Fingerprinting smartphone devices (using sensors, etc) – globally unique, survives resethttps://www.lightbluetouchpaper.org/2019/05/21/calibration-fingerprint-attacks-for-smartphones/
Careful as this is US-specific.
[..] “Insufficient consent
According to the SINTEF report, Grindr shares personal data with different of third parties.
When a user registers a user account in Grindr, the app asks for consent to the terms of service in whole, without individual elements being emphasized or singled out (see attached picture).
In the view of the Consumer Council, information about sensitive personal data being shared with third parties should not be hidden away in long terms of service and privacy policies. The Consumer Council cannot see that Grindr fulfill the conditions for gathering an informed and explicitly given consent.
The app does not provide an opportunity to not share personal data with third parties.”
Paper “Who Knows What About Me? A Survey of Behind the Scenes Personal Data Sharing to Third Parties by Mobile Apps”
by Jinyan Zang, Krysta Dummit, James Graves, Paul Lisker, and Latanya Sweeney
“The report and draft Code of Practice advocates a fundamental shift in approach to moving the burden away from consumers having to secure their devices and instead ensure strong cyber security is built into consumer IoT products by design.
The draft Code of Practice for industry contains 13 practical steps to improve the cyber security of consumer IoT.”
Audience of the draft CoP is Device Manufacturers, IoT Service Providers, and Mobile Application Developers (!)
Quick introduction with some examples