FBI Warns of Data Risks from Foreign-Developed Apps

The FBI has issued a new alert warning that Americans’ personal data may be collected and stored overseas, potentially even if they have never downloaded a foreign-developed app themselves. The concern is that information such as names, email addresses, or phone numbers could be obtained from a friend’s or family member’s contact list if an app accesses their device.

This warning comes after years of focus on TikTok’s connections to China, with the alert indicating that risks extend beyond a single app to various foreign-developed platforms. The FBI emphasized that many popular apps developed outside the U.S., especially those linked to China, could access extensive data if permissions are granted. This includes address book details of both app users and non-users.

The bureau noted, “Developer companies can store collected data on users’ private information and address books, such as names, email addresses, user IDs, physical addresses, and phone numbers of their stored contacts.”

Examples of widely used apps by Chinese firms that may fall under this warning include CapCut, Temu, SHEIN, and Lemon8. These apps are among the most downloaded in the U.S. Concerns have been ongoing that data collected by Chinese-linked apps might be used to compile detailed profiles of Americans. It could also map networks and potentially aid intelligence operations under China’s national security laws.

The FBI pointed to signs that an app might be collecting excessive data, such as unexpected battery drain, increased data usage, or unauthorized account activity after installation. These could indicate background data collection or other suspicious behavior. Users are advised to limit unnecessary data sharing, only download from official app stores, and routinely check permissions granted to apps. Downloading apps from unofficial sites presents additional risks, as they may contain malware designed to access personal data unauthorizedly.

Following previous scrutiny, TikTok’s Chinese parent company agreed in 2026 to transfer control of U.S. operations to an American-led group due to national security concerns related to data access. The Chinese embassy was unable to provide immediate comment regarding this new FBI alert.