Anonymous claims Jio selling caller info to overseas advertisers
Tue 27 Sep 2016
Anonymous India has issued a warning alleging that Jio, a Mumbai-based provider of mobile and broadband services in India, was sharing caller information with overseas advertisers through two of their apps, in violation of user privacy.
The hacking group claims that Jio is sending packets of information to the United States and to Singapore with every call made. They posted a step-by-step guide for users to recreate the hack in order to verify the claims independently on the Anonymous India tumblr, and created a video demonstrating where and how they discovered the leak.
After analyzing the leaked data, the group said “(I)t is clear that jio app is using third party SDK and not verifying what data the SDK is collecting and where it is sending… this violates user privacy.
Representatives of the hacktivist group said that the culprits were two Jio apps, My Jio and Jio Dialer, which were parsing information and sending it to an advertising network known as mAdme.
MAdme is a mobile advertising and mobile engagement platform based in Dublin.
A representative from Reliance Jio Infocomm denied the allegations, saying, “Jio takes its customers’ security and privacy very seriously. In keeping with its highest standards of governance, Jio does not share its customers’ data with any other entity.”
They continued, “Any information captured by Jio is only for internal analysis to deliver better quality of service and recommend offerings from Jio’s product portfolio.”
Last year, Anonymous India accused Jio of sharing unencrypted geolocation information with China. Reliance Jio dismissed those allegations as well. However, Anonymous India did admit that Jio was more secure than it was a year ago, saying, “At least this time the traffic is going on https. Last time they did not even bother to encrypt it,” the group said.
Reliance Jio made news recently when they wrote a letter to India’s mobile telephony governance authority, the COAI, stating that the association should be completely overhauled, and suggesting that the incumbents were blocking new entrants to the field. The COAI refuted Jio’s allegations, calling them slanderous and mischievous.