惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Attack and Defense Labs
Attack and Defense Labs
T
Threatpost
C
Cybersecurity and Infrastructure Security Agency CISA
H
Hackread – Cybersecurity News, Data Breaches, AI and More
I
Intezer
C
Cyber Attacks, Cyber Crime and Cyber Security
The Register - Security
The Register - Security
量子位
Security Latest
Security Latest
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
大猫的无限游戏
大猫的无限游戏
小众软件
小众软件
Exploit-DB.com RSS Feed
Exploit-DB.com RSS Feed
C
CXSECURITY Database RSS Feed - CXSecurity.com
MyScale Blog
MyScale Blog
J
Java Code Geeks
Apple Machine Learning Research
Apple Machine Learning Research
Google DeepMind News
Google DeepMind News
WordPress大学
WordPress大学
Spread Privacy
Spread Privacy
Jina AI
Jina AI
博客园 - 【当耐特】
P
Palo Alto Networks Blog
Last Week in AI
Last Week in AI
SecWiki News
SecWiki News
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
G
GRAHAM CLULEY
宝玉的分享
宝玉的分享
Hacker News - Newest:
Hacker News - Newest: "LLM"
T
The Blog of Author Tim Ferriss
V
Vulnerabilities – Threatpost
有赞技术团队
有赞技术团队
T
Tor Project blog
H
Hacker News: Front Page
A
Arctic Wolf
NISL@THU
NISL@THU
A
About on SuperTechFans
云风的 BLOG
云风的 BLOG
Engineering at Meta
Engineering at Meta
V
V2EX
N
News and Events Feed by Topic
Webroot Blog
Webroot Blog
Know Your Adversary
Know Your Adversary
P
Privacy International News Feed
I
InfoQ
D
Docker
L
LINUX DO - 最新话题
K
KPMG report finds enterprise disconnect between AI and its ROI | CIO
U
Unit 42

Comments for Hackread – Cybersecurity News, Data Breaches, AI and More

Study Reveals TikTok, Alibaba, Temu Collect Extensive User Data in US Pandora Cyber Attack Exposes Customer Data Via Third-Party Vendor Pandora Cyber Attack Exposes Customer Data Via Third-Party Vendor BADBOX 2.0 Found Preinstalled on Android IoT Devices Worldwide Ex US Soldier Cameron Wagenius Guilty in Telecom Hacking and Extortion FBI Warns of Health Insurance Scam Stealing Personal and Medical Data FBI Seizes Major Sites Sharing Unreleased and Pirated Video Games FBI Warns of Health Insurance Scam Stealing Personal and Medical Data Firefox Tests AI-Powered Perplexity Search Engine Directly in Browser New Malware Spotted Corrupts Its Own Headers to Block Analysis New Malware Spotted Corrupts Its Own Headers to Block Analysis New Malware Spotted Corrupts Its Own Headers to Block Analysis Firefox Tests AI-Powered Perplexity Search Engine Directly in Browser Firefox Tests AI-Powered Perplexity Search Engine Directly in Browser
Study Reveals TikTok, Alibaba, Temu Collect Extensive User Data in US
Deeba Ahmed · 2025-08-26 · via Comments for Hackread – Cybersecurity News, Data Breaches, AI and More

A new study by the data privacy firm Incogni, shared with Hackread.com, has revealed that a majority of the most-downloaded foreign apps in the US are still aggressively collecting and sharing user data.

The research focused on the ten most popular applications from outside the country and found that over half of them are owned by Chinese companies.

The study, published on August 26, 2025, shows just how dominant these apps have become. According to the findings, the apps studied have been downloaded an estimated 1 billion times in the US, and 755 million of those downloads are from Chinese-owned apps alone.

Incogni’s researchers found that Chinese apps are particularly “data-hungry.” On average, they collect 18 different types of data from each American user and share around six of those data types with other companies.

TikTok, Alibaba, Temu and More…

The report highlights TikTok as the biggest concern, as it was found to collect 24 types of data, including sensitive information like users’ names, home addresses, and phone numbers.

Other popular apps also showed concerning practices. The e-commerce giant Alibaba can access user photos, videos, and documents, while Temu collects location data and a list of installed apps.

Shein was noted for a different, yet equally alarming, pattern, sharing an astonishing 12 of the 17 types of data it collects. Other apps, including AliExpress and the Cyprus-based app ABPV, also share users’ approximate locations.

The study also included DramaBox, Telegram, and Talkie, with most apps in the top 10 collecting an average of 15 data types and sharing 5 of those types. The graph below provides a visual breakdown of the data types collected and shared by the most popular foreign apps.

As evident, Alibaba, AliExpress, and ABPV (America’s best pics, vids) collect or share a user’s approximate and precise location. Similarly, AliExpress and DramaBox, collect purchase history, and both Alibaba and Shein collect and share users’ email addresses and names for advertising.

Incogni Study: TikTok, Temu & Shein Aggressively Collect Americans’ Data
Source: Incogni

Targeted Advertising

The report also explains that this data is often used for targeted advertising. Companies use this information to create detailed profiles of users to influence their buying habits, and in some cases, even personalize prices, which is a major departure from the standard pricing models most people are used to. These apps can even share user emails with third parties, contributing to a rise in unwanted spam.

“Many of these apps are quietly collecting and sharing personal information like names, addresses, and approximate locations, leaving users extremely vulnerable to third-party breaches,” Incogni’s Head, Darius Belejevas. “People deserve to know how and where their information is being used, along with ways to manage or prevent that use,” Belejevas argued.

The study warns that this widespread data collection is not just a privacy issue but also a national security risk, as some foreign governments have been linked to similar data thefts in the past.