Built-in security prevents apps from stealing data from native PIM apps?

Discussion in 'mobile device security' started by WildarsNube, Dec 18, 2022.

  1. WildarsNube

    WildarsNube Registered Member

    Joined:
    Dec 7, 2011
    Posts:
    27
    Location:
    United States
    I originally posted this at https://www.reddit.com/r/Smartphone...in_security_prevents_apps_from_stealing_data/

    I use an iPhone SE. For the most part, I avoid installing apps because it's just too complicated to figure out the security implications.

    Recently, siblings bought a camera to monitor a parent who has dementia. The camera is manufactured in a nation where most consumer security cameras are manufactured these days. They have hidden this fact.

    I realize that it is impossible to avoid consumer electronics made off-shore. My concern here is that I am installing an app on my phone. I have no visibility in to the relative risk to the data for the native Personal Information Manager (PIM) apps, e.g., contacts, calendar, notes. Googling unearths a lot of opinions.

    After more googling, however, it seems that there are safeguards in place, e.g., here and here. Is it pretty safe to proceed? I'm not talking about being especially targeted, just being responsible and taking a good luck at the known risks.
     
  2. summerheat

    summerheat Registered Member

    Joined:
    May 16, 2015
    Posts:
    2,244
    Well, those articles give you valuable hints. Every app in iOS is sandboxed, and you can see in the privacy settings of your device the permissions granted to every app. You can revoke these permissions if you want.

    Some more tips here.
     
  3. WildarsNube

    WildarsNube Registered Member

    Joined:
    Dec 7, 2011
    Posts:
    27
    Location:
    United States
    My iPhone SE is 1st generation, so it only updates to iOS 15.7.2 as of today (2022-12-19).

    I get that there is separation between apps and privacy settings. Those are safety measures. In my mind, the advisability of installing an app from a country without the best record in cyber conduct depends on known threats that circumvent these safety measures, and their prevalence. Would you be able to comment on that, again from the perspective of an untargeted user?

    Thanks.
     
  4. summerheat

    summerheat Registered Member

    Joined:
    May 16, 2015
    Posts:
    2,244
    This version doesn't contain the new features introduced in iOS 16.x but fixes various security issues.

    I'd say that if an app from such a country could circumvent these security measures it would be a massive unknown vulnerability in iOS. While this is certainly not completely impossible it's rather unlikely. That said, it certainly makes sense to look at the rating and the (negative) reviews of an app before installing it - and at the "App Privacy" section for the respective app in the App Store. Again, restricting the permissions of your apps is most important. I mean, common sense should tell that, say, a navigation app doesn't need access to, e.g., your contacts.

    This site is worth reading.
     
    Last edited: Dec 19, 2022
  5. WildarsNube

    WildarsNube Registered Member

    Joined:
    Dec 7, 2011
    Posts:
    27
    Location:
    United States
    That's very valuable. Thanks. It looks like lots to spin up on and explore before I'm in a position to install the app. Such is reality.

    I've almost never installed apps, but as far as I can see, the particular app's page doesn't have reviews. I accessed the Apple app store from both my Windows laptop and from my iPhone.

    As for the privacy information on the page, I'm more concerned about what might be done to circumvent the iOS protections, which wouldn't be openly declared.
     
    Last edited: Dec 19, 2022
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.