The Guangdong Communications Administration monitored and found 201 apps with problems and security risks that violate users’ rights, and therefore asked their operators to rectify them by a deadline, including the Xpeng APP.
According to the statement recently issued by the agency, the Xpeng App (version 2.18.1) has the following problems that infringe on users’ rights.
1. The App was first run without the user reading and agreeing to the privacy policy before the behavior monitoring found that GET_TASK was obtained to retrieve the app, Android ID, MAC address, IMEI, IMSI.
2. The purpose, manner, and scope of personal information collected and used by the third-party SDKs integrated with the App are not set out in the public text of the privacy policy, etc.
3. Each time users click on “my points, my credit, earn credit by inviting friends”, the app collects MAC address and IMEI information once. This is not necessary for the service and has no reasonable application scenario, and exceeds the minimum frequency necessary to achieve the business function of the product or service. In addition, the App has the following security concerns: interface hijacking security.
In addition to Xpeng App, other apps that were also ordered to rectify mainly include 30 apps in the game category, 30 apps in the finance category, and 26 apps in the tools category.
