Cybersecurity and Data Privacy

A new FBI public service announcement warns that foreign-developed mobile apps, particularly those tied to China, can collect and store Americans’ personal data overseas even if individuals never download the apps themselves, by harvesting information from other users’ contact lists once permissions are granted. The bureau says address-book access can expose names, emails, physical addresses, phone numbers and user IDs of both users and non‑users, and that some apps may persistently collect data across a device and store it on servers in countries where national security laws allow government access. While not naming specific firms, the alert is described as applying to widely used Chinese apps such as CapCut, Temu, SHEIN and Lemon8, echoing longstanding concerns that such data could be used to build detailed profiles of Americans and map their social and professional networks. The FBI flags warning signs like unusual battery drain, unexplained data spikes and unauthorized account activity, and urges users to limit permissions, stick to official app stores, and regularly review what access they have granted. The warning expands the debate beyond TikTok to the broader ecosystem of foreign apps on U.S. phones, amid rising public anxiety over Chinese cyber activity and digital surveillance.