Meta sued for skirting Apple privacy rules to snoop on users

Bloomberg

Meta Platforms Inc was sued for allegedly building a secret work-around to safeguards that Apple Inc launched last year to protect iPhone users from having their internet activity tracked.
In a proposed class-action complaint in San Francisco federal court, two Facebook users accused the company of skirting Apple’s 2021 privacy rules and violating state and federal laws limiting the unauthorised collection of personal data. A similar complaint was filed in the same court last week.
The suits are based on a report by data privacy researcher Felix Krause, who said that Meta’s Facebook and Instagram apps for Apple’s iOS inject JavaScript code onto websites visited by users. Krause said the code allowed the apps to track “anything you do on any website,” including typing passwords.
A Meta spokesperson said the allegations are “without merit” and the company will defend itself.
“We have designed our in-app browser to respect users’ privacy choices, including how data may be used for ads,” the company said in an emailed statement.
According to the suits, Meta’s collection of user data from the Facebook app helps it circumvent rules instituted by Apple in 2021 requiring all third-party apps to obtain consent from users before tracking their activities, online or off.
Meta has said it expected to miss out on $10 billion in ad revenue in 2022 because of Apple’s changes.
The Facebook app gets around Apple privacy rules by opening web links in an in-app browser, rather than the user’s default browser, according to Wednesday’s complaint.
“This allows Meta to intercept, monitor and record its users’ interactions and communications with third parties, providing data to Meta that
it aggregates, analyzes, and uses to boost its advertising
revenue,” according to the suit.