FBI warns iPhone and Android users – don’t install these apps

This should be obvious – but unfortunately it isn’t. Some of the popular apps you download on your iPhone or Android smartphone are dangerous. And now the FBI is warning American citizens to stop all such installations.

The bureau’s new public service announcement addresses “data security risks associated with foreign-developed mobile applications (apps) often used in the United States; However, these concerns are universal. By early 2026, the most downloaded and top-grossing apps in the United States will be developed and maintained by foreign companies, particularly those based in China.”

More from ForbesDon’t make these calls on your iPhone, warns AppleBy Zak Doffman

The warning ties in with China’s notorious national security laws, which the FBI reminds smartphone users “potentially enable the Chinese government to access mobile app users’ data.” In short, the laws mandate China-based developers to do everything they can to support the country’s national security needs — including data sharing. It’s the same mandate that plagued TikTok before its US split.

The FBI says users should be aware of “what user data these apps request for access when downloading.” But in reality, these privacy policies are rarely checked. That’s why so-called permission abuse is such a nightmare for smartphone users. “When access is permitted by the user, the app can continuously collect data and users’ private information across devices.”

The data at risk includes contact lists, which could enable data collectors in China or elsewhere to build social graphs. In the wrong hands, these are invaluable to nation-states or hackers for hire, using a hack on an individual to socially engineer hacks on one or more high-value targets they know.

“Some platforms offer the option to invite friends or contacts to use apps. With default permissions, developer companies can store users’ private information and address books, such as names, e-mail addresses, user IDs, physical addresses, and phone numbers of their stored contacts.”

The FBI also warns that “some apps state that the collected data is stored on servers located in China for as long as the developers deem necessary.” And while there may be settings to prevent this data sharing, these are rarely used. “Some apps don’t allow users to operate the platform unless users agree to share data.”

The focus of this new PSA is the threat to user privacy, the bureau said, adding that these foreign-developed apps “may also contain malware that collects data beyond what the user has authorized. It may contain malicious code and hard-to-remove malware designed to exploit known vulnerabilities.”

More from ForbesGoogle releases Android update—40% of all phones now vulnerableBy Zak Doffman

Given the openness of this ecosystem and the prevalence of high-risk sideloading, Android has become a much bigger threat to iPhone users. That’s why Google is closing this risk – to an extent – at least with blocks on installations from unknown developers, many of whom will be based overseas. “Official app stores scan for malicious content, reducing the risk of malware or malicious code.”

The FBI tells smartphone users to:

• disable unnecessary data sharing;

• Download apps only from official stores;

• Change and update passwords regularly;

• Perform regular device software updates; and

• Read the Terms of Service or End User License Agreements before downloading.

This article was originally published on Forbes.com