More and more people are adding to the use of dating apps like Tinder, Happn, Lovo, among many others. However, many of the millions of users who use these applications do not size the information they expose in them or the potential consequences they can have. That’s why threat prevention expert Eset assessed the risks associated with these publications.
Generating a profile on Tinder is very simple, just link the account with an Instagram or Facebook profile. The thing to keep in mind is that on these social networks are stored photos and personal information related to tastes and interests that you may not want to share. In addition to the information tying for, if completed in full, much is made available.
Users should be aware of the risks associated with publishing personal information, as you never know what can happen to that information or how they use it. The data collected by the application is sufficient to elaborate deceptions such as targeted phishing attacks or social engineering.
In January this year, a study published by Norway’s consumer advocacy agency (NCC) suggests that several popular online dating apps, such as Grind, OkCupid and Tinder, are collecting sensitive user information, including sexual preferences, accurate location data, online activity, to market to marketing and advertising companies. Ireland’s Data Protection Commission (DPC) recently opened an investigation because of how Tinder and other services handle users’ personal data.
That month it was also known that more than 70,000 images of Tinder users packaged in clandestine forums are flowing alongside a text file that also contained the ID of approximately 16,000 users of the application. While it is unclear the purpose for which the images were circulating, it is speculated that they could be used to extort Tinder’s own users or even to create false profiles on other platforms with the intention of taking some malicious action.
“One of the big flaws of this type of applications is not having adequate privacy policies, since all the information is public and anyone can consult it. On the other hand, while it is questionable in the handling of users’ personal information by these platforms, it does not exempt users from responsibility for the care of their personal information, since it is themselves who end up providing it. Education and awareness are important to understand the value of information, so protect it adequately,” says Camilo Gutiérrez, head of Eset Latin America’s research lab.
Tips interact safely
Name and age: it is preferable to use a pseudonym and not the full name, as it is very easy to “investigate” someone on the network by their first and last name.
University or school: Institutions typically have active social media groups where it is relatively easy to find their members and colleagues.
User friendly space: Avoid unnecessary information in this space that is usually free for the user. Many people disclose information that exposes them considerably, such as their cell phone number, public profiles to other networks, etc.
Work and type/place of employment: Unless you are looking for professional exchanges, it is not advisable to add this information to a profile. In the case of universities or study center, it is easy to search for information from an individual’s membership group.
Instagram profile preview: This is a sensitive point, because while it is true that it is comfortable for both sides of a match to be known panoramicly through an Instagram preview, it is also true that many users use this network publicly, so it is advisable to avoid the use of public profiles and even more if you are going to lend the profile to other networks as is the case of Tinder.
“It is likely that many times it does not make sense to publish information about the employment or university in which we study. Avoiding this type of data could decrease attack vectors and therefore the level of exposure. Either way and as we’ve seen in the Tinder profile example, it’s a fact that many platforms request a lot of information from their users and interrelate it among other platforms. If we add up all the data you get a lot of information and many times for users it is difficult to discriminate what type of information is more sensitive than another. Taking the necessary steps to take care of our information will allow us to enjoy the Internet safely,” Gutierrez concluded.
