iOS Privacy: Instagram and Facebook can track anything you do on any website in their in-app browser · Felix Krause
ARANK

The iOS Instagram and Facebook app render all third party links and ads within their app using a custom in-app browser. This causes various risks for the user, with the host app being able to track every single interaction with external websites, from all form inputs like passwords and addresses, to every single tap.Note: To keep this post simple, I'll use "Instagram" instead of "Meta" or "Facebook"What does Instagram do?Links to external websites are rendered inside the Instagram app, instead of using the built-in Safari.This allows Instagram to monitor everything happening on external websites, without the consent from the user, nor the website provider.The Instagram app injects their tracking code into every website shown, including when clicking on ads, enabling them monitor all user interactions, like every button & link tapped, text selections, screenshots, as well as any form inputs, like passwords, addresses and credit card numbers.Why is this a big deal?Instagram is purposely…

krausefx.com
Related Topics: iOS Web Standards / Browsers
1 comments