“There are no legal services for tracking a user using a mobile application without their knowledge on the Russian market, and there cannot be any, since they contradict the criminal code and are a direct invasion of a person’s privacy,” emphasizes Evgeny Ermolaev. A word about safety It is worth dwelling on the completely legal methods of geolocation applications, when users literally "on a silver platter" hand over confidential information about themselves and access to personal data to the application developer. When a user downloads applications from the store, he often automatically allows access to his phone book, photos, messages, etc. are granted access to certain user data automatically if he has approved at least one permission in the group.
For example, the subscriber has allowed vietnam email list reading SMS, and the application can not only read, but also send messages. Access to contacts allows the application to use the subscriber's entire address book. And this is a "tasty morsel" for spammers and scammers. By allowing access to the camera, an unscrupulous developer can make audio and video recordings of the subscriber without warning. Kaspersky Lab information security specialists point out that the user should be very careful with all permissions requested by the application. And if a photo processing application requires access to the subscriber's current location (which clearly does not fit into the logic of the service), you should be wary and not allow this access.
Thus, not all mobile applications should be allowed to work with confidential data, and some permissions are better not given at all. On May 25, the General Data Protection Regulation (GDPR) came into force. In Russia, there is also a document protecting users' personal data (PD) - 152-FZ "On Personal Data", which, according to most lawyers, is a carbon copy of the old European directive on the protection of PD, which the GDPR replaced. Since 152-FZ has been in effect for over 10 years, Russian companies have learned to correctly comply with its requirements. And some organizations believe that implementing GDPR requirements will not require any special efforts from them.