Xiaomi Phones Caught Harvesting User Data Via Web Browser, Even Incognito Mode

Anil - May 04, 2020


Xiaomi Phones Caught Harvesting User Data Via Web Browser, Even Incognito Mode

Data includes different types that might be a little far from what you might think, including different settings you changed, the song you played, folders you opened, and more.

According to a report from Forbes, Xiaomi has come under fire due to its misbehavior when illegally collecting personal data from Xiaomi users. This finding was publicized after a collaboration between Forbes and the security researcher Gabriel Cirlig.

Xiaomi Gabriel Cirlig
This happened even when the Incognito Mode was enabled.

The Chinese brand has been accused of using its homegrown browser that every Xiaomi smartphone has come equipped with by default. To your surprise, this happened even when the user chose to go into the Incognito Mode or use a privacy-conscious web service like DuckDuckGo.

In particular, Gabriel Cirlig once used a Redmi Note 8 to conduct one of his experiments for people’s concerns. As it turned out, the phone kept almost everything recorded after Cirlig interacted with it. Data includes different types that might be a little far from what you might think, including different settings you changed, the song you played, folders you opened, and more.

Xiaomi Banner
Storage servers in Russia and Singapore – but the domain addresses are located in Beijing, China.

The system then sent them to storage servers in Russia and Singapore – but the domain addresses are located in Beijing, China. It’s not something too hard for the security researcher to break apart encrypted data into plain texts because the data itself only got packed with a simple encoding format called base64.

Additionally, Cirlig also found similar flaws in several Xiaomi phones, including Mi Mix 3, Xiaomi Mi 10, and Redmi K20. As reported by Andrew Tierney, another security expert, such suspicious behaviors were caught taking place in the company’s Mint Browser and Mi Browser Pro.

Xiaomi Mi Browser
Mi Browser

Xiaomi already made a rush to judgment by declaring that all findings mentioned above are “misleading and untrue”. A spokesperson said the recorded data is used for improving user experience – and no specific user is subject to privacy threats. Gabriel Cirlig later sent Xiaomi a video to show how these browsers gave away data to “unknown” servers, even in incognito mode.

Comments

Sort by Newest | Popular

Next Story

Read more

Lava Prowatch Xtreme Launches with Google Fit Integration

Gadgets- Jun 12, 2025

Lava Prowatch Xtreme Launches with Google Fit Integration

Lava unveils Prowatch Xtreme smartwatch with Google Fit integration, launching exclusively on Amazon June 16 with special introductory pricing.

Best Gaming Phones 2025: Top Devices for Mobile Gaming

Mobile- Jun 12, 2025

Best Gaming Phones 2025: Top Devices for Mobile Gaming

Find the perfect gaming phone for 2025. We analyzed top devices from Asus, Apple, Samsung, and more to help you choose the best mobile gaming experience.

The Legend of Tianding Free Download (v1.01) - Become Taiwan's Legendary Outlaw

How To- Jun 12, 2025

The Legend of Tianding Free Download (v1.01) - Become Taiwan's Legendary Outlaw

Step into the shoes of Liao Tianding, Taiwan's legendary folk hero, in this visually stunning action game that blends history with Traditional Chinese Manga aesthetics.

Best VPN for PUBG Mobile 2025: Lower Ping & Regional Access Guide

Features- Jun 11, 2025

Best VPN for PUBG Mobile 2025: Lower Ping & Regional Access Guide

Find the perfect VPN for PUBG Mobile with our 2025 guide. Lower ping, unlock regions, and dominate the battlefield with these tested solutions.

Google Offers Voluntary Buyouts to US Employees Amid AI Push

ICT News- Jun 12, 2025

Google Offers Voluntary Buyouts to US Employees Amid AI Push

Google launches new voluntary exit program for US employees across multiple departments as the tech giant prioritizes AI infrastructure investments.

Vivo T4 Ultra Debuts with MediaTek Dimensity 9300+ Chipset

Mobile- Jun 12, 2025

Vivo T4 Ultra Debuts with MediaTek Dimensity 9300+ Chipset

Vivo launches T4 Ultra smartphone in India featuring MediaTek Dimensity 9300+ processor, quad-curved AMOLED display, and advanced AI capabilities.