Neon Call-Recording App Shuts Down Following User Data Breach
A new app called Neon has quickly gained popularity, climbing into the top five free iPhone apps shortly after its launch last week. The app allows users to record phone calls and earn money by providing the audio to train artificial intelligence models. However, Neon has temporarily gone offline due to a significant security flaw that exposed sensitive user data, including phone numbers and call recordings. The app’s founder, Alex Kiam, has acknowledged the issue but has not fully informed users about the breach.
Security Flaw Exposes User Data
The Neon app’s security vulnerability stemmed from its servers, which failed to restrict logged-in users from accessing other users’ data. TechCrunch conducted a test of the app and discovered that it could easily retrieve sensitive information, including call recordings and transcripts, from other users. By creating a new user account and utilizing a network analysis tool, TechCrunch was able to inspect the data exchanged between the app and its servers.
During the testing, the app displayed a list of recent calls and earnings, but the analysis revealed additional information that regular users could not see. This included text transcripts of calls and direct links to audio files, which were publicly accessible to anyone with the link. The investigation indicated that the servers could also provide metadata about other users’ calls, such as phone numbers, call durations, and earnings. Some transcripts suggested that users might be making lengthy calls to covertly record conversations for profit.
Immediate Shutdown of the App
Following the discovery of the security flaw, Kiam promptly informed users via email about the app’s temporary shutdown. He emphasized that user data privacy is a top priority and stated that the app would be taken offline to implement additional security measures. However, the email did not mention the specific security breach that had exposed users’ sensitive information.
The timeline for Neon’s return remains uncertain, and it is unclear whether the incident will attract scrutiny from app stores. Both Apple and Google have yet to respond to inquiries regarding the app’s compliance with their developer guidelines. This incident raises concerns, as it is not the first time an app with significant security issues has made it onto major app marketplaces.
Concerns Over App Store Oversight
The situation with Neon highlights ongoing concerns about the security of apps available on platforms like Apple’s App Store and Google Play. Recently, other popular apps, such as the dating companion app Tea, have faced data breaches that compromised user information. Additionally, well-known apps like Bumble and Hinge have been criticized for exposing users’ locations.
As the app marketplace continues to grapple with security challenges, it remains to be seen whether Neon will face repercussions from app store authorities. Kiam has not disclosed whether the app underwent any security review prior to its launch, nor has he provided information on whether user data may have been compromised before the flaw was identified. TechCrunch has also reached out to investors associated with Neon for comments, but no responses have been received at this time.
Observer Voice is the one stop site for National, International news, Sports, Editor’s Choice, Art/culture contents, Quotes and much more. We also cover historical contents. Historical contents includes World History, Indian History, and what happened today. The website also covers Entertainment across the India and World.
