Back to all stories
illustration to promote cybersecurity submitted in the Cybersecurity Visuals Challenge 2019 hosted by OpenIDEO
Photo: John Hurley | CC BY 4.0 | Wikimedia Commons

FBI Warns Foreign Apps Can Harvest Americans’ Data Via Others’ Phones

A new FBI public service announcement warns that foreign-developed mobile apps, particularly those tied to China, can collect and store Americans’ personal data overseas even if individuals never download the apps themselves, by harvesting information from other users’ contact lists once permissions are granted. The bureau says address-book access can expose names, emails, physical addresses, phone numbers and user IDs of both users and non‑users, and that some apps may persistently collect data across a device and store it on servers in countries where national security laws allow government access. While not naming specific firms, the alert is described as applying to widely used Chinese apps such as CapCut, Temu, SHEIN and Lemon8, echoing longstanding concerns that such data could be used to build detailed profiles of Americans and map their social and professional networks. The FBI flags warning signs like unusual battery drain, unexplained data spikes and unauthorized account activity, and urges users to limit permissions, stick to official app stores, and regularly review what access they have granted. The warning expands the debate beyond TikTok to the broader ecosystem of foreign apps on U.S. phones, amid rising public anxiety over Chinese cyber activity and digital surveillance.

Cybersecurity and Data Privacy National Security and China

📌 Key Facts

  • The FBI issued a public service announcement warning that foreign-developed apps can collect data on Americans from other people’s contact lists, even if those Americans never install the apps.
  • The bureau says such apps may access and store names, emails, phone numbers, physical addresses and user IDs, and may continue collecting data in the background across the device.
  • The alert highlights apps tied to China as a particular concern, citing that data stored on Chinese servers is subject to national security laws that can give the government access, and it recommends users limit permissions and use only official app stores.

📊 Relevant Data

Temu has 133.6 million monthly active users in the US as of 2026.

Temu Revenue and Usage Statistics for 2026 — Backlinko

Temu shoppers in the US are 22% more likely to be Millennials and 18% more likely to be Gen X compared to the average consumer.

Millennials and Gen Xers—Not Gen Zers—Are Temu, Shein's Biggest Shoppers — Yahoo Finance

There have been 224 reported instances of Chinese espionage directed at the United States since 2000, with incidents including data theft and hacking.

Survey of Chinese Espionage in the United States Since 2000 — CSIS

In the US, BIPOC individuals have a lower rate of avoiding financial impact from cybercrime, with only 47% successfully avoiding any loss compared to higher rates for other groups.

Report: Minorities and Women are More Likely Victims of Cyber Crime — OCCRP

Millennials (44%) and Gen Z (51%) in the US are more likely to report experiencing cyber threats than Baby Boomers (21%).

Millennials and Gen Z Say They are Bigger Victims of Cybercrime — Stay Safe Online

📰 Source Timeline (1)

Follow how coverage of this story developed over time