Beijing Business Daily News (Reporter Fang Binnan Ran Lili) On December 11th, the Central Cyberspace Administration released a test report on the collection of personal information on the "Food and Beverage Delivery" app. The report shows that recently, the China Cyberspace Security Association conducted a test on the collection of personal information on some apps that are widely used by the public in the "food delivery" category. The test selected 19 "food delivery" apps with a cumulative download volume of 100 million times from app stores, totaling 7 apps, named Meituan, Ele.me, Hema, Dingdong Maicai, Koubei, JD.com Daojia, and Duodian.
The report shows that in this test, the same brand and model of mobile terminals were selected, the same version of Android operating system was installed, and 7 apps were deployed separately to perform synchronization operations in the same network environment. To complete a takeout product selection activity as a testing unit, including four user scenarios: launching the app, browsing the homepage, searching for products, and selecting products, as well as a background silent application scenario. The test includes three aspects: system permission invocation, personal information upload, and network upload traffic.
In terms of personal information uploading, the test found that 7 apps uploaded 5 types of personal information: location information, including latitude and longitude, street address, current connected Wi Fi MAC address, available Wi Fi MAC addresses in the surrounding area, and current connected base station information; Unique device identification code, including Android ID, OAID, and mobile MAC address; Application list information, including information on installed, newly installed, and newly uninstalled applications on the phone; User screenshot operation information; The interactive information generated by users using the app, including search terms.
Tests have found that in the scenario of launching the app, after completing a startup process, the most common types of personal information uploaded are Meituan, Dingdong Maicai, and JD Daojia (all of which are in category 3). In the scenario of browsing the homepage, completing the process of browsing the homepage once, the most common types of personal information uploaded are Hema and Dingdong Maicai (both in category 2). In the scenario of searching for products, the most common types of personal information uploaded during a search process are Dingdong Maicai and word-of-mouth (both of which are in three categories). In the product selection scenario, completing a product selection process, the most common types of personal information uploaded are Dingdong Maicai and word-of-mouth (both of which are category 2). In the background silent scene, during the background silent period, Meituan and Hema have the most types of personal information uploads (both of which are category 2).