Observed Signal · Aug 4, 2026 · Research Report · Source: techcrunch · Impact: 3/5 · Sentiment: Negative
Privacy Market: Android SDKs may leak users' precise location to advertisers
The Electronic Frontier Foundation (EFF) analyzed Android apps and found many third‑party advertising SDKs automatically inherit host app GPS permissions and, by default, capture and transmit precise location coordinates to ad networks and data brokers—often via real‑time auctions. Using network-traffic analysis and tools such as Exodus Privacy, researchers observed exact geographic coordinates being sent and named vendors including InMobi and Huawei. The report identified apps with a combined 60 million downloads and notes SDK providers claim reach across billions of users via tens of thousands of apps. Play Store privacy disclosures frequently fail to reveal this third‑party sharing, and developers may be unaware because disabling SDKs' default collection requires explicit code changes and documentation is unclear. EFF warns these sold location datasets pose serious privacy risks and calls for better developer practices and regulatory safeguards.
Reveals systemic privacy risk in mobile advertising SDKs that can affect large install bases and advertiser/third-party data flows; relevant to developers, publishers, and privacy/regulatory scrutiny but not a platform policy change.
Key Takeaways & Evidence Grounding
- EFF's technical analysis found many ad SDKs inherit app GPS permissions and by default capture and transmit precise location coordinates.
- Researchers used network-traffic analysis and tools like Exodus Privacy and observed exact coordinates sent to vendors including InMobi and Huawei.
- The investigation identified apps with a combined 60 million downloads and notes SDK providers claim reach across billions of users via tens of thousands of apps.
- Play Store disclosures often omit third-party location sharing; there are no SDK-specific location permissions and disabling collection requires explicit code changes.
- EFF warns sold location datasets create high privacy risks and calls for stronger developer practices and regulatory action.
Connected Companies & Entities
5 Entities mappedTargetVideo
Publisher video platform and premium video advertising sales business.
InMobi
Mobile-first ad tech platform for programmatic advertising and app monetisation.
Huawei
Diversified technology group spanning devices, cloud, app distribution and advertising.
Search, video, adtech and cloud giant within Alphabet.
TechCrunch
Technology publisher monetising audience, events and branded campaigns.
“Bill Budington, a senior staff technologist at the EFF, told TechCrunch that the SDKs they examined account for a small percentage of the br...”
Ontology Mapping & Concepts
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.