{"id":10633,"date":"2018-03-24T18:13:10","date_gmt":"2018-03-24T12:43:10","guid":{"rendered":"http:\/\/www.altnews.in\/english-clone-2026\/?p=10633"},"modified":"2018-03-25T22:41:28","modified_gmt":"2018-03-25T17:11:28","slug":"is-pm-modis-app-sharing-personal-data-with-a-third-party-without-your-consent-yes","status":"publish","type":"post","link":"https:\/\/www.altnews.in\/english-clone-2026\/is-pm-modis-app-sharing-personal-data-with-a-third-party-without-your-consent-yes\/","title":{"rendered":"Is PM Modi’s APP sharing personal data with a third party without your consent? YES"},"content":{"rendered":"

A French security researcher, who has kept UIDAI on their toes<\/a> by exposing various security holes in the Aadhaar infrastructure, has claimed in a series of tweets that Prime Minister Narendra Modi’s application is sending personal information of its users to a third party website called in.wzrkt.com<\/em> and it is doing so without the user’s consent.<\/p>\n

\n

When you create a profile in the official @narendramodi<\/a> #Android<\/a> app, all your device info (OS, network type, Carrier \u2026) and personal data (email, photo, gender, name, \u2026) are send without your consent to a third-party domain called https:\/\/t.co\/N3zA3QeNZO<\/a>. pic.twitter.com\/Vey3OP6hcf<\/a><\/p>\n

— Elliot Alderson (@fs0c131y) March 23, 2018<\/a><\/p><\/blockquote>\n

\n

After a quick search, this domain belongs to an American company called @CleverTap<\/a>. According to their description, \u201c#CleverTap<\/a> is the next generation app engagement platform. It enables marketers to identify, engage and retain users and provides developers" pic.twitter.com\/Ikqp9GbCDm<\/a><\/p>\n

— Elliot Alderson (@fs0c131y) March 23, 2018<\/a><\/p><\/blockquote>\n

Pushing personal information such as email, photo, name, gender etc to a third party website without a user’s consent is a serious privacy breach. To ascertain whether this privacy breach occurred or not, Alt News decided to take a deep dive into this issue and investigated PM Modi’s Android App.<\/p>\n

Sniffing data transmitted by your phone<\/h3>\n

To ascertain whether your phone is transacting with a certain website or not, the data between the phone and the outside world needs to be intercepted. There are several software applications which allows one to do so. We used a popular software called Charles<\/a>. As described on the Charles website, it enables one to view all the HTTP and SSL\/HTTPS traffic between a machine and the Internet. The trial version of Charles works for 30 days after installation and runs only 30 minutes at a time. Details of how to configure Charles and your phone to intercept data is provided at the bottom of the article in the section “Technical Details”.<\/p>\n

Intercepting data<\/h3>\n

To verify the claim of the researcher, we installed the Narendra Modi Android app on our phone, tapped on the “Sign Up” button at the bottom and created a profile.<\/p>\n

\"\"<\/p>\n

During the process of creation of the profile leading upto a successful registration, the APP was transacting data over the Internet which we captured using the Charles software mentioned above. What we saw was that personal information such as name, email id, gender, telecom operator type and more was indeed being shared with the website in.wzrkt.com. In the screenshot below, it can be seen that the email-id pratik@xyzabc.com<\/em> that we entered during registration has been sent to in.wzrkt.com<\/em>.<\/p>\n

\"\"<\/p>\n

The video below will show a live demonstration of this fact-check and will show how personal information that you’re sharing with the Prime Minister’s app is indeed being sent to a third party website without your consent.<\/p>\n

NOTE: Kindly watch the video in Full HD\/1080p for better viewing.<\/strong><\/p>\n