Date: June 12, 2025
By: Shira Ovide (The Washington Post)

Meta (the parent company of Facebook and Instagram) has once again been exposed for violating user privacy—this time using a sneaky backdoor in Android devices to track users’ web activity without their consent.
What Happened?
Researchers recently discovered that Meta was using a tool called Meta Pixel to go beyond its typical tracking behavior. Normally, this tool logs website visits for ad targeting. But in this case, Meta’s apps were secretly reconnecting with users’ devices in a way that mimicked malware.
The behavior was so shady that even experts in online privacy were shocked. DuckDuckGo’s Product Director, Peter Dolanjski, called it “a gross violation of people’s basic expectations.”
Even Google, the maker of Android, was unaware. When the findings were published, Meta claimed to have stopped the practice and said it was working with Google on a supposed “policy misunderstanding.” Russia-based tech firm Yandex was also found using similar tactics.
How Bad Was It?
The researchers from Radboud University (Netherlands), KU Leuven (Belgium), and IMDEA Networks (Spain) found that both Meta and Yandex bypassed Android’s built-in privacy protections. Their apps tracked user activity across the web—something that’s explicitly against Android’s design principles.
To be clear:
This wasn’t an ordinary tracking script.
It was closer to malware, violating security norms.
Google acknowledged it “blatantly violates” Android’s privacy standards.
Are iPhones Affected?
As of now, there’s no evidence of similar behavior on Apple devices. However, researchers noted that such tactics might be technically possible on iPhones too. Apple declined to comment.
What Can You Do?
While you couldn’t have prevented this specific intrusion, you can take steps now to better protect yourself:
1. Stop Using Google Chrome
Switch to privacy-focused browsers like Brave, DuckDuckGo, or Firefox. These block many common tracking tools. Chrome is the least private option among major browsers. 2. Use Websites, Not Apps
Whenever possible, access services through their websites rather than installing their apps. Websites are more restricted in how they track you.
3. Delete Meta and Yandex Apps
If you have Facebook, Instagram, or Yandex apps installed—remove them. These apps can access far more data than their websites, including your location, battery status, and even other connected devices on your home Wi-Fi.
4. Set Privacy-Focused Apps as Default
On Android, you can make Brave or DuckDuckGo your default browser. On Apple devices, Safari offers decent privacy—but it’s still wise to stay cautious.
Final Thoughts
Meta has a long history of privacy controversies—but this latest stunt shows they’re still finding new ways to exploit user data. Stay informed, protect your devices, and don’t assume big tech companies have your best interests at heart