X

Tinder, OkCupid, other apps share your data with dozens of firms, study says

Some of the apps are sharing highly personal data, according to a study from the Norwegian Consumer Council.

Carrie Mihalcik Former Managing Editor / News
Carrie was a managing editor at CNET focused on breaking and trending news. She'd been reporting and editing for more than a decade, including at the National Journal and Current TV.
Expertise Breaking News | Technology Credentials
  • Carrie has lived on both coasts and can definitively say that Chesapeake Bay blue crabs are the best.
Stephen Shankland Former Principal Writer
Stephen Shankland worked at CNET from 1998 to 2024 and wrote about processors, digital photography, AI, quantum computing, computer science, materials science, supercomputers, drones, browsers, 3D printing, USB, and new computing technology in general. He has a soft spot in his heart for standards groups and I/O interfaces. His first big scoop was about radioactive cat poop.
Expertise Processors | Semiconductors | Web browsers | Quantum computing | Supercomputers | AI | 3D printing | Drones | Computer science | Physics | Programming | Materials science | USB | UWB | Android | Digital photography | Science Credentials
  • Shankland covered the tech industry for more than 25 years and was a science writer for five years before that. He has deep expertise in microprocessors, digital photography, computer hardware and software, internet standards, web technology, and more.
Rae Hodge Former senior editor
Rae Hodge was a senior editor at CNET. She led CNET's coverage of privacy and cybersecurity tools from July 2019 to January 2023. As a data-driven investigative journalist on the software and services team, she reviewed VPNs, password managers, antivirus software, anti-surveillance methods and ethics in tech. Prior to joining CNET in 2019, Rae spent nearly a decade covering politics and protests for the AP, NPR, the BBC and other local and international outlets.
Carrie Mihalcik
Stephen Shankland
Rae Hodge
4 min read
apps-gettyimages-1173650703

Do you know where your data's going?

Getty Images

Ten popular apps -- including dating services Tinder, OkCupid and Grindr -- are sharing people's personal information with dozens of digital marketing and ad tech companies without consumers being aware, according to a new study. The only way for many users to protect their information, the report says, is for them to have never installed the apps at all. 

The study, released Tuesday by the Norwegian Consumer Council (Forbrukerradet), found that the apps, which also included period-tracking apps Clue and My Days, were collectively sharing user data with at least 135 advertising-related companies. The shared data included GPS locations and IP addresses, as well as personal details about gender, sexuality and political views, according to the study. 

In response to the study, a spokesperson for Clue said Monday that it doesn't share users' health or menstrual cycle data, and it doesn't sell data to any third-party service, including advertisers. The company does share usage data with Braze, which it says is clearly outlined in its privacy policy, to "make improvements to the Clue app and its features."

Match Group, which owns Tinder and OkCupid, said it uses third-party companies to assist with "technical operations and providing our overall services."

"We only share the specific information deemed necessary to operate our platform, in line with the applicable laws including GDPR and CCPA, said a Match Group spokesperson Monday, referring to the European Union's General Data Protection Regulation and the California Consumer Privacy Act. "All Match Group products obtain from these vendors strict contractual commitments that ensure confidentiality, security of users' personal information and strictly prohibit commercialization of this data."

Wave Design Studio, maker of the Wave Keyboard app, tracks users with mainstream Google and Facebook analytics services and Google's Advertising ID, said co-founder Vlad Andries. "We really value our users' privacy and keep the collected data to a minimum amount," he said. There was a website problem where the company published an outdated version of its privacy policy, but it's been fixed now, he added.

It's incumbent on developers to respect privacy since users generally aren't educated enough to to take action on their own, he added. "It's more in the hands of the developer/publisher to protect its users' privacy," Andries said. "It's more about ethics and doing the right thing than being thanked for this. You don't get any thanks or rewards for this."

In an email, My Days founder Christian Mueller said the app shares only anonymized location data with third-party companies to improve the user experience. Mueller added that users are clearly informed about the app's practices when installing it, and that My Days' policies are laid out in detail in a 305-page terms and transparency policy as well as in a short summary in the app's privacy policy.

Outfit7, which makes My Talking Tom 2, said its data collection, sharing and use practices are clearly explained in its online privacy policy. "An independent third party runs regular compliance monitoring of all tracking in our apps and we regularly monitor the collection of data by third-party ad providers to ensure and enforce compliance," said a representative in an emailed statement. 

The other apps cited in the study -- Grindr, Happn, Muslim: Qibla Finder and Perfect365 -- didn't respond to requests for comment. 

"Every day, millions of Americans share their most intimate personal details on these apps, upload personal photos, track their periods and reveal their sexual and religious identities," Burcu Kilic, of Public Citizen, said in a release. "But these apps and online services spy on people, collect vast amounts of personal data and share it with third parties without people's knowledge."

Public Citizen, along with the American Civil Liberties Union of California and nine other advocacy groups, has called on the US Federal Trade Commission, Congress and the attorneys general of three states to investigate the app companies' data sharing practices. 

The study also said the apps didn't clearly inform users that data would be shared with third-party ad companies. Though some of the data sharing is described in the apps' privacy policies, the descriptions are long, complex and unlikely to be read by consumers, according to the study. The majority of the apps also didn't offer options or settings to prevent or reduce the sharing of data with third-party companies. The NCC said this leaves most people with one option if they don't want their data shared: Don't install the apps at all. 

The NCC tweeted that it'll file complaints against six companies based on its findings.  

Originally published Jan. 14.
Update, Jan. 14: Adds response from My Days app and Outfit7. Update, Jan. 21: Adds response from Wave Design Studio.