DHS Cautions Smartphone Users About App Security, Public Charging Stations

The Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency published safety tips for mobile devices. When consumers download an app, it may ask for access to personal information -- including email contacts, calendar inputs, call logs and location data from the device -- that might be used for legitimate purpose, such as location data for a ride-hailing app. “Be aware that app developers will have access to this information and may share it with third parties, such as companies who develop targeted ads based on your location and interests.” CISA suggested Tuesday avoiding potentially harmful apps by limiting download sources to official app stores. Malicious apps have been known to “slip through the security of even reputable app stores,” it said, so read reviews and research developers. Users should understand the information an app will access before downloading it and “consider foregoing the app if the policy is vague regarding with whom it shares your data or if the permissions request seems excessive.” CISA warned about connecting a smartphone to a computer or charging station a user doesn’t control.