We Intercepted the White House App's Network Traffic. Here's What It Sends.

This title could be clearer and more informative.Try out Clickbait Shieldfor free (5 uses left this month).

A MITM proxy analysis of the official White House iOS app reveals significant undisclosed data collection. Using mitmproxy, researchers captured all HTTPS traffic during a normal browsing session and found that 77% of requests go to third-party services. OneSignal receives detailed device fingerprints including IP address, device model, OS version, timezone, session counts, and a persistent tracking identifier on every launch. The app contacts 13 Elfsight-controlled domains and receives 10+ tracking cookies. Google DoubleClick ad tracking infrastructure is also loaded via YouTube embeds. Despite all this, the app's privacy manifest declares 'No Data Collected' with NSPrivacyTracking set to false.

6m read timeFrom atomic.computer
Post cover image
Table of contents
SetupWhat the App ContactsWhat OneSignal Receives13 Elfsight DomainsGoogle DoubleClick Ad TrackingThe Privacy Manifest vs. RealityMethodologyRelated WorkAbout

Sort: