Researchers say a web browser loaded onto phones made by the Chinese company Xiaomi has been logging and exchanging users’ private data.
According to a report from Forbes, researchers testing a web browser loaded into the company’s phones found that it was monitoring nearly all of a users’ web activity like visited websites, search queries in Google, and even all that appeared in the phone’s new feed feature.
To make matters worse, Forbes notes that the researchers found that the monitoring continued even though the phone’s browser was in ‘incognito’ mode.
Beyond the browser, researchers also found that the phone registered what files were opened and what screens were swiped through.
All of the data was then sent to remote servers operated by the company in Singapore and Russia. The data collection also reached beyond those just who use Xiaomi devices according to researchers.
Forbes reports that Xiaomi also used the same practices in two web browsers available on the Google Play store, Mi Browser Pro and the Mint Browser.