LEPOCH.AT – The paper "Swipe Left for Identity Theft: An Analysis of User Data Privacy Risks on Location-based Dating Apps" by Karel Dhondt, Victor Le Pochat, Yana Dimova, Wouter Joosen, and Stijn Volckaert systematically examines the privacy risks associated with location-based dating apps. These apps often share personal and sensitive data, making users vulnerable to abuse by adversaries who can use the information to stalk, harass, or harm them. The researchers analyzed 15 LBD apps to assess data exposure through both intended sharing (visible in the user interface) and inadvertent leaks in API traffic.
Key findings include:
- Six apps allow pinpointing a user's exact location, posing physical threats.
- Large amounts of personal and sensitive data are shared with other users.
- API leaks can reveal hidden personal data, violating user expectations.
- Easy account creation facilitates targeted or large-scale profiling and tracking.
The study emphasizes the tension between app functionality and user privacy, recommending user control, data minimization, and API hardening to mitigate privacy risks. The authors highlight the need for better protection measures to safeguard user data on LBD apps. The authors of the paper are affiliated with DistriNet, a research group within the Department of Computer Science at KU Leuven, a university in Belgium.