Instagram and Facebook Lead in User Data Invasiveness Study

A recent study conducted by the IT Asset Management Group (IT-AMG) has identified Instagram and Facebook as the most invasive applications regarding user data collection. The research examined the privacy policies of over 5,000 applications available on the Apple App Store, focusing on how much data these apps gather and how it is utilized.

To compile the findings, IT-AMG analyzed a selected group of apps from the top 100 in each category, removing duplicates and those lacking sufficient privacy information. The study created an index score out of 100 based on 46 indicators that included 35 data types, six purposes for data collection, and five types of user relationships. The evaluation categorized the level of privacy intrusion, with “tracked and linked” data being deemed the most invasive.

Top Offenders in Data Collection

The study revealed that both Instagram and Facebook achieved the highest index score of 61.47 out of 100. Each of these platforms collects 32 data types, with 25 types linked to individual users and seven types both linked and tracked. This extensive data gathering raises concerns over privacy, especially considering the sensitive information collected, such as users’ physical addresses and device identifiers.

In contrast, other popular entertainment apps like YouTube and TikTok ranked significantly lower, at 27th and 76th respectively. Following Instagram and Facebook, Grab, a ride-hailing and food delivery service, secured third place with a score of 55.57. Grab collects 27 data types, with 15 linked and tracked, which includes sensitive payment information and precise location data.

Further down the list, a three-way tie occurred among Threads, Meta Business Suite, and Messenger, each scoring 54.53. While these applications collect 32 data types, none are tracked, indicating a slightly less invasive approach compared to their counterparts.

Analyzing the Data Collection Landscape

The findings extend beyond just the top apps. Nordstrom Rack: Shop Deals ranked seventh with a score of 53.62, collecting 22 data types, with four linked to users and 18 both linked and tracked. Nordstrom followed closely in eighth place, achieving a score of 52.54.

Other notable mentions include Pinterest, which scored 50.06, and AE + Aerie, rounding out the top ten with a score of 50.01. These apps indicate a pattern where a significant amount of user data is collected, raising questions about privacy and the nature of user consent.

The study highlighted that applications in the Photo-Video category were the most invasive, with an overall score of 38.54 out of 100, despite only having 23 eligible apps. Social Networking and Food and Drink applications also followed closely behind in terms of invasiveness.

Overall, these findings shed light on the substantial degree of data collection performed by popular applications, with Instagram and Facebook leading the charge in user data invasiveness. As privacy concerns continue to grow, users may need to reconsider the implications of the data they share with these widely-used platforms.