A recent shocking report from Forbes’s cybersecurity contributor and associate editor, Thomas Brewster, reveals that Xiaomi browsers are sending browsing data to Xiaomi-rented remote servers in Singapore and Russia.

Speaking to Forbes, Gabi Cirlig, a seasoned cybersecurity researcher, said he increasingly worried about his behavior being tracked on his new Redmi Note 8 phone. Cirlig found out that all of his web activities were tracked from web searches to even the websites he visited, independent of the used searched engine – even while using privacy-friendly DuckDuckGO, or in incognito mode.

The phone was also allegedly keeping tabs of all “the folders opened, to which screens he swiped, including the status bar and the settings page,” plus every item viewed on the News Feed feature, which is usually found in the Xiaomi’s custom MIUI Android skin.

Browser data collection is also allegedly done on several other phones as well running MIUI, including recent ones like the MI 10, Xiaomi Redmi K20, and Xiaomi Mi MIX 3, which run a similar browser code.

Andrew Tierney, another cybersecurity researcher, also dug into the matter and found more mind-blowing information. Even Xiaomi-owned browsers that are available on the Play Store – Mi Browser Pro and the Mint Browser – had similar behavior. Cirlig also claims Xiaomi’s music player app collected some data on his listening habits.

For a company that has quickly climbed to the top and claimed the “value” pricing crown unanimously across the industry, Xiaomi doesn’t think this is a problem.

The Chinese tech company says it encrypts the data first – using base64 encryption technology – and that this data is anonymized concealing user identity.

According to Cirlig, he was able to crack the encryption code in “just a few seconds.” On the anonymity part, Cirlig told Forbes that the collected data could be pinpointed at a specific user “very easily” since the company was also collecting “metadata” like device ID and Android version.

Xiaomi also termed the claims as “untrue.” On the other hand, the company admits that users’ browsing data is being collected, and users have consented to this. The company also argued about collecting data in incognito, although the two researchers had provided a proof-of-concept video showcasing that.

Xiaomi was also found pinging domains related to Sensors Analytics, a Chinese startup company, also called Sensors Data, which pitches itself as a “provider of an in-depth user behavior analysis.”

The Chinese company admitted having a relationship with Sensor Analytics but denied sharing any user data with them.

UPDATE: In a blog post, the company has further provided clarity how and when it collects user data and the types of data it collects. You can read more about that here.

Culled from techishdotke

US and Chinese never agree

like say Google and Facebook no dey collect data b4

old news
it was a mistake from xiaomi's programming dept.
they didn't program the browser well
Xiaomi has sent patches and fixes to solve this issue in less than 1 week after this issue was reported on twitter by Xiaomi users.
so this is old and outdated news.

SweetBuns:
old news
it was a mistake from xiaomi's programming dept.
they didn't program the browser well
Xiaomi has sent patches and fixes to solve this issue in less than 1 week after this issue was reported on twitter by Xiaomi users.
so this is old and outdated news.

mistake?? Exposing users to threats? Interesting

Melaninprincess:
mistake?? Exposing users to threats? Interesting

what's this one saying bayi?
if you have a fvcking point biko make it let's hear it
all phones have apps that collect your data and info
chrome
Facebook
twitter
Opera mini
every app that is used majorly is collecting data from people everyday.
what makes Xiaomi's own special? abi techno, infinix and itel too no day collect ni? all phone makers are guilty of this to a degree.

I believe you created this post just to slander Xiaomi. else, why would you single them out out of the many companies doing this?

Awon tecno marketer!!!!

is this what you want to use to bash xiaomi this cool afternoon??

the user data collected was only from thier browser and it was strictly to improve user experience!!

xiaomi went public to even question the source as to prove evidence of thier " misinformation "

TrollKiller:

what's this one saying bayi?
if you have a fvcking point biko make it let's hear it
all phones have apps that collect your data and info
chrome
Facebook
twitter
Opera mini
every app that is used majorly is collecting data from people everyday.
what makes Xiaomi's own special? abi techno, infinix and itel too no day collect ni? all phone makers are guilty of this to a degree.

I believe you created this post just to slander Xiaomi. else, why would you single them out out of the many companies doing this?

don't mind this guy!! I guess he wants to spoil xiaomi name

TrollKiller:

what's this one saying bayi?
if you have a fvcking point biko make it let's hear it
all phones have apps that collect your data and info
chrome
Facebook
twitter
Opera mini
every app that is used majorly is collecting data from people everyday.
what makes Xiaomi's own special? abi techno, infinix and itel too no day collect ni? all phone makers are guilty of this to a degree.

I believe you created this post just to slander Xiaomi. else, why would you single them out out of the many companies doing this?

Leave them.... They probably don't know Google and Facebook collects users data passively without your mobile data on