A new report from the Tech Transparency Project has raised alarms over the security of private browsing apps on Apple and Google’s app stores. According to the report, more than a dozen virtual private network (VPN) apps have undisclosed connections to Chinese companies, putting user data at risk of exposure to the Chinese government.
The report, published on Thursday, reveals that 13 VPN apps on the Apple App Store and 11 on Google’s Play Store are tied to Chinese firms. Under Chinese law, companies are required to share user data with the government upon request, which poses significant privacy and security risks for American users.
Among the apps, several have connections to Qihoo 360, a Chinese cybersecurity firm that has been sanctioned by the U.S. government. Two of these apps appear on both app stores, and two are exclusive to Google Play. The Tech Transparency Project first flagged over 20 VPN apps with Chinese links in an April report, leading Apple to remove three apps associated with Qihoo 360.
Michelle Kuppersmith, executive director of Campaign for Accountability, criticized Apple and Google for allowing these apps to remain available despite previous warnings. “After being informed of this issue once already, Apple and Google continue to make many of these VPN apps available to Americans without warning them of the security risks,” Kuppersmith said. “It’s now fair to question whether the large profits Apple and Google make from their app stores have anything to do with this inaction.”
In response, Apple emphasized that it does not restrict app ownership by country. The company also highlighted its guidelines for VPN app developers, which prohibit disclosing data to third parties and require clear disclosure of the data collection process.
Google has yet to comment on the matter.
The concerns around Chinese companies gaining access to American user data are part of the broader debate over national security. This issue is central to the ongoing push to ban TikTok, a popular video-sharing app, or force it to sever ties with its China-based parent company, ByteDance. Despite a law mandating that TikTok either divest or face a ban, the app remains operational in the U.S. as the Trump administration continues to delay enforcement.
With a new deadline for TikTok set for June 19, reports suggest that another extension may be in the works.
