Pop stars, athletes, and millions of others posted photos of themselves edited with the app – but what are the much-publicized privacy risks?
The answer to both questions is no, says Nikolaos Chrysaidos, Avast’s head of mobile threat intelligence and security, who checked web traffic and found the app is not sending users’ sensitive data back to servers. “I see no sign of the app invading privacy in nefarious ways,” Chrysaidos said. “While it’s true that the app is collecting data and photos in the way it functions, that kind of risk comes with many apps like this.
“People hear AI, privacy, and Russia and are understandably concerned. But taking a step back to look at the facts shows this is not a major cybersecurity issue.”
Despite the uproar, this app is not vastly different from many other popular apps, and has been in operation for two years. FaceApp has explained its use of data, and what parts of the company have Russian ties, as reported by TechCrunch. Google engineers have looked into the app’s security. And independent cybersecurity researchers told The New York Times that concerns about FaceApp are overblown.
“This isn’t a malicious app, but it is one of many apps that raise privacy issues,” Chrysaidos said. “This isn’t an urgent issue, but it is a prevalent one. Companies producing apps should be more transparent about their use of data, and responsibility also lies with consumers. It’s yet another reminder to practice better overall cybersecurity on your mobile device.”
FaceApp adds that it deletes many photos from its servers within 48 hours and many users do not log in. “All FaceApp features are available without logging in, and you can log in only from the settings screen. As a result, 99% of users don’t log in; therefore, we don’t have access to any data that could identify a person,” TechCrunch reported. People can also use FaceApp without allowing the app to access their photo libraries by only editing photos they take via the app.
A greater public understanding of privacy and apps could help clarify security issues before an app goes viral, Chrysaidos said. When concerns fly around social media and become part of a viral topic, it can become very difficult to see the true face of an issue.
Consumers worried about FaceApp can look at the bigger picture by reviewing what apps are on their devices, learning more about privacy issues, and installing Avast Mobile Security on their Android device.