T-Mobile secretly records iPhone screens and claims it's being helpful

Jump to First Reply
Posted:
in iOS

T-Mobile has a ridiculous feature in its heavily promoted T-Life iPhone app which sends the firm screen recordings without permission, and by default.

Two people smiling, taking a selfie outdoors with a smartphone. Text below reads 'T-Life: Experience the best of T-Mobile.' Placed on a grid-patterned surface.
T-Mobile's T-Life app will record your screen and send details to the company unless you stop it



T-Mobile is recording its users screens when they use its T-Life app, and has turned on this feature without notice. Importantly, the company says it solely records activity within the T-Life app, so it isn't capturing other apps and seemingly isn't recording notifications.

But even if it is solely screen-recording T-Life activity, it is recording personal information. Amongst other details, it is capturing payments information, device tracking, and smart home integration.

According to CNET, the company has responded to a backlash from users by claiming that the unannounced feature is for their own good.

"To help us give customers who use T-Life a smoother experience, we are rolling out a new tool in the app that will help us quickly troubleshoot reported or detected issues," said a T-Mobile spokesperson. "This tool records activities within the app only and does not see or access any personal information."

The spokesperson also basically said that if you don't like it, you can turn it off. But unless a user happens to spend time in their T-Life settings, there was no, and remains no, way for them to know the feature even exists.

Forcing this screen recording on users at all is at best questionable, and especially so since T-Life also has an optional Screen Share feature. That's meant so that users can elect to show T-Mobile support staff when something is wrong, which is what the company claims this new, extra feature is for.

However, that Screen Share is optional, and off by default. T-Life's screen recording doesn't present any option, and by default it's on.

If T-Mobile is surprised anyone has objected, they need to be reminded of their track record in security. In 2021, hackers got access to data on over 100 million T-Mobile customers.

Then if this is an innocuous attempt to help users, there is the question of just how hard T-Mobile is pushing its T-Life app. It is intended to be one central app for all T-Mobile services, but there is more.

According to The Street, T-Mobile retail staff are allegedly paid a bonus of up to $10 for every customer they persuade to download T-Life. And if the staff fail to meet targets for this, they are said to face unspecified repercussions.

Perhaps T-Mobile just really wants to help its users. But there is exactly no benefit to customers in having their screens secretly recorded.

So T-Mobile users should instead:


  1. Open the T-Life app

  2. Tap Manage

  3. Then tap the Settings gear icon

  4. Choose Preferences

  5. Turn off the screen recording tool



It's not clear when T-Mobile began rolling out this feature, but it appears to be recent. It's not yet clear whether T-Mobile has any other secret privacy-breaching features.

But then it's not fully clear how many customers will look to jump ship to Verizon or AT&T.

Apple has not commented on how this breach of user privacy was allowed to pass by its App Review team



Read on AppleInsider

Comments

  • Reply 1 of 15
    Are you guys aware of Microsoft Clarity and similar products that are used on all websites?
    williamlondon
     0Likes 1Dislike 0Informatives
  • Reply 2 of 15
    boboliciousbobolicious Posts: 1,200member
    ... did Apple join the party a long time ago ...?

    https://gizmodo.com/apple-iphone-ipad-privacy-problems-data-gathering-1849855092
    edited May 28
    williamlondon
     0Likes 1Dislike 0Informatives
  • Reply 3 of 15
    twolf2919twolf2919 Posts: 179member


    So T-Mobile users should instead:

    1. Open the T-Life app
    2. Tap Manage
    3. Then tap the Settings gear icon
    4. Choose Preferences
    5. Turn off the screen recording tool



    Read on AppleInsider

    I followed the directions, and on my iPhone (latest iOS) you can't "4.  Choose Preferences" - it's just a header under which one can choose Notifications, update Location access, and update Contact access.  Is this a new feature that hasn't made it to all iPhones yet?  I have my settings set to auto-update apps, so...
    bonobob
     1Like 0Dislikes 0Informatives
  • Reply 4 of 15
    Mike Wuerthelemike wuerthele Posts: 7,137administrator
    Are you guys aware of Microsoft Clarity and similar products that are used on all websites?
    Of course.

    Knowing where a reader clicks on a webpage is not the same as everything on a screen being recorded, or all keystrokes captured while the app is open.
    brighter
     1Like 0Dislikes 0Informatives
  • Reply 5 of 15
    I used to work in UX and lots of companies use tools where you can track users interactions. I could basically watch recordings in real-time of people interacting with the app and seeing what they click on, where they browse to, etc. It isn't recording video as such, but just playing back the interactions in real-time. I forget the name of the tool, but a lot of companies use it and it will be covered in their terms and conditions under the umbrella of tracking user data, not much different to Google Analytics and the likes. We were not able to see anything outside of the app, but you would (or probably wouldn't, actually) be surprised what detailed information most apps collect.
     0Likes 0Dislikes 0Informatives
  • Reply 6 of 15
    auriconisauriconis Posts: 13member
    twolf2919 said:


    So T-Mobile users should instead:

    1. Open the T-Life app
    2. Tap Manage
    3. Then tap the Settings gear icon
    4. Choose Preferences
    5. Turn off the screen recording tool



    Read on AppleInsider

    I followed the directions, and on my iPhone (latest iOS) you can't "4.  Choose Preferences" - it's just a header under which one can choose Notifications, update Location access, and update Contact access.  Is this a new feature that hasn't made it to all iPhones yet?  I have my settings set to auto-update apps, so...
    Same here. I don’t see this setting. Could it be one that’s already been pulled? 
    bonobob
     1Like 0Dislikes 0Informatives
  • Reply 7 of 15
    auriconisauriconis Posts: 13member
    Edit: it just now showed up as a setting. That immediately got turned off.
    bonobob
     0Likes 1Dislike 0Informatives
  • Reply 8 of 15
    eightzeroeightzero Posts: 3,204member
    auriconis said:
    twolf2919 said:


    So T-Mobile users should instead:

    1. Open the T-Life app
    2. Tap Manage
    3. Then tap the Settings gear icon
    4. Choose Preferences
    5. Turn off the screen recording tool



    Read on AppleInsider

    I followed the directions, and on my iPhone (latest iOS) you can't "4.  Choose Preferences" - it's just a header under which one can choose Notifications, update Location access, and update Contact access.  Is this a new feature that hasn't made it to all iPhones yet?  I have my settings set to auto-update apps, so...
    Same here. I don’t see this setting. Could it be one that’s already been pulled? 
    Me too. It shows v10.8.0 updated 3w ago, and I have no ability to do what the article suggests in that version. Perhaps the version number of the "recently rolled out version" that does this can be added please?
     0Likes 0Dislikes 0Informatives
  • Reply 9 of 15
    rob53rob53 Posts: 3,370member
    Another reason not to deal with T-Mobile and Microsoft. Already don't deal with Google, unless absolutely necessary. Everyone continues to try and steal personal data. It won't surprise me when every network and cellular access goes through a government system that tracks everything we do. VPNs will be shut down so nobody can bypass government oversight. I'm sure this already happens in non-USA countries, probably in the EU, and definitely in Russia, China, and all the other countries led by dictators. 
     0Likes 0Dislikes 0Informatives
  • Reply 10 of 15
    9secondkox29secondkox2 Posts: 3,602member
    Dang. Great heads-up article. 

    this kind of thing needs a law to address it.
     0Likes 0Dislikes 0Informatives
  • Reply 11 of 15
    eightzeroeightzero Posts: 3,204member
    Dang. Great heads-up article. 

    this kind of thing needs a law to address it.
    hahaha. good one.
    bonobob9secondkox2
     1Like 1Dislike 0Informatives
  • Reply 12 of 15
    There is a third party SDK vendor that offers this screen recording feature. While working for a fintech company there were efforts from people on my team to integrate it into our very widely used app. I about lost my shit and engaged our security department to shut down that effort.
    bonobob
     1Like 0Dislikes 0Informatives
  • Reply 13 of 15
    brighterbrighter Posts: 7member
    Are you guys aware of Microsoft Clarity and similar products that are used on all websites?
    Of course.

    Knowing where a reader clicks on a webpage is not the same as everything on a screen being recorded, or all keystrokes captured while the app is open.
    What other apps are recording my interactions and haven't asked my permission?

    There is a permission setting for "Screen Recording" in macOS, but not one in iOS? WTF? How could Apple allow this gaping loophole in Privacy & Security?

    T-Mobile's implementation without overt permission is a confidence-killer for trusting Apple's claims of privacy protections.
     0Likes 0Dislikes 0Informatives
  • Reply 14 of 15
    eightzeroeightzero Posts: 3,204member
    brighter said:
    Are you guys aware of Microsoft Clarity and similar products that are used on all websites?
    Of course.

    Knowing where a reader clicks on a webpage is not the same as everything on a screen being recorded, or all keystrokes captured while the app is open.
    What other apps are recording my interactions and haven't asked my permission?

    There is a permission setting for "Screen Recording" in macOS, but not one in iOS? WTF? How could Apple allow this gaping loophole in Privacy & Security?

    T-Mobile's implementation without overt permission is a confidence-killer for trusting Apple's claims of privacy protections.
    Kinda curious: this spyware arrived on iPhones (apparently) as an update to an existing app. I always assumed Apple vetted "updates" the same way - they reviewed them with the same standards as a new submission. Maybe not? Or if they were supposed to, it looks like someone somewhere rather high on totem pole is about to get brutalized. This is an app from a very large international corporation known to collect information, sell it for their benefit, and not protect it in accordance with law or even actual common professional standards. 

    This all screams of Apple's claims of "privacy built in" being total one hundred complete bullshit. 
    edited May 28
    muthuk_vanalingam
     1Like 0Dislikes 0Informatives
  • Reply 15 of 15
    I used to work in UX and lots of companies use tools where you can track users interactions. I could basically watch recordings in real-time of people interacting with the app and seeing what they click on, where they browse to, etc. It isn't recording video as such, but just playing back the interactions in real-time. I forget the name of the tool, but a lot of companies use it and it will be covered in their terms and conditions under the umbrella of tracking user data, not much different to Google Analytics and the likes. We were not able to see anything outside of the app, but you would (or probably wouldn't, actually) be surprised what detailed information most apps collect.
    There are a few out there.  My last company I worked for used FullStory.  We could essentially watch users in real time and refer back to their recordings, and inspect client side Java script errors, etc. I felt creepy using it, and rarely did it show me stuff that I didn’t already know.
     0Likes 0Dislikes 0Informatives
Sign In or Register to comment.