The Federal Bureau of Investigation (FBI) has issued a Public Service Announcement warning users of iPhone and Android devices about data security risks associated with mobile applications developed by foreign companies, specifically those based in China.
The warning, released in early 2026, notes that many of the most downloaded and top-grossing applications in the United States are maintained by foreign entities. The FBI states that apps maintaining digital infrastructure in China are subject to extensive national security laws, which may enable the Chinese government to access user data.
Data Collection and Permission Risks
The FBI alert emphasizes that users should be cautious about the specific data permissions these applications request upon download. Once a user permits access, an app can persistently collect private information throughout the device, regardless of whether the app is currently active.
A significant concern highlighted by the bureau is the collection of contact lists. If a user grants permission to invite friends or contacts, developer companies can store personal information belonging to both the user and non-users in their address books.
- Names
- Email addresses
- User IDs
- Physical addresses
- Phone numbers of stored contacts
The FBI warns that this data can be used to build social graphs, which may be utilized by nation-state or mercenary hackers to socially engineer attacks on high-value targets.
Storage and Legal Implications
The bureau notes that privacy policies for some of these apps state that collected data, including system prompts and personal information, is stored on servers located in China for as long as the developers determine is necessary.
The apps’ privacy policies list where the collected data, including personal information and system prompts, is stored. Some of the apps state that the collected data is stored on servers located in China for as long as the developers deem necessary.
FBI Public Service Announcement
The FBI explains that these risks are tied to Chinese national security laws that mandate developers based in China support national security imperatives, which includes the sharing of data.
Impacted Applications and Mitigation
While the FBI did not name specific companies in its official announcement, reporting indicates the warning applies to a range of widely used apps developed by Chinese firms. Examples of such apps include the video-editing platform CapCut, shopping applications Temu and SHEIN, and the social media platform Lemon8.
The FBI suggests that some apps offer a local version that can be downloaded directly to the device. Running queries locally rather than using a cloud-based version may prevent the transfer of data to China or a third country.
However, the bureau also warns that some platforms do not allow users to operate the service unless they consent to data sharing.
The alert clarifies that these concerns are global, although the impact is particularly noted among the high volume of foreign-developed apps frequently used within the United States.