Chinese selfie app raises red flags with security researchers over privacy concerns
Meitu, which is available for iphone and android, has been popular in China since its launch in 2008, but is only now gaining prominence elsewhere as selfie lovers have turned to the app in their droves sharing their perfected pictures across social media sites.
Was able to meitu myself about 8 times before it said I didn't have a face... things got weird. pic.twitter.com/84L5PlBZVZ— Tim Holman (@twholman) January 19, 2017
So I'm a little bit obsessed with the Meitu app 😱😍 This is now the best photo of me ever ever ever 💖 pic.twitter.com/UTVDeXsrlW— Jordan Emily Brown (@hellomissjordan) January 20, 2017
If you keep feeding the pictures from the Meitu app back into itself, things escalate very quickly pic.twitter.com/9BIJhENwkk— Laura Hudson (@laura_hudson) January 18, 2017
Naturally enough, the app requests access to your camera and photos but also seeks GPS location, service provider information, Wi-Fi connection data, SIM card information, jailbroken status, and various other personal identifiers that could be used for tracking purposes which has raised the alarm.
Take a look at the entire list of permissions from the the Meitu app. pic.twitter.com/AkSw2Z50T7— FourOctets (@FourOctets) January 19, 2017
Just to let you guys know that photo app that makes you look an anime is sending you IMIE to several servers in China. https://t.co/dQdroq5qhA— FourOctets (@FourOctets) January 19, 2017
Don't download Meitu, it sends every single detail about you it can back to China. City, country, timezone, location, SIM ICCID, UID, etc. https://t.co/ciJvW5F1E9— Corbin Davenport (@corbindavenport) January 19, 2017
Let me get this straight...— Greg Linares (@Laughing_Mantis) January 19, 2017
All of you just installed a photo app from China that requires these permissions? Let me know how it works out. pic.twitter.com/wGDUYbRdSA
New Meitu app is pretty funny. You get to look kawaii for selling all your personal data and soul to China.— Noble (@Lost_Pause_) January 19, 2017
Seems like a fair trade.
Privacy researchers noted that the app requires more data access than for a standard photo app and also raised questions about how this information is being shared.
Summary: Meitu is a throw-together of multiple analytics and marketing/ad tracking packages, with something cute to get people to use it.— Jonathan Zdziarski (@JZdziarski) January 19, 2017
Meitu told C-Net it is not selling customer data to anyone but is using the data collection code because the company is headquartered in China, where tracking services provided by the Apple App Store and Google Play are blocked.
"To get around this, Meitu employs a combination of third-party and in-house data tracking systems to make sure the user data tracked is consistent," said a Meitu spokesperson.
Another possibility, according to Digital Trends, is that Meitu is collecting information to comply with new Chinese government regulations that requires app makers to identify their users and prevent them from uploading banned content.
The app is available in 26 countries with more than a million users in each and a total of 430 million users outside China, according to the company website.
Usage in the US has spiked over the past week jumping from a mere couple of hundred daily downloads to hundreds of thousands in recent days, according to Recode.
Meitu claims the application turns photos into works of art by adding anime like features including huge eyes, skin whitening and rosy cheeks. It also allows you give your body a digital makeover with ‘slimming’ and ‘longer legs’ features.
Some users have given the app the ultimate challenge - transforming politicans into works of beauty.
Here's Donald Trump in the Meitu app HAPPY NIGHTMARES! pic.twitter.com/eSTyrAgMXt— Sam Stryker (@sbstryker) January 18, 2017