DPE-2026-0013

Meeliftende component

Een meegeleverd onderdeel verzamelt voor eigen rekening, naast wat de app zelf doet.

Familie
Telemetrie
Status
actief
Geldt voor
mobile-app, desktop, firmware

Wat er gebeurt

An application ships a third-party library that, beyond the service it provides to the app, gathers device identifiers, installed applications, location or contacts and sends them to its own infrastructure. The developer may not have read what it does.

Waarom het ertoe doet

The user chose the app, not the passenger. The collection continues in the background, is invisible in the interface, and often reaches parties that trade in the data rather than use it.

Veelvoorkomende oorzaken

  • analytics or advertising SDK with collection enabled by default
  • monetisation library added for revenue rather than function
  • component inherited from a framework or a white-label build

Dit is het níet

A processor library operating strictly on the developer's instructions is not this entry. The distinguishing feature is collection on the component's own account.

Hoe je het vaststelt

Indicator

Outbound requests from the application to hosts of a bundled component, carrying device or user identifiers, at moments unrelated to any user action in that app.

Methode

network-with-identifier

Kwaliteit van de detectie

95 van 100

De grenzen van deze bevinding

Wat dit patroon zou weerleggen

  • The traffic serves the function the user invoked.met de hand te toetsende bevinding vervalt
  • The identifiers are resettable and not tied to the device permanently.met de hand te toetsende bevinding wordt zwakker
  • The component is configured to collect nothing and the traffic is a heartbeat only.met de hand te toetsende bevinding wordt zwakker

Wat dit patroon níet vaststelt

  • harm; the catalogue standardises a finding so it can be referred to, it does not weigh it
  • severity; there is no score here, by design. Weighing belongs to whoever applies the entry to a concrete case
  • unlawfulness; that is for a supervisory authority or a court
  • intent; a fault is usually a build decision, not a plan
  • absence: not finding it in one capture is not evidence that it is not there

Reproduceren

  • manualMETHOD.mdno dedicated reproduction exists yet; follow the general method and the indicator above

Juridisch kader

Bepalingen

eu-gdpr-6-1-aeu-gdpr-44

Rechtspraak

cjeu-fashion-id

Veelgehoorde tegenwerpingen

The SDK is the supplier's responsibility.

The developer decided to ship it. Fashion ID holds that arranging for data to reach a third party makes you jointly responsible for that reaching.

We only use it for crash reporting.

Then the traffic should be limited to crashes. Establish what the payload contains when nothing has crashed.

Geldt wanneer

to-processing

Aangetroffen in

De onderzoeken waarin dit patroon gemeten is.

Verwante patronen

← alle patronen