Tuesday, February 11, 2025
HomeSecurity NewsFacebook Owned Onavo VPN Collects User Data Even it is Turned Off

Facebook Owned Onavo VPN Collects User Data Even it is Turned Off

Published on

SIEM as a Service

Follow Us on Google News

Facebook launched a free VPN program Onavo Protect for Android and iPhone to boost the user privacy and to keep the information secure. But as promised it does not anonymize, instead, it drains your privacy.

Even when the Onavo VPN is turned off it keeps on sending daily Wi-Fi data usage, Mobile data usage, and frames to indicate how long the VPN is connected.

It was criticized starting this month due to its promotional activities and it was first reported by Techcrunch, infosec researcher Will Strafach published a blog post tracking the types of data collected by Onavo Protect.

Onavo Protect contains a Packet Tunnel Provider app extension that performs the additional functions along with the VPN.

Also Read Is it possible to Read Someone Facebook Messages Without Them Knowing?

What are the Data’s Collected – Onavo Protect

Onavo Protect sends Mobile network name, Mobile network code, Mobile country code, Locale/language, iOS version, and Onavo app version.

Onavo tracks when the mobile device screen is on/off, likely only while connected to Onavo Protect.

Tracks daily data usage on Wi-Fi and mobile data using system APIs

DNS request to measure the latency.

Onavo performs timing measurements of Packet Tunnel Provider performance.

Onavo Protect

Facebook response to 9to5mac “When people download Onavo Protect to help secure their connection, we are clear about the information we collect and how it is used. Like other VPNs, Protect acts as a secure connection including when people are on public Wi-Fi.”

This helps us improve and operate the Onavo service. Because we’re part of Facebook, we also use this information to improve Facebook products and services.

We let people know about this activity and other ways that Onavo uses, analyses, and shares data before they download it. We also regularly review our apps and make updates based on feedback from people.

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Akira Ransomware Dominates January 2025 as the Most Active Ransomware Threat

January 2025 marked a pivotal month in the ransomware landscape, with Akira emerging as...

SolarWinds Improves Web Help Desk in Latest 12.8.5 Update

SolarWinds announced the release of Web Help Desk (WHD) version 12.8.5, unveiling a host...

FinStealer Malware Targets Leading Indian Bank’s Mobile Users, Stealing Login Credentials

A new cybersecurity threat has emerged, targeting customers of a prominent Indian bank through...

Evil Crow RF Tool Transforms Smartphones into Powerful RF Hacking Devices

Innovative tools are continually appearing to enhance the capabilities of professionals and enthusiasts alike.One...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

New FUD Malware Targets MacOS, Evading Antivirus and Security Tools

A new strain of Fully Undetectable (FUD) macOS malware, dubbed "Tiny FUD," has emerged,...

Google Blocks 2.28 Million Malicious Apps from Play Store in Security Crackdown

In a continued commitment to enhancing user safety and trust, Google has outlined significant...

Hackers Exploiting DNS Poisoning to Compromise Active Directory Environments

A groundbreaking technique for Kerberos relaying over HTTP, leveraging multicast poisoning, has been recently...