Firm can monitor keystrokes on many smartphones

LOS ANGELES — A little-known California software company that can monitor every keystroke that consumers make on many popular smartphones struck back at critics who accused it of violating customers’ privacy, saying it doesn’t record or store users’ private messages.

The company, Carrier IQ Inc. in Mountain View, Calif., found itself in the middle of a national privacy furor this week after an amateur security researcher posted a video purporting to show its software logging every key press, as well as the content of text messages and search engine queries.

Consumers, politicians and privacy advocates quickly sought to learn how the company had gained near-total access to users’ private data on 140 million mobile phones, including many popular devices from AT&T Inc., T-Mobile USA and Sprint Nextel Corp.

ADVERTISEMENT
0 seconds of 0 secondsVolume 0%
Press shift question mark to access a list of keyboard shortcuts
00:00
00:00
00:00
 

“What is true is that there’s a huge amount of information available to us on the device,” Andrew Coward, Carrier IQ’s vice president of marketing, said Friday.

“But capturing keystrokes and (text) messages, email, audio and video is not what we do, and we’ve been absolutely adamant that we don’t do these things,” he said.

Mobile security professionals said the video made by security researcher Trevor Echkart, 25, of Connecticut did not prove Carrier IQ was transmitting and storing users’ every move. But that didn’t relieve concerns.

“A company no one’s ever heard of having the capacity to look at everything you do on your mobile device is a reason to be nervous,” said Justin Brookman, the director for consumer privacy at the Center for Democracy and Technology.

“This is highlighting that when people buy a smartphone, it’s not just one company they’re dealing with that has access to their data, but possibly dozens,” Brookman said.

According to a promotional document on Carrier IQ’s website, the company’s software can “capture a vast array of experience data including screen transitions, button presses” and “device feature usage, such as camera, music, messaging, browser and TV.”

In a test of an Android smartphone from Sprint, an application from Carrier IQ lists that it is able to access “your personal information,” ”your messages” and “your location,” as well as “intercept outgoing calls” and “read contact data.” There is no clear way for users to stop the application or opt out of the data collection.

The company has acknowledged that it collects a wide variety of smartphone usage data on behalf of carriers and phone manufacturers, but says reports about its data collection have been overblown.

Coward acknowledged that the company had developed software to “count” how many times specific buttons are pushed — including the power button — in order to help carriers understand how customers are using devices.

He said, however, that the key-press counting feature had been advertised to clients but was not yet present in current smartphones.

T-Mobile, AT&T and Sprint acknowledged that they used Carrier IQ’s software to collect information about customers’ phone use and to improve service quality. Verizon Wireless, the largest U.S. wireless provider, said its phones do not use Carrier IQ.

Apple Inc. said its iPhone and other devices had used Carrier IQ software but had stopped supporting it recently. It planned to remove the software in a future update to user devices. Apple said it had never recorded user keystrokes.

Sprint and AT&T said the data collection was in line with their privacy policies, which note that they may employ other companies to help collect and analyze customer usage data.

Suspicion about Carrier IQ’s practices and the wireless providers’ involvement has generated outcry from privacy advocates and politicians.

Advocacy groups such as Free Press in Washington, D.C., and Consumer Watchdog in Santa Monica, Calif., called for congressional and regulatory probes into Carrier IQ. And on Friday, Rep. Ed Markey, D-Mass., asked the Federal Trade Commission to investigate the company. Sen. Al Franken, D-Minn., sent the company a letter requesting information about its data collection practices.

Consumers in Missouri and Illinois on Thursday filed class-action lawsuits against Carrier IQ, as well as against smartphone makers Samsung Telecommunications America Inc. and HTC Corp., which use the software.

The suits allege that the companies violated federal wiretap laws by “unlawfully intercept(ing) private electronic communications emanating from private mobile phones, handsets and smartphones.”

Carrier IQ declined to comment on the lawsuits.

The uproar started in mid-November after Eckhart posted information and documents about Carrier IQ’s application on smartphones and called the software a “rootkit” — a term generally used for malicious software that embeds itself deep in a computer system to monitor, record or alter what users are doing.

The company immediately sent a cease-and-desist letter to Eckhart, accusing him of violating copyright law by posting the documents without permission and demanding that he remove the materials and retract “unsubstantiated allegations” about the company’s practices.

Soon after, the online legal advocacy group Electronic Frontier Foundation said it would represent Eckhart in the matter. The foundation said Carrier IQ’s allegations against Eckhart were “entirely baseless” and were “motivated by a desire to suppress Mr. Eckhart’s research conclusions, and to prevent others from verifying those conclusions.”

Two days later, Carrier IQ withdrew its cease-and-desist letter to Eckhart and apologized.

Eckhart did not respond to multiple requests for comment.

Talk to us

> Give us your news tips.

> Send us a letter to the editor.

> More Herald contact information.

More in Local News

Everett Historic Theater owner Curtis Shriner inside the theater on Tuesday, May 13, 2025 in Everett, Washington. (Olivia Vanni / The Herald)
Historic Everett Theatre sale on horizon, future uncertain

With expected new ownership, events for July and August will be canceled. The schedule for the fall and beyond is unclear.

Contributed photo from Snohomish County Public Works
Snohomish County Public Works contractor crews have begun their summer 2016 paving work on 13 miles of roadway, primarily in the Monroe and Stanwood areas. This photo is an example of paving work from a previous summer. A new layer of asphalt is put down over the old.
Snohomish County plans to resurface about 76 miles of roads this summer

EVERETT – As part of its annual road maintenance and preservation program,… Continue reading

City of Everett Engineer Tom Hood, left, and City of Everett Engineer and Project Manager Dan Enrico, right, talks about the current Edgewater Bridge demolition on Friday, May 9, 2025 in Everett, Washington. (Olivia Vanni / The Herald)
How do you get rid of a bridge? Everett engineers can explain.

Workers began dismantling the old Edgewater Bridge on May 2. The process could take one to two months, city engineers said.

Smoke from the Bolt Creek fire silhouettes a mountain ridge and trees just outside of Index on Sept. 12, 2022. (Olivia Vanni / The Herald)
County will host two wildfire-preparedness meetings in May

Meetings will allow community members to learn wildfire mitigation strategies and connect with a variety of local and state agencies.

Helion's 6th fusion prototype, Trenta, on display on Tuesday, July 9, 2024 in Everett, Washington. (Olivia Vanni / The Herald)
Helion celebrates smoother path to fusion energy site approval

Helion CEO applauds legislation signed by Gov. Bob Ferguson expected to streamline site selection process.

Vehicles travel along Mukilteo Speedway on Sunday, April 21, 2024, in Mukilteo, Washington. (Ryan Berry / The Herald)
Mukilteo cameras go live to curb speeding on Speedway

Starting Friday, an automated traffic camera system will cover four blocks of Mukilteo Speedway. A 30-day warning period is in place.

Carli Brockman lets her daughter Carli, 2, help push her ballot into the ballot drop box on the Snohomish County Campus on Tuesday, Nov. 5, 2024 in Everett, Washington. (Olivia Vanni / The Herald)
Here’s who filed for the primary election in Snohomish County

Positions with three or more candidates will go to voters Aug. 5 to determine final contenders for the Nov. 4 general election.

Sound Transit approves contract to build Bothell bus facility

The 365,000-square-foot facility will be the heart of the agency’s new Stride bus rapid transit system, set to open in 2028.

One dead in Everett crash involving motorcycle and two vehicles

Police shut down the 10300 block of Evergreen Way in both directions during the multi-vehicle collision investigation.

Katie Wallace, left, checks people into the first flight from Paine Field to Honolulu on Friday, Nov. 17, 2023 in Everett, Washington. (Olivia Vanni / The Herald)
Executive order makes way for Paine Field expansion planning

Expansion would be a long-range project estimated to cost around $300 million.

A person pauses to look at an art piece during the Schack Art Center’s 50th anniversary celebration on Thursday, Oct. 10, 2024 in Everett, Washington. (Olivia Vanni / The Herald)
Everett to seek Creative District designation

The city hopes to grow jobs in the creative sector and access new grant funds through the state label.

Former Herald writer Melissa Slager’s new book was 14-year project

The 520-page historical novel “Contests of Strength” covers the 1700 earthquake and tsunami on Makah lands.

Support local journalism

If you value local news, make a gift now to support the trusted journalism you get in The Daily Herald. Donations processed in this system are not tax deductible.