Who cares if your personal and work email is forwarded to guests without your knowledge? Who really cares about data security? Apparently, after reading reviews of a very popular Android app, not many people do - or maybe they just don't care enough to be vigilant about the protection of their data.
I recently searched for an Android app for my Samsung Galaxy S3 phone to help my efficiency by automatically setting my phone profile settings based on my location. You may infer from this that I am accepting the fact that my GPS location is revealed to the app to perform its activities. I'm also allowing and aware that the app would modify my phone settings (volumes, wi-fi radio, etc.). I am willingly making these concessions for the sake of convenience and to improve my personal efficiency.
To my surprise, I found that one of the most popular and highly rated apps would access and send information from my phone not necessary to the proper function of the application. What caught my attention further is that over 8,500 users gave the application a rating of 4 or more stars (over 7,400 gave it 5 stars!).
Specifically, the following security privilege is granted to the application:
Read calendar events plus confidential information
Add or modify calendar events and send email to guests without owners' knowledge
What!? Are you kidding me? Who would download that application? Well, Google Play reports over 500,000 downloads of that application making it the most popular in that category.
I now ask the question: How many IT organizations are aware that this app resides on smartphones that are accessing company emails? Without a comprehensive mobile management system and a holistic approach to mobile device security, data is likely leaving the controlled IT environments and getting into the wrong hands.
Hmmm, I wonder if there is a software developer in a third-world country that is quiely making some very good buying and selling decisions of certain stocks. He/She is likely to also invest in MDM companies as well. It all comes full circle.