• Workplace apps are collecting more personal data than you think
• Even though you're using a work account, there are personal data points
• Data is being shared with third parties, including advertisers

Workplace apps are an unavoidable part of working life. Whether you’re using an assigned device or bringing one from home, you’re sure to have a collaboration tool or email app.

A new study by Incogni has found these tools could be harvesting significant amounts of personal data which is then being shared with third parties - including advertisers.

Google and Microsoft apps top the charts as some of the most data hungry, collecting up to 26 different data types. Given the sizable market share both have, there is a large amount of personal data at stake.

Article continues below

Apps harvesting names and locations

Google’s Gmail is the most data hungry app, collecting 26 different types of data including approximate location, app interactions, and user IDs which are then passed on for advertising and marketing purposes. Google Meet falls slightly behind, harvesting 21 data types.

Microsoft Teams comes second for data harvesting, with 25 data types including one of the most sensitive: precise location data. If you are mandated to use teams by your business, you have little say over how this data is collected. The same goes for Zoom Workplace, which collects 23 data types including precise location data.

Notion was found to share the most data with third parties. 8 data types, including email addresses, names, user IDs, device or other IDs, and app interactions, are passed on for advertising or marketing.

Slack collects 17 data types, and shares two of them (including email addresses) for advertising or marketing purposes. As an additional concern, Slack messaging is not secured with end-to-end encryption - so watch what you discuss in your chats as your workplace owner and admins can see everything you type.

Collaboration and messaging apps are ripe targets for attackers looking to harvest data and company information. For employees who are mandated to use apps that harvest significant amounts of data, especially if a company has a bring your own device (BYOD) policy, its much more than just company data that's at stake.

Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.

Benedict is a Senior Security Writer at TechRadar Pro, where he has specialized in covering the intersection of geopolitics, cyber-warfare, and business security.

Benedict provides detailed analysis on state-sponsored threat actors, APT groups, and the protection of critical national infrastructure, with his reporting bridging the gap between technical threat intelligence and B2B security strategy.

Benedict holds an MA (Distinction) in Security, Intelligence, and Diplomacy from the University of Buckingham Centre for Security and Intelligence Studies (BUCSIS), with his specialization providing him with a robust academic framework for deconstructing complex international conflicts and intelligence operations, and the ability to translate intricate security data into actionable insights.