• Wispy2891@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    1
    ·
    4 hours ago

    They don’t care about email scraping (which would be illegal)

    They simply want people to install the app because it exfiltrates a lot of tasty data to them.

    An email might “only” contain ab invisible image to track views and unique links for tracking clicks, while if the user opens the app they way more data.

    From the APK I see they can get stuff like

    • All the contacts of the user, all email addresses and phone numbers
    • GPS location
    • Camera and photos
    • Microphone
    • Your phone number, your device IMEI and your unique advertising id, for cross tracking you better around other sites
    • Send push notifications for FOMO promotions like “OMG it’s the last one buy now before it gets sold out!!!”
    • Natanael@infosec.pub
      link
      fedilink
      English
      arrow-up
      1
      ·
      3 hours ago

      Most of this scraping (like Google indexing your emails) is legal if the user is informed (an in EU if they can disable it)

      The team problem the article hints at iis doordash and Amazon claims the customer relationships and hides the customer from the real company that actually made the sale. They make themselves a middleman to displace others as much as possible and use their size to manipulate the market in their favor (like demanding higher margins than other retailers)