← Latest briefing

Technology

Proton report finds dozens of Chinese-owned VPN apps track user data and location

A study by the privacy service Proton identified 64 VPN apps containing tracking code, with a quarter collecting location data.

The short version

  • A report by Proton identified 64 Chinese-owned VPN apps on Apple and Google marketplaces that collect user data, including device IDs and network details.
  • One in four of the flagged VPN apps actively tracks user location, exposing users to potential privacy risks.
  • Proton found that 31 of these app publishers use shell companies in jurisdictions like the UK, Singapore, and Hong Kong to obscure ownership.
  • Neither Apple nor Google immediately responded to requests for comment regarding their app verification processes.

Key facts

  • Proton's report identified 64 VPN apps available on the Apple App Store and Google Play Store that contain software trackers collecting device, network, and mobile carrier information.[CNET]
  • Twenty-five percent of the 64 analyzed VPN apps actively track the physical location of users.[CNET]
  • The identified Chinese-owned VPN apps recorded over 13 million downloads in June alone.[CNET]
  • Thirty-one of the Chinese-owned VPN developers used shell corporations registered in places such as the UK, Singapore, and Hong Kong to conceal ownership.[CNET]
  • According to the report, tech companies based in Israel, Russia, and Five Eyes nations also gather tracking data from VPN users.[CNET]

What remains uncertain

  • Apple and Google did not immediately respond to requests for comment regarding their marketplace verification standards or independent audit practices.[CNET]

Sources