Demystifying the Android Telehealth Ecosystem
summary
Analyzes 408 Android telehealth apps from 36 countries using an OS-level interception tool that achieves an 88% interception rate, finds widespread event-reporting to Google Analytics and Facebook, five apps sending plain-text passwords to unrelated domains, and 11% dumping sensitive data into the Android shared log that any app with read-logs can access; among 28 US apps, 48.09% potentially violate applicable regulations and 37 niche-targeted apps show 55% sharing of revealing app-usage events.
AI-written summary · about
chapters (9)
- 0:00Android privacy research intro
- 3:41Health domain focus
- 6:57Testing telehealth apps
- 8:23Regulatory frameworks
- 10:12Privacy violations in telehealth
- 13:26Shared logs threat surface
- 16:41Health privacy governance gaps
- 17:46Health apps covert tracking
- 18:51Privacy compliance failures
related talks
40mSecurity: The Hidden Cost of Android Stalkerware
37mHey, You, Get off My Private Data: Do Apps Respect Your Privacy as They Claim?
24mRecent Mobile App Security Incidents from Real-World Cases
22mA Mirage of Safety: Bug Finding & Exploit Techniques of Top Android Vendor's Privacy Protection Apps
42mIf 6,000 Mobile Malware Applications Could Talk! Ow, They Do, And A Lot!
20mWhat billions of device ids reveal about Android app abuse
32mResults of Scanning the Top 45 Android Mobile Banking Apps
32mHacking the Hackers’ Code: Inside Android Malware