LOS ANGELES TIMES – Apr 3 – Grindr will stop sharing users' HIV statuses with third parties after a report disclosed that the company passed the information on to two vendors. Grindr's vendors, Apptimize and Localytics, were fed user data that includes HIV statuses, GPS data, phone numbers and e-mail addresses.
Category: All Gay
Grindr Sends HIV Status To Third Parties, And Some Personal Data Unencrypted
TECH CRUNCH – Apr 2 – Grindr is under fire again for inappropriate sharing of HIV status with advertisers and inadequate security on other personal data transmission. Norwegian research outfit SINTEF analyzed the app's traffic and found that HIV status, which users can choose to include in their profile, is included in packets sent to Apptimize and Localytics, services for testing and improving mobile apps. The company's CTO said that "the limited information shared with these platforms is done under strict contractual terms that provide for the highest level of confidentiality, data security, and user privacy." Also, the SINTEF researchers found that precise GPS position, gender, age, ethnicity, relationship status, language and others are sent over HTTP to a variety of advertising companies.
Security Flaws In Gay Dating App Grindr Expose Users’ Location Data
NBC NEWS – Mar 28 – Grindr suffers from two security issues, according to Trever Faden, CEO of the property management startup Atlas Lane. He created a website called C*ckblocked that allowed users to see who blocked them on Grindr after they entered their Grindr username and password. Once they did so, Faden was able to gain access to a trove of user data that is not publicly available on user profiles, including unread messages, email addresses, deleted photos, and the location data of users, some of whom have opted to not share their locations publicly. Faden also discovered a separate security flaw related to location data that did not require users to log in to any third-party apps or websites with their Grindr credentials. Grindr said it was aware of the vulnerabilities and had changed its system. This is not the first time that issues with Grindr's security around location data has been reported.
Grindr To Offer H.I.V. Test Reminders
NEW YORK TIMES – Mar 26 – Grindr, which claims to have 3.3M daily users, will send men who opt into the service a reminder every three to six months, and simultaneously point them to the nearest testing site. It will also let clinics, gay community centers and other testing sites advertise for free. "More than 107k gay and bisexual men in this country have H.I.V. but don't know it", said Dr. Jonathan Mermin, chief of AIDS and sexually transmitted diseases at the Centers for Disease Control and Prevention. "And there is typically a three-year gap between the day they get infected and the day they find out."
Grindr App Loophole Allows Users To See Who Blocked Them
PINKNEWS – Mar 19 – A massive loophole in Grindr's code is allowing guys to see exactly who has blocked them on the app according to developer Trever Faden. He says that the app currently attaches an invisible list of restricted profiles to each user's account, so the app knows not to display guys to someone that has blocked them. With a little effort it's possible to retrieve the list of user IDs from the code. Faden has since built a web tool called 'C**kblocked' that lets people sign into their Grindr accounts and see the list for themselves.
Lawsuit Against Grindr Dismissed
LEXOLOGY – Mar 16 – The lawsuit was dismissed under Section 230 of the Communications Decency Act which continues to act as one of the strongest legal protections for social media companies. The case involved a dispute between Grindr and an individual who was maliciously targeted through the platform by his former lover. Plaintiff Herrick alleged that his ex-boyfriend set up several fake profiles on Grindr that claimed to be him. Over a thousand users responded to the impersonating profiles. Herrick's ex‑boyfriend, pretending to be Herrick, would then direct the men to Herrick's work-place and home and telling them that he had certain rape fantasies. The impersonating profiles were reported to Grindr (the app's operator), but Herrick claimed that Grindr did not respond, other than to send an automated message. When Congress enacted Section 230 of the CDA in 1996, it sought to provide protections that would permit online services to thrive without the threat of crippling civil liability for the bad acts of its users. Over 20 years since its passage, the Act has indisputably served that purpose.
Grindr In Hot Water For Allegedly Divulging Users’ HIV Status
SPUTNIK NEWS – Mar 16 – Dating app Grindr has been found to be sharing users' immune status with an external company in a possible violation of EU rules, prompting indignation across Scandinavia. The Norwegian Consumer Council is considering reporting the dating app, national broadcaster NRK reported. An investigation carried out in collaboration between national Swedish broadcaster SVT and the Norwegian research institute SINTEF, presenting itself as "Scandinavia's largest independent research company," found out that the sensitive data the users submit about themselves, including age, sexual preferences, gender and, most importantly, HIV status, is being transmitted unencrypted. Therefore, the deeply personal information can be easily accessed by computer buffs. Additionally, the information about the users HIV status is being shared with an external company headquartered in the US. At present, common EU legislation imposes requirements about the protection of and handling of personal data once it is moved outside of Europe.
Queer Dating Apps Need To Protect Their Users Better
SLATE.COM – Feb 28 – With Grindr and other queer platforms, the burden of keeping safe shouldn't fall solely on users. In late September, Egyptian authorities began a crackdown against the country's queer communities after fans of Mashrou' Leila, an outspoken Lebanese indie rock group with an openly gay band member, displayed a rainbow flag at the group's concert in Cairo. To find and arrest their targets, security forces, among other tactics, created fake profiles on queer dating apps like Grindr and Hornet. The app creators should be responsible for protecting their users. The majority of dating apps don't transmit pictures securely. All of the major dating apps, too, are able to access messages stored on company servers, meaning their contents could be compromised in the event of a government request or, if stored insecurely, in the event of a data breach. To try to protect themselves, users often turn to software that only partially addresses privacy and security issues. But VPNs won't hide a user's location from a dating app, which relies on a phone's built-in GPS sensor for its geolocation features. What's more, in countries that have banned these kinds of tools, downloading or using certain known VPNs or circumvention software might land a user under increased scrutiny. Grindr and Hornet began providing safety info&tips in Arabic to inform users about risks but without implementing changes to protect them too – say, eliminating watermarked app logos on photos, which have been used as evidence in court and blackmail attempts.
by Norman Shamas
See full article at Slate.com
Gay Dating App Hornet Bought Hornet.com Domain
HORNET BLOG – Feb 27 – The domain will allow users access Hornet's vast social network and original editorial content with a newly designed website. Hornet.com will replace the existing Hornetapp.com.
How Grindr Evolved Into More For Its 4M Users
PRWEEK – Feb 27 – When Peter Sloterdyk joined Grindr as VP of global marketing, the app had just under 3M daily active users and is now creeping its way toward 4M. Sloterdyk explains the main issue was that Grindr was considered to be mainly a gay hookup app. While this assumption is not completely incorrect, the brand wants people to know it is that, but also "so much more." "Over the past year, Grindr has launched a gay emoji keyboard to help users communicate in a way they are already using in their lives. It also unveiled Into, an online magazine, to provide people with information, editorial content, and stories with global perspectives. The brand is also continuing its Slumbr event series, a 36-hour party that helps people "experientially connect with Grindr and see us in a different way," Sloterdyk says. Sloterdyk is also changing up Grindr's marketing strategy for India and its surrounding countries to ensure the brand has an on-the-ground presence there.
