TAIPEI, Taiwan—The Taiwanese National Security Bureau (NSB) is warning the public about significant cybersecurity risks posed by five Chinese mobile apps, including excessive data collection, following a cross-agency investigation.
“The results indicate the existence of security issues, including excessive data collection and privacy infringement,“ the NSB wrote. ”The public is advised to exercise caution when choosing mobile apps.”
RedNote, also known as Xiaohongshu and considered the Chinese equivalent of Instagram, was found to have violated all 15 indicators. Douyin and Weibo each had 13 violations, while WeChat had 10 and Baidu Cloud had nine.
“These findings suggest that the ... China-made apps present cybersecurity risks far beyond the reasonable expectations for data-collection requirements taken by ordinary apps,” NSB added.
RedNote, Weibo, and Douyin have been found to collect unauthorized personal data, including location data, contact lists, clipboard contents, screenshots, and device storage. WeChat was also found to have committed all of these violations except for accessing clipboard data.
All five apps were found to have deliberately extracted data on program lists and device parameters.
Except for WeChat, the apps were discovered to have collected facial recognition data.
All five apps were also found to send data packets to China-based servers.
“This type of transmission has raised serious concerns over the potential misuse of personal data by third parties,” the NSB wrote.
“Under China’s Cybersecurity Law and National Intelligence Law, Chinese enterprises are obligated to turn over user data to competent authorities concerning national security, public security, and intelligence. Such a practice would pose a significant security breach to the privacy of Taiwanese users, which could lead to data collection by specific Chinese agencies.”
Among the apps, RedNote was the only one found to have uploaded “non-essential personal data when idle,” according to the findings.
RedNote and Weibo were singled out for having “mandatory agreements to unreasonable privacy terms.”
The NSB urged people to avoid downloading China-made apps that pose a cybersecurity risk in order to protect their personal privacy and corporate secrets.
Chinese apps came under scrutiny in Taiwan last month, after local media outlets began reporting on a speech delivered by Zhang Weiwei, head of the China Institute at Fudan University in China.
In that speech, delivered at China’s Wuhan University in May, Zhang said Taiwan would be more “easily governed” by Beijing than Hong Kong, in the event the island is “united” with the mainland, since Taiwanese youth have been “increasingly influenced” by Chinese apps, such as RedNote.
The Chinese Communist Party (CCP) sees Taiwan as a breakaway province that must be united with the mainland, and it has not ruled out the use of military force to achieve that union. Contrary to Beijing’s territorial claim, Taiwan is a de facto independent nation with its own democratically elected government, constitution, currency, and military.
The CCP’s “united front” effort is spearheaded by its United Front Department, which oversees a network of organizations with the mission of co-opting civic groups, gathering intelligence, shaping the political environments of other countries, and influencing public opinion.
