Facebook users sue Meta, accusing the company of tracking on iOS through a loophole

Apple’s major privacy update to iOS last year made it much more difficult for apps to track user behavior beyond their own borders, but a new lawsuit alleges that Facebook and Instagram parent company Meta kept snooping through a workaround.

The complaint, filed in the U.S. District Court for the Northern District of California and embedded below, alleges that Meta evaded Apple’s new restrictions by monitoring users through Facebook’s in-app browser, which opens links within the app. The proposed class-action lawsuit, first reported by Bloomberg, could allow anyone affected to sign on, which in Facebook’s case might mean hundreds of millions of U.S. users.

In the lawsuit, a pair of Facebook users allege that Meta is not only violating Apple’s policies, but breaking privacy laws at the state and federal level, including the Wiretap Act, which made it illegal to intercept electronic communications without consent. Another similar complaint (Mitchell v. Meta Platforms Inc.) was filed last week.

The plaintiffs allege that Meta follows users’ online activity by funneling them into the web browser built into Facebook and injecting JavaScript into the sites they visit. That code makes it possible for the company to monitor “every single interaction with external websites,” including where they tap, and what passwords and other text they enter:

“Now, even when users do not consent to being tracked, Meta tracks Facebook users’ online activity and communications with external third-party websites by injecting JavaScript code into those sites. When users click on a link within the Facebook app, Meta automatically directs them to the in-app browser it is monitoring instead of the smartphone’s default browser, without telling users that this is happening or they are being tracked.”

Apple introduced iOS 14.5 in April of last year, striking a massive blow to social media companies like Meta that relied on tracking users’ behavior for advertising purposes. The company cited the iOS changes specifically in its earning calls as it prepped investors to adjust to the new normal for its ad targeting business, describing Apple’s privacy changes as a “headwind” that it would need to overcome.

In the new iOS privacy prompt, Apple asks if a user consents to have their activity tracked “across other companies’ apps and websites.” Users who opt out might reasonably believe that they are on an external web browser when opening links within Facebook or Instagram, though the company would likely argue the opposite.

Security researcher Felix Krause surfaced concerns around Facebook and Instagram’s in-app browsers last month and the lawsuit draws heavily from his report. He urged Meta to send users to Safari or another external browser to close up the loophole.

“Do what Meta is already doing with WhatsApp: Stop modifying third party websites, and use Safari or SFSafariViewController for all third party websites,” Krause wrote in a blog post. “It’s what’s best for the user, and the right thing to do.”

 

 

 

NEWS RELATED

Startups are building businesses out of DevOps tools for existing sales platforms

The growing market for sales tools has given rise to a curious cottage industry: DevOps startups specifically targeting the software used in sales and marketing functions. (Here, “DevOps,” refers to tools that automate processes between software development and IT teams.) It’s become a blossoming sector all its own, with vendors ...

View more: Startups are building businesses out of DevOps tools for existing sales platforms

Perceptron: Multilingual, laughing, Pitfall-playing and streetwise AI

Research in the field of machine learning and AI, now a key technology in practically every industry and company, is far too voluminous for anyone to read it all. This column, Perceptron, aims to collect some of the most relevant recent discoveries and papers — particularly in, but not limited to, ...

View more: Perceptron: Multilingual, laughing, Pitfall-playing and streetwise AI

Steve Case is trying to make money with founders outside Silicon Valley; his plan is starting to work

Steve Case, the cofounder of America Online, the investment firm Revolution, and its offshoot seed-stage arm Rise of the Rest, has a new book out called Rise of the Rest: How Entrepreneurs in Surprising Places are Building the New American Dream. In it, Case argues that Covid was a ...

View more: Steve Case is trying to make money with founders outside Silicon Valley; his plan is starting to work

Daily Crunch: London-based spatial computing startup Hadean closes $30 million Series A

To get a roundup of TechCrunch’s biggest and most important stories delivered to your inbox every day at 3 p.m. PDT, subscribe here. It’s Friday, and that means… Actually, we don’t even really know what that means anymore, other than that we’re going to sit in the sunshine and bask ...

View more: Daily Crunch: London-based spatial computing startup Hadean closes $30 million Series A

The ‘ideal runway’ is a myth, isn’t it?

When it comes to advice, tech loves standardization. Startups are often told that there are certain metrics to hit, deadlines to meet, timetables to measure themselves against. Examples abound: Here’s the ideal amount of money to raise at your Series A round; here’s how many employees you should have ...

View more: The ‘ideal runway’ is a myth, isn’t it?

Mighty Capital’s thesis is that the best product wins – even more so in a downturn

When founders are laying off staff and cutting costs to face the downturn, it may seem like odd timing to tell startups to take their product as seriously as ever. In a recession, do users really care about product experience? Yes, says Mighty Capital, whose portfolio includes companies such ...

View more: Mighty Capital’s thesis is that the best product wins – even more so in a downturn

Triller settles lawsuit with Timbaland and Swizz Beatz

Last month, Grammy-winning artists Timbaland and Swizz Beatz sued TikTok competitor Triller for $28 million. Triller acquired their livestream event series Verzuz last year, but the two musicians alleged that the social app had missed several large payments, prompting them to file a lawsuit. Now, Triller has settled with ...

View more: Triller settles lawsuit with Timbaland and Swizz Beatz

How a pivot helped HopSkipDrive emerge successful in a sector where many failed

Joanna McFarland got the idea for HopSkipDrive in 2014 because she needed a solution to a problem that many working parents like herself face: How do you consistently get your kids where they need to be on time? The idea was sparked at a birthday party she attended with ...

View more: How a pivot helped HopSkipDrive emerge successful in a sector where many failed

How Blaseball’s fantasy sports fever dream is embracing the future

Byju’s clears $230 million payment to Blackstone for $1 billion Aakash deal

Smaller Dreamforce still comes up big in first live meeting in three years

FTX, Uniswap and Visa talk blockchain economy and opportunity at Disrupt

Volkswagen and Belgian utility giant partner on vehicle-to-grid energy storage

Declining VC investment into LatAm startups could throttle digital growth

Industry experts comment on mini-budget announcement

TikTok is releasing its comment dislike button to all users worldwide

The $5.6B epicenter of Ford’s EV effort is now under construction

When VCs fund the thing you didn’t think they’d ever fund

A guide to Low Power Mode on the Apple Watch

Tesla countersues civil rights agency behind racial bias suit

OTHER NEWS

Breaking thailand news, thai news, thailand news Verified News Story Network