Thread by @kingslyj

So many apps think they get to dictate what their customers can and cannot do with phones their customers have purchased with their own money.

So many apps still complain about rooted phones.

How long before they flag their competitors' apps as threats?

https://twitter.com/jackerhack/status/1233671815022686208

Since @Paytm is so concerned about apps that can "steal" their customers' "confidential data"

Let's take a look at what kind of "confidential data" the @Paytm app "steals" from their customers.

@Paytm Why the F*** does @Paytm need to know what apps their
customers are using?

Does your bank ask to audit your PC before using netbanking?

Who appointed @Paytm the chowkidar of your customers' phones @vijayshekhar ?

@Paytm @vijayshekhar The @Paytm app can read/modify/delete all your files.

Why does a payment app need that kind of access to all your data?

@Paytm @vijayshekhar All Android apps get full access to store their files.within their own app directory.

Even when you deny an app access to 'Storage' the app can still read and write to files in the app's directory.

@Paytm @vijayshekhar Why does a payment app need to record audio?

Why does it need to track your location?

Will @Paytm prevent you from spending your money if you are at a location their Chinese masters do not approve of?

@Paytm @vijayshekhar OMG! @Paytm is literally "stealing" their customers' confidential information!

Why does Paytm need to know how planned/unplanned/busy/vela their customers are?

Why does @Paytm want to email people without the phone owners knowledge?

@Paytm @vijayshekhar Remember how creepy @Paytm is tracking all their customers' location....

But what if some customer is privacy conscious and denies that permission?

Do you think @Paytm respects their customers' wishes and stops stalking them?

https://twitter.com/kingslyj/status/1233684031083970562

@Paytm @vijayshekhar They have a sneaky backdoor to stalk their customers in a way that most people won't even realise that @Paytm is tracking their location.

They grab the users' Wi-Fi information and use that to determine their location.

en.wikipedia.org/wiki/Wi-Fi_pos…

@Paytm @vijayshekhar The @Paytm app also wants to go through all their customers' contact list and helpfully modify the contents of their customers' contact list.

@Paytm @vijayshekhar And @Paytm is also very very interested in their customers' fitness and health!

@Paytm @vijayshekhar You know how (some?) Android phones, support multiple users/guest mode, so that you can keep your data compartmentalised... work/personal/confidential/guest etc.

@Paytm doesn't like customers having that kind of privacy.

They want full access to all users' data on the device!

@Paytm @vijayshekhar And what good is having all these snooping privileges if @Paytm has to rely on their customers opening the app before they can start harvesting all this data for profit?

Well @Paytm has that covered.. their app starts automatically on boot and gets access to all the data 24x7.

@Paytm @vijayshekhar And that's just from the Android app's permissions.

@Paytm also installs a bunch of trackers to snoop on their customers some more.

From reports.exodus-privacy.eu.org/en/

@Paytm @vijayshekhar You can read about 10 different trackers that @Paytm uses from

reports.exodus-privacy.eu.org/en/reports/net…