【eroticism in persian art】

The eroticism in persian artapps and online services you use sometimes gather your data and use it for analytics or advertising purposes. There's no question about that. It's a fact of life at this point. And it's only a matter of whether you've been asked permission, whether your data is used fairly and in accordance with the law, and whether it's transferred and stored securely.

But a recent report by TechCrunch claims some popular iPhone apps fail on at least two counts. Apps from companies like Air Canada, Hollister, Expedia and Hotels.com record everything you do on your phone's screen while you use them -- often without asking for permission.

These apps, TechCrunch has found (with the help of analytics company App Analyst), use technology from a company called Glassbox, which creates so called "session replays," letting app owners see exactly how their customers behave while using the app.

App Analyst's experts took a peak at how some of these apps are sending this data, and found that not all of them properly masked sensitive data such as passwords. In the case of Air Canada's app, there was an instance in which the app sent the customer's credit card information completely unencrypted. TechCrunch says none of these apps ever warned the user it's even recording their actions in the first place, nor do they mention it in their privacy policies.

Glassbox doesn't exactly hide what it does. The company's Twitter bio states the following: "Imagine if your website or mobile app could see exactly what your customers do in real time, and why they did it? This is Glassbox."

In a recent tweet, Glassbox boasts about signing a deal with Air Canada, one of the apps TechCrunch has found to be among the worst offenders.

This Tweet is currently unavailable. It might be loading or has been removed.

Air Canada told TechCrunch that it is indeed collecting "user information entered in, and collected on, the Air Canada mobile app." The company does this, its spokesperson said, to "ensure we can support their travel needs and to ensure we can resolve any issues that may affect their trips.”

A Glassbox spokesperson pointed out to TechCrunch that it "cannot break the boundary of the app," but it did say it has a "unique capability to reconstruct the mobile application view in a visual format," which it calls "another view of analytics."

It's not the first nor the only company to provide a similar service; Android-focused Appsee does something similar. and it, too, was found to be used in a way that's not always transparent for users.

Most companies will say, when asked, that they're only using your data to improve your experience. But even if their intentions are pure, they should still disclose exactly what they're doing and take every measure to protect your data. This does not appear to be the case here.

UPDATE: Feb. 8, 2019, 9:41 a.m. CET "Glassbox and its customers are not interested in “spying” on consumers. Our goals are to improve online customer experiences and to protect consumers from a compliance perspective. Since its inception, Glassbox has helped organizations improve millions of customer experiences by providing tools that record and analyze user activity on web sites and apps. This information helps companies better understand how consumers are using their services, and where and why they are struggling," a Glassbox spokesperson told Mashable. The company pointed out that "no data collected by Glassbox customers is shared with third parties, nor enriched through other external sources" and that it "meets the highest security and data privacy standards and regulations." Finally, Glassbox says it provides its customers with "with the ability to mask every piece of data entered by a consumer, restrict access to authorized users, and maintain a full audit log of every user accessing the system."