Facebook app has been collecting Android phone data
Facebook app data collection capabilities apparently extend to tracking all the phone calls on Android devices.
As the post-Cambridge Analytica scandal fallout continues to unfold, some Facebook users are downloading their data from the social media platform and uncovering a surprise: Detailed phone records, including dates, times, call lengths, call recipients, and phone numbers.
It’s only happening with people who use Android devices, and only when certain data approvals are granted. For example, I switched to the Android ecosystem several years ago, but there’s no record of calls in my own Facebook data download.
That wasn’t the case for Dylan McKay, a New Zealand-based programmer whose tweeted a screenshot of Facebook’s collected phone data went viral last week. A subsequent Ars Technica investigation revealed the Android connection.
When access is given, Facebook uses an Android phone’s contact data to help guide its recommended friends feature. The company’s Messenger app goes further, seeking permission to access call and text message logs on Android devices. Those aren’t the only ways in, however.
As Ars discovered, in older, pre-Jelly Bean (v4.1) versions of Android, granting the Facebook app access to phone contacts also allowed it to access call and text logs. Later Android updates turned all of those into discrete permissions, but the change didn’t affect Android apps that had already been given permission.
In other words, if you’re a longtime Android user and you gave your Facebook app permission to look at your contacts before the release of Android 4.1 — which came out in 2012 — the app was able to keep looking at your call and text data. As Ars notes, Google formally started advising developers not to use the Android 4.0 API anymore in Oct. 2017.
The discovery comes at a moment when all eyes are scrutinizing Facebook’s data collection practices. The social network has been dealing with fleeing advertisers, federal inquiries, and widespread backlash after it was discovered that political consulting firm Cambridge Analytica exploited developer resources to harvest the data of more than 50 million users in 2014.
If you’d like to take a look at all the personal data Facebook has in your name, you can find detailed instructions for snatching that data (and removing your account from the platform completely, if that’s your preference, right here).
