Speaking with Forbes, cybersecurity researcher Cirlig caught Xiaomi recording and tracking user data which includes users’ phone habits and queries through Xiaomi’s default browsers. It was found out that it happens on the Mi 10, Redmi K20, and Mi MIX 3 devices, among others. Xiaomi did respond to these allegations and here’s what they have to say.
When reported that Mi Browser Pro and Mint Browser are tracking user queries (even in Incognito Mode), Xiaomi confirmed that it’s collecting browsing data but sending it anonymously. In addition, users are claimed to have consented to the data tracking. The video below shows how Xiaomi tracks user data when, for example, browsing pornhub in Incognito Mode.
Cirlig presented the video as evidence to which Xiaomi responded, “collection of anonymous browsing data, is one of the most common solutions adopted by internet companies.”
According to the security firm, “the main concern for privacy is that the data sent to their servers can be very easily correlated with a specific user.” Aside from browser queries, Xiaomi is also “monitoring” user touches on every screen and in Xiaomi apps. One example is when the default music player app is tracking the listening habits of a user, however, this seems to be the same case as with other music apps (there’s a reason why Spotify and other music streaming services suggest playlist that suits your taste).
Another way Xiaomi is tracking its users is through SensorDataAPI, a library that grants third-party access to app data. Cirlig told Xiaomi that Sensors Analytics — a startup, tracking company — was accessing user data. The company validated the allegation and said that the data collected remains anonymous and is stored on Xiaomi’s servers.
