The actual claim seems to be that TikTok uses a form of dynamic code that means the on-device app may do things an app reviewer did not see, and that static code analysis did not see.īut that doesn't mean the app sandbox is escaped, it just means that actions taken within the sandbox may not have been screened. Within the scope of what the application can see contacts or iMessages or browsing history is accessible to the app. Yes, the article is clickbait and is implying that e.g. Is it just me, or is it not clear from this article what the app can actually access?

It seems to me that this is less TikTok secretly hacking iPhones and more just them ignoring (or trying to circumvent) the 'ask app not to track' prompts. So what 'full user data' is the app actually accessing? It says that the app collects and uses other information such as OS version and device model, but like, those are things I don't care if an app can access. The article states that 'keychain data is synched between multiple devices on the same account and potentially family members.' But they're not talking about iCloud keychain, surely that's just TikTok's own keychain, which doesn't seem odd that it would sync between multiple devices using the same account.

the only thing I've allowed the app access to is cellular data. These dynamic properties allow TikTok carte blanche access to your device within the scope of what the application can seeīut if I don't allow the app access to anything, then what can it see? I have 'allow tracking' turned off, I have access to contacts turned off, I have access to local network devices turned off. Is it just me, or is it not clear from this article what the app can actually access? The article states :

Tik tok download macbook