academic freedom, and reputation. In 2022 TikTok confirmed that employees in China have access to data, even if stored outside Canada.
By installing software such as social media apps on your mobile devices, you give these companies permission to access your phone's data including photos, videos, contact lists, and location information. Sometimes you can explicitly deny these permissions, but in order to use these apps to their fullest, you may not be given that option.
- Here are some risks that could impact you:
- Identity theft. Many people consider their personal social media presence to be private. However, attackers can use personal information shared on these apps to impersonate you and access confidential data, such as bank account information. This is a powerful tool for those looking to commit financial fraud.
- Privacy concerns. Depending on your privacy settings, personal information and communications posted on social media can be accessed by unintended readers or recipients.
- Data leakage. The apps you install may contain spyware, resulting in the leakage of your important information, including credit card numbers, personal photos, or stored passwords.
- Information sharing.Apps may collect your personal information in the background, such as where you shop, what you search for, and your travel patterns, and then share it with marketing firms or other agencies without your knowledge.