A study by Leuven University (KUL) has revealed that on the 15 most popular dating apps, including Tinder and Grindr users’ personal data is often too easily accessible to third parties. This means that, for example, criminals can use the apps to locate potential victims. Since the study was published most apps have taken measures to plug the leaks. Nevertheless, those that carried out the study still advise users to be on their guard and provide tips to ensure privacy.
Dating apps tighten security after Leuven University study reveals data leaks
Published:
At the end of August, a fatal shooting took place at a flat in Brussels. The shooting is believed to have been motivated by homophobia. The victim’s son is believed to have met the person that came to his home and killed his father on the dating app for gay men Grindr. This tragic case shows only too clearly that we can never be too careful with personal data in general, and location data in particular.
Researchers from the DistriNet research group at KU Leuven examined how safe personal and sensitive data is on dating apps. They looked at location-based dating apps (LBD apps) such as Tinder, Badoo, Grindr and Bumble that allow users to meet new people in their vicinity. The researchers selected the 15 most downloaded LBD apps from the Google Play Store.
Personal data, sensitive data and usage data
The researchers analysed three categories of data shared by users
- personal data (name, age, nationality, telephone number, place of residence...)
- sensitive data (political affiliation, religion, alcohol consumption, sexual orientation...)
- usage data (time that the app was used last, whether you were “liked”, what type of relationship you are looking for...)
Some of this data is visible in the apps and sometimes its visibility is even mandatory. In the case of other data, you can decide whether or not it should be visible.
However, choosing for the data to be kept invisible does not necessarily mean that it will be.
The DistriNet research group’s Karel Dhondt told VRT News that “Hackers can still go and find the data in the internet traffic between the app and the server”
“We were careful when carrying out our research. We only used the built-in functions of the apps. We we did not hack the servers, and we only worked with profiles we created ourselves. This means that we did not see any data from real users of the apps”.
The results?
The results were clear: all apps leaked personal and sensitive data about users. Here are the study’s main conclusions:
Internet traffic from all apps leaked sensitive usage data such as data on gender and sexual orientation.
By adjusting the data traffic settings, on Bumble the researchers were able to see other user’s age and gender preferences.
6 of the 15 most popular LBD apps also leaked detailed location data that allowed the researchers to pinpoint almost exactly the location of other users.
The most popular dating app, Tinder, requests relatively little personal data and thoroughly protects user locations.
Researcher Victor Le Pochat told VRT News that " The risks are clear. The personal and sensitive data that we were able to reveal easily would be invaluable to people with ill-intent be they acquaintances or complete strangers. Releasing personal data makes users vulnerable to online manipulation via phishing or identity theft”.
“When sensitive data includes information about a person’s sexual orientation and their location it can put them in physical danger from stalking or assault, or even prosecution, as has already has already been the case with LGBTQ+ people in Egypt".
The researchers have shared the results of their study with those in charge of the apps.
Karel Dhondt told VRT News that most have carried out modifications to ensure that the data leak issues are resolved.
"Time for a date with your data"
The researchers give 3 tips to users.
1) Be aware of what you share. What you see about others, others may also see about you. Don't unnecessarily share information that could be sensitive, such as your employer or political affiliation.
2) Don't rely too much on features of dating apps to hide data from others. Everything you share with a dating app is stored on their servers and can be shared with others now or in the future, knowingly or unknowingly.
2) Use your smartphone's built-in features to protect your location. Consider sharing only an approximate location, and setting your smartphone to require permission to share your location every time you open a dating app.