Location Sharing Doesn't Stop at the App You Gave Permission To
Granting a weather app access to your location feels like a two party exchange. You tap allow, the app pulls your coordinates, and it hands back a forecast for the block you are standing on. Android does not actually treat it as two parties. Once permission is granted at the app level, every piece of code bundled inside that app inherits the same access. That includes the advertising kits stitched in to help the app pay its bills. A report the Electronic Frontier Foundation published in early August found several of those kits handling location sharing by default, sometimes without the app's own developer realizing it.
One permission, several passengers
Android has no separate permission for the software development kits, or SDKs, that developers drop into an app to handle ads. A location permission granted to the app becomes a location permission granted to everything running inside it. EFF's researchers...
Copyright of this story solely belongs to hackernoon.com. To see the full text click HERE