Adguard researchers discovered this while researching the traffic consumption and unwanted behavior of Android keyboard applications.
AdGuard app for Android allows you to accurately view the traffic generated by the app, and the results indicate that GO Keyboard is using tracking mechanisms and sharing users' personal information.
Adguard also notes that there are two versions of the GO Keyboard app on the Google Play Store with a total of over 200 million users. The version GO Keyboard - Emoji keyboard, Swipe input, GIFs is rated 4.5 stars by users. And another version with the same name, GO Keyboard - Emoticon keyboard, Free Theme, GIF, is rated 4.4 stars. Both versions of the app are still being updated.
In the app description, the app developers mention issues as follows:
Privacy and Security Concerns
According to Go Keyboard's statement, 'We will never collect users' personal information, including credit card information. In fact, we care about user privacy.'
However, Adguard argues that this behavior contradicts the company's security policies. Additionally, GO Keyboard shares users' personal information after installation, communicates with dozens of tracking servers, and has access to sensitive data on the phone. Adguard acknowledges that this is quite common in modern apps, but it's clear that the GO Keyboard app is violating Google Play's policies.
In the Dangerous Behavior section of the Developer Policy Center, Google states, 'We do not allow apps to steal user authentication information (such as usernames or passwords) or mimic apps, websites to deceive users into disclosing their personal or authentication information.'
GO Android Violations :
- Without user consent, GO Keyboard reports to Google account email servers, user language, IMSI (International Mobile Subscriber Identity), location, network type, screen size, Android version, etc.
- Google policies also prohibit executing the download of executable code, such as dex files or source code, from sources outside Google Play. However, Adguard discovered that GO Keyboard is downloading and running executable code from remote servers.
- Additionally, Adguard notes: 'Some downloaded plugins are flagged as adware or potentially unwanted programs (PUP).'
Adguard states that they have reported their findings to Google:
'We have informed Google about these violations and are awaiting their response. Regardless of Google's decision, we recognize this as unacceptable and dangerous behavior. With over 200 million users using this app, users should not overly trust mobile apps. Always remember to check the privacy policies and permissions an app requests before installation.'
It's crucial that widely licensed apps execute remote code. Anytime server owners can decide to change app behavior, not just stealing email addresses but potentially doing anything they desire. Remember that keyboards are one of those apps, and it's important to note you use a keyboard to input information.
https://Mytour.vn/go-keyboard-theo-doi-nguoi-dung-android-20838n.aspx
If you still want to use a customizable keyboard app on your Android, Mytour.vn would like to introduce you to a highly preferred keyboard app called Laban Key for Android. This is also a completely Vietnamese app, so you will quickly become familiar with and proficient in Laban Key for Android on your device without encountering any difficulties. Besides, there are many interesting features waiting for you to explore inside this purely Vietnamese customizable keyboard app.
