FaceApp adds on years, raises privacy concerns
If you’re wondering why your social media feed is being flooded by photos of wrinkle-enhanced celebrities and (suddenly) old friends, thank FaceApp.
Personalities as varied as Drake, LeBron James, Gordon Ramsey and the Jonas Brothers have tapped the photo-editing app to fuel the future-self craze on Instragram, Facebook and Twitter. FaceApp was the top trending free offering Wednesday morning in Apple’s App Store. FaceApp has altered photos for more than 80 million users since its 2017 release.
How does it work? Users can download the app (free for a three-day trial) from the App Store or Google Play, upload or take photos, and have 21 editing options to choose from: you can look older or younger, swap gender or add a smile or different hairstyle.
FaceApp differs from other photo-editing applications because it uses artificial intelligence algorithms to alter the photo, instead
of slapping a filter on top of it.
The app is owned by Wireless Lab, a company based in St. Petersburg, Russia, and has legal jurisdiction in Santa Clara County, California, according to its privacy terms.
But before downloading the app, keep in mind that under its privacy terms it can collect:
Any photos or other content that is uploaded and posted.
Information on the websites you visit and how you use the app, which the terms say doesn’t identify individual users.
Cookies and data that identifies your device to share with third-party advertisers to deliver targeted advertising to your device.
Your web request, IP address, browser type, referring/exit pages and URLs, number of clicks and how you interact with links on the app, domain names, landing pages, pages you view, what emails you open every time you access the FaceApp application or website.
And metadata.
Even if you delete content from the app, FaceApp can still store and use it, according to its privacy terms. FaceApp also says it can’t guarantee your data or information is secure. The company can share your information with its other affiliated companies and third-party advertisers, which aren’t disclosed in the privacy terms.
FaceApp also says it can share information with a government agency if a subpoena, court order or search warrant is issued and the company has “a good faith belief that the law requires” it to do so.
And this information can also be shared to any country that FaceApp maintains facilities in, including Russia.
Baptiste Robert, a French security researcher who uses the pseudonym Elliot Alderson, said he looked into the traffic between FaceApp on his phone and the internet to understand how the network operates for users.
He found that only photos that are uploaded and modified are saved to the server, not the user’s entire camera roll. But his main concern was that he didn’t think the app was compliant with the European Union’s new privacy rule, the General Data Protection Regulation (GDPR).
“When you upload your photo, you have no idea how your photo is used,” Robert said, noting that the app’s terms and conditions are vague. “Don’t rush to use this application because you don’t know how your data is used after that.”