OnePlus' OxygenOS found to be linking device IDs to collected analytics data

Smartphone maker OnePlus, a competitor against Apple's iPhone, is both collecting a lot of analytics data from users and linking it to personally identifiable information, according to one security researcher.

The analytics data includes information such as how often a phone is unlocked, and which apps are being opened and for how long, said Christopher Moore. While that sort of collection is not atypical — and can be switched off by opting out of the company's "user experience program" in OxygenOS settings — the company is connecting it to device information in a second stream containing things such a phone's serial number.

"We securely transmit analytics in two different streams over HTTPS to an Amazon server," OnePlus said in a statement seen by Engadget. "The first stream is usage analytics, which we collect in order for us to more precisely fine tune our software according to user behavior. This transmission of usage activity can be turned off by navigating to 'Settings' -> 'Advanced' -> 'Join user experience program'. The second stream is device information, which we collect to provide better after-sales support."

Users can't opt out of this second stream.

OnePlus is best known for making smartphones that deliver high-end specifications for a relatively low cost. The OnePlus 5 is $479, but includes 6 gigabytes of RAM, 64 gigabytes of storage, and a dual-lens camera. A 64-gigabyte iPhone 8, while faster, ships with a single-lens camera and less RAM for $699.

OxygenOS is a modified version of Google's Android, which has sometimes come under fire for its own data collection.

10 Comments

rotateleftbyte 1630 comments · 12 Years

About 7 years ago

This
Users can't opt out of this second stream.

Should be the killer fact that stops people buying this device.
But the cost savings over an iPhone or people not caring about their personal information won't stop sales.

There are many Android users who are aware of personal data security don't care about their device feeding the Google behmoth.

gatorguy 24601 comments · 13 Years

Ah that explains the Google Max speaker being more expensive than Apple own Homepod.

Anyway, I love the way AndroidPolice put this:
"OnePlus, in its never-ending mission to make itself the worst Android phone manufacturer on the planet, has been discovered collecting massive amounts of analytics data from phone owners."

Be sure to read the links (Blue type)

JWSC 1203 comments · 7 Years

cesarbattistini said:

That is why their devices are so much cheaper, like alexa speakers, and google speakers, the profit is the user.

It’s a legitimate business model as long as the buyer understands this and it’s implications. The problem is that most do not.

ihatescreennames 1967 comments · 19 Years

JWSC said:

cesarbattistini said:

That is why their devices are so much cheaper, like alexa speakers, and google speakers, the profit is the user.

It’s a legitimate business model as long as the buyer understands this and it’s implications. The problem is that most do not.

That's the problem with most online privacy issues, most people don't understand the implications. Any time an online privacy conversation comes up I always hear "I don't have anything to hide" or "I don't care, I don't have any nude selfies", that sort of thing. People are just unaware of how much and what type of data is collected about them. I don't believe they don't really care, they just don't know.