Instagram confirms Ghosty App has violated its terms
Facebook needs to improve more to protecting users’ privacy. It seems Cambridge Analytica exploiting the social network’s third-party APIs for unchecked data collection surely hasn’t helped. Now, Ghosty service has started to take advantage of Instagram’s API to create a stalker paradise. By crowdsourcing the data of all of its users’ Instagram accounts, it lets anyone view many private profiles.
As per AndroidPolice, “The promise of the app is sketchy from the get-go: Just share your Instagram login credentials with it to get access to many private accounts. The catch is that you have to invite at least one other person to the service to be able to view private profiles, which is how the app manages to constantly increase its pool of available content — if any of its users happen to follow a private profile, it just farms that account’s content. When we looked into the app, we managed to skip the invitation step though and were able to view at least one private profile, so it might only be required in a later phase after hooking new users.
Once someone has started using the app, it further shamelessly exploits their desire to access more private accounts and makes them pay for bundles or watch ads.”
The mentioned app has almost certainly breaking more than just one item from Instagram’s terms of service, and its against community standards of Facebook that exploits its users like this. In fact, people who signed up and invited other friends to join app could face consequences like bans when the company gets wind of it. Hopefully, Facebook will react soon and work on ensuring the privacy of anyone who decided to not make their account publicly viewable, even if that means vetting third-party access more rigorously
The presence and availability of Ghosty on the Play Store since April this year, and it has accumulated more than 500,000 downloads in that period. This should give it quite a huge data pool to work with, and it’s surprising neither Google nor Facebook have caught it so far.
Statement from Instagram
As expected, Instagram doesn’t approve of Ghosty’s misuse of its service. A Facebook company spokesperson provided the following statement:
Yes, this app violates our terms. This functionality has never been available through our API.
We will be sending a cease and desist letter to Ghosty ordering them to immediately stop their activities on Instagram, among other requests.
We are investigating and planning further enforcement relating to this developer.
The company also pointed to the relevant section of Instagram’s terms: “You can’t attempt to buy, sell, or transfer any aspect of your account (including your username) or solicit, collect, or use login credentials or badges of other users.”
Updated on 5:43 pm PKT | Mallahpost
Source and image courtesy: AndroidPolice