TikTok’s in-app keyboard on iOS has the capability of stealing personal data you type

TikTok, Facebook, and Instagram’s in-app QWERTY could track every keystroke on an iPhone

TikTok, Facebook, Instagram, and Facebook Messenger could track your keystrokes if you use their in-app keyboards. Interestingly, all of the apps just mentioned except one will allow you to use your default QWERTY to type on. The one app that doesn’t allow this is TikTok which recently upset another U.S. presidential administration concerned about national security. For its part, TikTok went on its Twitter account to send a tweet that says, “The report’s conclusions about TikTok are incorrect and misleading. Contrary to its claims, we do not collect keystroke or text inputs through this code, which is solely used for debugging, troubleshooting and performance monitoring.”

Back in June, FCC commissioner Brendan Carr said that TikTok should be removed from the Apple App Store and Google Play Store. He called TikTok a “sophisticated surveillance tool that harvests extensive amounts of personal and sensitive data,” and cited new reports revealing that sensitive data was being sent to Beijing.

Developer explains how to use his InAppBrowser.com website

A Meta spokesman said, “We intentionally developed this code to honor people’s choices on our platform. The code allows us to aggregate user data before using it for targeted advertising or measurement purposes…For purchases made through the in-app browser, we seek user consent to save payment information for the purposes of autofill.” That’s the feature that automatically fills out certain fields on apps and websites based on previously collected data such as your name, address, phone number and more.

1. Open an app you want to analyze.
2. Share the URL https://InAppBrowser.com somewhere inside the app (e.g. send a DM to a friend or post to your feed).
3. Tap on the link inside the app to open it.
4. Read the report on the screen.

Trump’s proposed deal included a large payment that would have been made to the U.S. Treasury although it turned out that this demand from Trump would have been illegal. No deal was ever made as Trump lost interest in TikTok heading into the last couple of months before the 2020 presidential election. It should be noted that in July 2020, the Biden campaign directed all staff to remove TikTok from their devices.