How apps you use got hijacked into selling your location

Playing Candy Crush, swiping left on a dating app and checking your Yahoo inbox shouldn’t expose your location. I say shouldn’t, but those apps and thousands more were likely hijacked by data brokers who turned your personal info into cash.

Now, cybercriminals on the Dark Web have access to the location information of tens of millions of people. I’ll explain how this happened and share my secret weapon for fighting this kind of privacy invasion.

🔎 Whodunnit?

It all started with Gravy Analytics, a data broker that tracks over a billion devices worldwide. (They also own Venntel, which sells info to U.S. government agencies like the FBI and IRS.) A Russian hacker wormed into Gravy’s records, stealing 1.4 gigabytes of info.

▶️ That data includes over 30 million location points. 404 Media (paywall link) investigated the breach and found the shocking way they obtained your whereabouts.

This is clever (and super sketchy)

When you open a site or app, there’s a millisecond-long auction to decide the ads you see. The process is called real-time bidding (RTB), and it’s based on, among other things, all the data points they have about you and what you’re most likely to buy.

RTB collects enough information to make sure the right people are seeing an ad, and data brokers are in those auctions, too, with another purpose: To snag your info. The scummiest part is they don’t even need to buy any ads to do it.

The Gravy Analytics leak data shows thousands of apps gathered your location data. The working theory is they collected RTB data themselves or bought it from other data-broker companies.

Who’s on this list?

The list is long, and I’ll get to the specifics. Some apps, like Tinder, say they’ve never worked with Gravy Analytics. (I’ve heard that excuse before.) But if the info came from RTB, that’s in the advertising ecosystem, not the app’s code.

Really, that’s worse in some ways. This type of location tracking is happening through apps whether or not developers explicitly OK it. This includes:

Continue reading

6 signs your vacation rental is a scam

It’s that time of year when so many of us are planning vacations and booking a rental. Sadly, scammers are very aware of that, and they’re always changing their tricks to fool people out of their money, rentals — or worse.

Continue reading

Cheap gas? Yes, please: The free Upside app gives you cash back on gas, groceries and dining out. Download Upside and use promo code Kim to get an extra $0.25 back for every gallon on your first tank of gas.

Bonus keyboard shortcut: In Word, Google Docs and lots of other programs, you can add a hyperlink to your existing text. Highlight the text you want to link and hit the Windows key + K (Windows) or Cmd + K (Mac), then paste or type in the web address. Done.

Google Docs shortcut: Editing a doc? There’s an easy way to open links with no mouse required. With your cursor over the link, on Windows, hit Alt + Enter. On a Mac, it’s Option + Enter.

🔌 There are never enough airport outlets: Smart charging protects your phone’s battery over time by only topping you up to 85%. But if you’re on the go or need every bit of juice, you can turn it off. On iPhone, head to Settings > Battery > Battery Health & Charging, then turn off Optimized Battery Charging. On Android, go to Settings > Battery > Adaptive Charging, and turn off Use Adaptive Charging.

Cool, calm and collected: AI can draft a message and keep it chill, even when you’re not. It’s good for something like, “My heating hasn’t worked for two weeks. I told my landlord, but it’s still not fixed. Help me write a polite but firm note reminding them and requesting a timeline for repairs.”

🕵️ Cheater, cheater: A TikTok PI revealed a sneaky trick cheaters use, and it’s one I’ve been warning you about for a decade. In the Apple Notes app preinstalled on every iPhone, you can share a note. It’s way more hidden than talking through text. A note has been shared if there’s a little icon of a person next to it. I’m not telling you to go spy; I’m just sharing the tricks of the trade.

Stop putting it off: With Fabric, you can get term life insurance set up in a few minutes with no health exam required. You’ll be glad to check that off your to-do list.

On the cheap: Ever wonder what happens to all the surplus inventory from online retailers? Liquidation.com hawks packages and undelivered goods from Amazon, Target, Walmart and The Home Depot. You can filter by brand or retailer.

Mac hack: Low Data mode is a lifesaver if you’re stuck using a hotspot or have a slow connection. Click the Apple logo > System Settings > Wi-Fi to see the network you’re connected to. Tap on it, then choose Details and enable Low Data mode. FYI: You’ll have to do this for each network you connect to.

📵 No phone needed: Use the Snipping Tool to scan QR codes on Windows 11. Just press and hold the Windows key + Shift + S at the same time. This opens up the snipping screen. Then, click and drag your mouse over the QR code. You’ll see a link pop up that you can click. 

“Hey, Kim, what was the name of that …”: I get so many questions about our security sponsors. You need five security products. I put together a handy resource where you can find what they do, links and deals I’ve negotiated just for you.

Drowning in numbers? Your favorite AI chatbot has your back if you’re brainstorming or need to jazz up a presentation. Plug in a list of numbers or any other data and prompt, “Analyze this information. Explain any trends or insights you find.” Uploading a pic also works.

🤝 ”Can I pick your brain?” I can’t stand it when someone asks me that. A better way? “I have an idea. Can I run it by you?” After over 25 years of running a successful debt-free business, I’ve seen it all. Got a question about tech, business or life? Let me help. Just drop a note here on my site. I read every single one.

No salesperson, no long contracts: Ready to install a home security system? With SimpliSafe, it’s easy to order everything you need online and set it up yourself. (If you need help, they can do it for you.) Plus, it comes with 24/7 professional monitoring, because peace of mind shouldn’t break the bank. Hit this link for 50% off.

Swiped away a notification too fast? No problem. On Android, go to Settings > Notifications > Notification History to enable and view past alerts. On iPhone, swipe up on the lock screen or down from the top to see missed notifications in the Notification Center. FYI: Your notification history disappears after 24 hours on Android and a week on iPhones.

Useful site: The U.S. Consumer Product Safety Commission’s list of recalls is worth scanning now and then. Sometimes, you can get a replacement or refund for the recalled product. If there’s a major recall, I’ll warn you here or in my Current Alerts newsletter.

🍎 From my inbox: “I’d like to know, for real, whether you and your team recommend a Mac or Windows laptop for the average everyday American.” My answer is Mac! (They’re not paying me to say that.) MacBooks are so easy to use and inherently more locked down security-wise than Windows PCs. This model is great for most folks. This option is more powerful if you need more oomph; it’s the one I use.

We may receive a commission when you buy through our links, but our reporting and recommendations are always independent and objective.

Investment alert: According to my pal Clark Howard, there are three places you should never invest your money: A bank, an insurance company or a bank-affiliated brokerage. Why? The hidden fees and risky strategies can erode your investment returns. Subscribe to Clark’s free newsletter to receive more must-have money tips every day.