Concerns Raised Over New White House App's Tracking Features

A new application released by the US government has raised alarms among individuals and experts regarding its possible location tracking and data collection capabilities.

The White House launched the app recently, intending to provide users direct access to government updates, breaking news notifications on significant announcements, and live streams concerning ‘policy breakthroughs.’

Nevertheless, users on social media platforms have expressed unease regarding the permissions demanded by the app, which includes access to the device’s location, shared storage space, and network activities, though these assertions lack independent verification.

It is common for apps to request location access and to track user data; however, an app launched by the federal government raises heightened scrutiny.

The privacy policy linked to the White House app states that it automatically logs information concerning the originating Internet Protocol (IP) addresses and may retain users’ names and email addresses, though such information is not required for app usage.

Image Source: Tyler Oakley

Requests for comments have been sent to the White House by Cointelegraph.

Allegations of GPS Tracking

The app’s Google Play Store page discloses that personal information, such as phone numbers and email addresses, might be collected. The Apple App Store, on the other hand, sends users to the White House’s privacy policy.

A software developer operating under the name “Thereallo,” together with Adam, a security engineer and infrastructure architect, indicated that they discovered code likely allowing the app to access GPS capabilities for location tracking.

Although this functionality is typical for various applications, Adam mentioned it’s quite unusual for an app without a clear necessity for location services to request such permissions.

“There’s no map, no local news, no geofencing, no events nearby, no weather. There are no features within the app that require location access,” he stated.

App Could Track Users at Intervals

Thereallo further claimed that the app contains features facilitating tracking every 4.5 minutes when in use and every 9.5 minutes in the background, although this has not been independently verified.

They argued it still requests permission but cautioned that it is just “one command away from being activated,” indicating the tracking capabilities are “implemented and ready for use.”

Security Vulnerabilities Identified

Adam remarked that the security of the app could be compromised, allowing individuals with technical knowledge to intercept its data or modify its behavior.

“Anyone on the same Wi-Fi network, such as in a coffee shop or at an airport, is capable of intercepting API traffic using a proxy. Furthermore, users with jailbroken devices can alter the app’s functionality during run-time,” he remarked.

“No servers were probed. No network traffic was intercepted. No DRM was bypassed. Everything described here is observable by anyone who downloads the app from the App Store and possesses a terminal.”

Consequently, Thereallo stated, the application may also be gathering other forms of data such as notification interactions, in-app message engagements, and phone numbers.