US has been Found Spying on Muslims Again through Prayer Apps on Android (English)

<p><a href="https://theclearevidence.org/">The Clear Evidence</a></p> <p>A data collection code has been found in several Muslim <a href="https://theclearevidence.org/aspects-of-life/prayer-and-mosque/" rel="noreferrer noopener" target="_blank">Prayer </a>Apps on the <a href="https://play.google.com/store" rel="noreferrer noopener" target="_blank">Google Play Store</a>, which was used to spy on Millions of ordinary Muslims around the world. These apps included <a href="https://play.google.com/store/apps/details?id=com.parfield.prayers.lite&amp;hl=en_US&amp;gl=US" rel="noreferrer noopener" target="_blank">Al-Moazin Lite (Prayer Times)</a> and <a href="https://play.google.com/store/apps/details?id=com.qiblafinder.prayertime.hijricalendar" rel="noreferrer noopener" target="_blank">Qibla Compass – Ramadan 2022</a> with over 15 Million downloads.</p> <p>The apps were collecting rich data including precise location information, email and phone numbers and passwords when users used a “cut and paste” feature. The SDK could also view hashed data from WhatsApp image folders and even pull data about nearby computers and mobile devices, potentially mapping out who people meet with on a regular basis.</p> <p>The code was added by a Panamanian company <a href="https://www.ultra.group/" rel="noreferrer noopener" target="_blank">Measurement Systems</a>, which is linked to a Virginia defense contractor, that does cyberintelligence work network-defense and intelligence-intercept work for US agencies. <a href="https://www.ultra.group/" rel="noreferrer noopener" target="_blank">Measurement Systems</a> paid developers around the world to incorporate its code. <a href="https://www.ultra.group/" rel="noreferrer noopener" target="_blank">Measurement Systems</a> claimed developers could earn anywhere from $100 to $10,000 per month as long as they delivered enough users with apps accessing location data.</p> <p>The two researchers who found this code, considered the code to be the most privacy-invasive SDK they have seen in the six years