Use of TikTok at UBC
Use of TikTok at UBC
Encouraging safe use of TikTok
Use your web browser to access TikTok
The Government of Canada has implemented a ban on the use of TikTok on government-issued devices, and provincial governments have followed suit. At this time, UBC is monitoring the situation closely and updates will be provided as required. We encourage you to be cautious by uninstalling the TikTok app from your devices and using your web browser to access content instead.
We also recommend that you evaluate your activities on all of your social media accounts, including updating your privacy settings and limiting the amount of personal information that you share.
TikTok is a popular social media platform with a focus on short-form video content. The app allows users to view and share videos, with suggested content determined by TikTok's algorithms.
TikTok is UBC's fastest-growing social media platform used by many UBC students, staff, and faculty for entertainment, education, research, outreach, and recruitment purposes. However, it has also raised security and privacy concerns due to its data collection practices and sharing of data with its parent company ByteDance, based in China.
Go even further...
Protecting your social media accounts and personal information
Safety precautions checklist
- Access your account through your web browser, versus downloading the app
- Update your privacy settings to control what information is collected and shared.
- Limit the personal information you share including birthdate, address, and phone number.
- Do not click on suspicious messages or links, even if they appear to be posted by someone you know.
- If you get a "Friend Request" from someone you think you are already friends with then think, don't click.
- Check your account for that friend
- If you are still connected to that friend then you can assume that the new request is a scam
- Report the scam and notify your friend that someone is impersonating them
- Flag any posts or messages that appear to be scams.
- Use unique and complex passwords for your accounts.
- Using a password generator can help you create strong passwords and will securely store them for you so you don't have to remember them on your own.
- Do not log in to your account while using public Wi-Fi
- Enable multi-factor authentication
The risk considerations of TikTok
The TikTok mobile app is reported to collect data not only while using the mobile app, but on all activities across the device while the mobile app is installed, even if not in use. Of particular concern from a security perspective is the reference in TikTok's Terms of Service that the app may capture all keystroke patterns used on the device which would allow usernames and passwords to be exposed.
By installing software such as social media apps on your mobile devices, you give these companies permission to access your phone's data including photos, videos, contact lists, and location information. Sometimes you can explicitly deny these permissions, but in order to use these apps to their fullest, you may not be given that option.
- Here are some risks that could impact you:
- Identity theft. Many people consider their personal social media presence to be private. However, attackers can use personal information shared on these apps to impersonate you and access confidential data, such as bank account information. This is a powerful tool for those looking to commit financial fraud.
- Privacy concerns. Depending on your privacy settings, personal information and communications posted on social media can be accessed by unintended readers or recipients.
- Data leakage. The apps you install may contain spyware, resulting in the leakage of your important information, including credit card numbers, personal photos, or stored passwords.
- Information sharing.Apps may collect your personal information in the background, such as where you shop, what you search for, and your travel patterns, and then share it with marketing firms or other agencies without your knowledge.
How apps installed on work devices impact UBC
Since most of these apps, especially those on personal devices, are not vetted by UBC's privacy and information security teams, they may contain vulnerabilities that could be exploited and result in security incidents.
Due to the data collection and sharing policies of these apps, the University's confidential information is at risk of exposure to unauthorized users, which may result in reputational and privacy impacts to you and the UBC community.
These applications may be an entry point for social-engineering attacks such as phishing and ransomware, which may put the University, its community members, and their data at risk.
UBC Privacy & Information Security
While we recognize the security and privacy risks of using TikTok, the nature of these risks has not yet been proven and has not changed overnight. While the federal and provincial bans have shone a spotlight on the issue, at this time UBC is not considering a ban on TikTok use on university-owned devices, however, the situation will continue to be monitored closely.
As this is a dynamic issue, we encourage you to bookmark this page for further updates. We also recommend that you use this information as an opportunity to evaluate your activities on all of your social media accounts, including TikTok.