# Mobile application and VPN privacy vulnerabilities

> Live situation record from CLSTR: https://clstr.news/situations/mobile-application-and-vpn-privacy-vulnerabilities
> Updated: 2026-09-02T00:49:32.000Z. Sources: 4. Developments: 2.

Research into mobile application security has identified significant privacy vulnerabilities regarding Android devices and VPN usage. An extensive study of over 17,000 Android applications found that while there was no evidence of smartphones constantly listening via microphones for advertising, several apps were capable of capturing screenshots and short videos of user activity. This visual data, which could include passwords or banking credentials, was transmitted to third parties without user notification.

Parallel investigations by Proton AG focused on mobile VPN applications in the United States, revealing that 85% of these apps contain advertising or analytical trackers. These trackers collect device identifiers, model types, network information, and sometimes GPS location data. 

Data flows from these trackers have been linked to international destinations including China, Russia, and Israel. Specifically, the investigation identified 64 Chinese companies among the studied applications, noting that 31 of these utilized shell companies in locations such as Singapore, Hong Kong, and the United Kingdom to obscure their origins. The findings highlight concerns regarding data access under Chinese domestic laws, following more than 3 million downloads of suspicious Chinese-made apps by U.S. users.

## Timeline

### 2026-09-02: Proton AG finds trackers in 85% of US mobile VPN downloads

A Proton AG study found that 85% of mobile VPNs downloaded in the US contain trackers collecting personal data, including GPS locations, with many linked to Chinese companies using shell entities.

2 sources. https://clstr.news/cluster/proton-ag-finds-trackers-in-85-of-us-mobile-vpn-downloads

### 2026-08-31: Mobile privacy research reveals Android screen capture and VPN tracking risks

Studies reveal Android apps can capture screenshots and videos without warning, while 85% of US mobile VPNs contain trackers that transmit user data to countries like China and Russia.

2 sources. https://clstr.news/cluster/mobile-privacy-research-reveals-android-screen-capture-and-vpn-tracking-risks

---
Cite as: Mobile application and VPN privacy vulnerabilities. CLSTR, https://clstr.news/situations/mobile-application-and-vpn-privacy-vulnerabilities