
All three popular social media apps say they don't track sensitive user data like credit card information, passwords and addresses that is entered through in-app browsers — but it would be extremely easy for them to do so if they wanted to, researcher and developer Felix Krause wrote this week.
For example, imagine an Instagram user's friend sent them a direct message with a link to a product for sale.
If the Instagram user clicks on the link using their iPhone, it will open within the in-app browser rather than redirecting to Safari. If the user then decides they want to purchase the product, they will have to enter their credit card information, shipping address and other details — all of which can be tracked by Instagram, according to Krause. The same process would occur if they were buying a product from an Instagram advertisement.












Comment: Meanwhile in the US: