A new mobile application launched by the White House has drawn scrutiny from users and researchers who say it may collect location data and contain security weaknesses. The app was released on Friday and is presented as a direct communication channel between the public and the administration, offering breaking news alerts on government announcements, livestreams, and updates on policy developments. Despite its stated purpose, questions have emerged about the scope of data it collects and the permissions it requests from users.
Users on X have raised concerns about the app requiring access to a device’s location, shared storage, and network activity, though these claims have not been independently verified. The app’s privacy policy states that it automatically stores information including the originating Internet Protocol (IP) address along with other basic data. It can also retain names and email addresses provided by subscribers, though submitting that information is not mandatory to use the app.
On the app’s Google Play Store listing, it states that personal data including phone numbers and email addresses may be collected through download and use. Apple’s App Store listing directs users to the White House’s privacy policy rather than displaying its own data disclosures. Neither storefront currently shows the specific permission warnings that some users have flagged on social media.
A software developer using the handle Thereallo and a security engineer and infrastructure architect named Adam say they have identified code within the app suggesting it could access a device’s GPS for tracking purposes. While location access is common in many applications, Adam noted it is unusual to find such functionality in software that has no apparent need for it. He pointed out that the app contains no maps, local news, geofencing features, nearby events, or weather information — none of which would require location data.
Thereallo further claimed the app includes code that could enable device tracking approximately every 4.5 minutes when the app is running in the foreground and every 9.5 minutes in the background, though this has also not been independently verified. The researchers noted the feature still requires a permission grant from the user but warned that the tracking infrastructure is already in place and described it as only one step away from being activated. Cointelegraph has contacted the White House for comment on these findings.
Adam also raised concerns about the app’s overall security posture, suggesting it may be vulnerable enough for a technically skilled individual to intercept its data or alter its behavior. He said that anyone sharing a Wi-Fi network in a public location — such as a coffee shop, airport, or congressional hearing room — could potentially intercept the app’s API traffic using a proxy tool. He added that users with jailbroken devices could modify the app’s behavior while it is running, raising further questions about the integrity of data transmitted through it.
Thereallo separately noted that the app appears to collect additional data beyond location, including notification interactions, in-app message clicks, phone numbers, and the user’s state. The combination of these data points, alongside the identified security concerns, has prompted calls for greater transparency about how the app handles user information. The White House had not publicly responded to the specific technical claims at the time of reporting.
Originally reported by CoinTelegraph.
