Firm can monitor keystrokes on many smartphones

LOS ANGELES — A little-known California software company that can monitor every keystroke that consumers make on many popular smartphones struck back at critics who accused it of violating customers’ privacy, saying it doesn’t record or store users’ private messages.

The company, Carrier IQ Inc. in Mountain View, Calif., found itself in the middle of a national privacy furor this week after an amateur security researcher posted a video purporting to show its software logging every key press, as well as the content of text messages and search engine queries.

Consumers, politicians and privacy advocates quickly sought to learn how the company had gained near-total access to users’ private data on 140 million mobile phones, including many popular devices from AT&T Inc., T-Mobile USA and Sprint Nextel Corp.

ADVERTISEMENT
0 seconds of 0 secondsVolume 0%
Press shift question mark to access a list of keyboard shortcuts
00:00
00:00
00:00
 

“What is true is that there’s a huge amount of information available to us on the device,” Andrew Coward, Carrier IQ’s vice president of marketing, said Friday.

“But capturing keystrokes and (text) messages, email, audio and video is not what we do, and we’ve been absolutely adamant that we don’t do these things,” he said.

Mobile security professionals said the video made by security researcher Trevor Echkart, 25, of Connecticut did not prove Carrier IQ was transmitting and storing users’ every move. But that didn’t relieve concerns.

“A company no one’s ever heard of having the capacity to look at everything you do on your mobile device is a reason to be nervous,” said Justin Brookman, the director for consumer privacy at the Center for Democracy and Technology.

“This is highlighting that when people buy a smartphone, it’s not just one company they’re dealing with that has access to their data, but possibly dozens,” Brookman said.

According to a promotional document on Carrier IQ’s website, the company’s software can “capture a vast array of experience data including screen transitions, button presses” and “device feature usage, such as camera, music, messaging, browser and TV.”

In a test of an Android smartphone from Sprint, an application from Carrier IQ lists that it is able to access “your personal information,” ”your messages” and “your location,” as well as “intercept outgoing calls” and “read contact data.” There is no clear way for users to stop the application or opt out of the data collection.

The company has acknowledged that it collects a wide variety of smartphone usage data on behalf of carriers and phone manufacturers, but says reports about its data collection have been overblown.

Coward acknowledged that the company had developed software to “count” how many times specific buttons are pushed — including the power button — in order to help carriers understand how customers are using devices.

He said, however, that the key-press counting feature had been advertised to clients but was not yet present in current smartphones.

T-Mobile, AT&T and Sprint acknowledged that they used Carrier IQ’s software to collect information about customers’ phone use and to improve service quality. Verizon Wireless, the largest U.S. wireless provider, said its phones do not use Carrier IQ.

Apple Inc. said its iPhone and other devices had used Carrier IQ software but had stopped supporting it recently. It planned to remove the software in a future update to user devices. Apple said it had never recorded user keystrokes.

Sprint and AT&T said the data collection was in line with their privacy policies, which note that they may employ other companies to help collect and analyze customer usage data.

Suspicion about Carrier IQ’s practices and the wireless providers’ involvement has generated outcry from privacy advocates and politicians.

Advocacy groups such as Free Press in Washington, D.C., and Consumer Watchdog in Santa Monica, Calif., called for congressional and regulatory probes into Carrier IQ. And on Friday, Rep. Ed Markey, D-Mass., asked the Federal Trade Commission to investigate the company. Sen. Al Franken, D-Minn., sent the company a letter requesting information about its data collection practices.

Consumers in Missouri and Illinois on Thursday filed class-action lawsuits against Carrier IQ, as well as against smartphone makers Samsung Telecommunications America Inc. and HTC Corp., which use the software.

The suits allege that the companies violated federal wiretap laws by “unlawfully intercept(ing) private electronic communications emanating from private mobile phones, handsets and smartphones.”

Carrier IQ declined to comment on the lawsuits.

The uproar started in mid-November after Eckhart posted information and documents about Carrier IQ’s application on smartphones and called the software a “rootkit” — a term generally used for malicious software that embeds itself deep in a computer system to monitor, record or alter what users are doing.

The company immediately sent a cease-and-desist letter to Eckhart, accusing him of violating copyright law by posting the documents without permission and demanding that he remove the materials and retract “unsubstantiated allegations” about the company’s practices.

Soon after, the online legal advocacy group Electronic Frontier Foundation said it would represent Eckhart in the matter. The foundation said Carrier IQ’s allegations against Eckhart were “entirely baseless” and were “motivated by a desire to suppress Mr. Eckhart’s research conclusions, and to prevent others from verifying those conclusions.”

Two days later, Carrier IQ withdrew its cease-and-desist letter to Eckhart and apologized.

Eckhart did not respond to multiple requests for comment.

Talk to us

> Give us your news tips.

> Send us a letter to the editor.

> More Herald contact information.

More in Local News

Jennifer Humelo, right, hugs Art Cass outside of Full Life Care Snohomish County on Wednesday, May 28, 2025 in Everett, Washington. (Olivia Vanni / The Herald)
‘I’ll lose everything’: Snohomish County’s only adult day health center to close

Full Life Care in Everett, which supports adults with disabilities, will shut its doors July 19 due to state funding challenges.

(City of Everett)
Everett’s possible new stadium has a possible price tag

City staff said a stadium could be built for $82 million, lower than previous estimates. Bonds and private investment would pay for most of it.

The Edmonds City Council gathers to discuss annexing into South County Fire on Tuesday, Dec. 3, 2024 in Edmonds, Washington. (Olivia Vanni / The Herald)
Community group presents vision for Edmonds’ fiscal future

Members from Keep Edmonds Vibrant suggested the council focus on revenue generation and a levy lid lift to address its budget crisis.

The age of bridge 503 that spans Swamp Creek can be seen in its timber supports and metal pipes on Wednesday, May 15, 2024, in Lynnwood, Washington. The bridge is set to be replaced by the county in 2025. (Ryan Berry / The Herald)
Snohomish County report: 10 bridges set for repairs, replacement

An annual report the county released May 22 details the condition of local bridges and future maintenance they may require.

People listen as the Marysville School Board votes to close an elementary and a middle school in the 2025-26 school year while reconfiguring the district’s elementary schools to a K-6 model on Wednesday, Jan. 22, 2025 in Marysville, Washington. (Olivia Vanni / The Herald)
Marysville schools audit shows some improvement

Even though the district still faces serious financial problems, the findings are a positive change over last year, auditors said.

Outside of the Madrona School on Monday, Aug. 26, 2024 in Edmonds, Washington. (Olivia Vanni / The Herald)
Sewer district notifies Edmonds schools of intent to sue

The letter of intent alleges the school district has failed to address long-standing “water pollution issues” at Madrona K-8 School.

Cars drive along Cathcart Way next to the site of the proposed Eastview Village development that borders Little Cedars Elementary on Wednesday, May 7, 2025 in unincorporated Snohomish, Washington. (Olivia Vanni / The Herald)
Former engineer: Snohomish County rushed plans for Eastview development

David Irwin cited red flags from the developers. After he resigned, the county approved the development that’s now stalled with an appeal

Bar manager Faith Britton pours a beer for a customer at the Madison Avenue Pub in Everett. (Olivia Vanni / The Herald)
Burgers, brews and blues: Madison Avenue Pub has it all

Enjoy half-price burgers on Tuesday, prime rib specials and live music at the Everett mainstay.

WSU and Providence partner for Everett fellowship program

Two fellows per year will train at intensive care units in Providence Regional Medical Center Everett starting in 2026.

Ian Terry / The Herald

Rose Freeman (center) and Anastasia Allison play atop Sauk Mountain near Concrete on Thursday, Oct. 5. The pair play violin and piano together at sunrise across the Cascades under the name, The Musical Mountaineers.

Photo taken on 10052017
Adopt A Stream Foundation hosts summer concert on June 14

The concert is part of the nonprofit’s effort to raise $1.5 million for a new Sustainable Ecosystem Lab.

Izaac Escalante-Alvarez unpacks a new milling machine at the new Boeing machinists union’s apprentice training center on Friday, June 6, 2025 in Everett, Washington. (Olivia Vanni / The Herald)
Boeing Machinists union training center opens in Everett

The new center aims to give workers an inside track at Boeing jobs.

Edie Carroll trims plants at Baker's Acres Nursery during Sorticulture on Friday, June 6, 2025 in Everett, Washington. (Olivia Vanni / The Herald)
Sorticulture, Everett’s garden festival, is in full swing

The festival will go through Sunday evening and has over 120 local and regional vendors.

Support local journalism

If you value local news, make a gift now to support the trusted journalism you get in The Daily Herald. Donations processed in this system are not tax deductible.