A new analysis of the Instagram app has suggested that every time a user clicks a link within the app, Instagram is capable of monitoring all of their interactions, text selections, and even text input, such as passwords and private credit card details within websites inside the app.

The analysis conducted by Felix Krause found that both Instagram and Facebook on iOS use their own in-app browser, rather than the one offered by Apple for third-party apps. Most apps use Apple’s Safari for loading websites, but Instagram and Facebook have been using their own in-app browser to load websites within the app.

With their custom-built browser, still based on WebKit, Instagram and Facebook inject a tracking JavaScript code named “Meta Pixel” into all links and websites shown. With that code, Meta has total freedom to track users’ interactions without their explicit consent, Krause finds.

For more on this, read the full story at MacRumors:

https://www.macrumors.com/2022/08/10/instagram-tracking-users-in-app-browser/

Related Coverage

Data crackdown coming: FTC launches effort to protect consumers privacy