Last week, Xiaomi was accused of collecting data via Mi Browser even while the Incognito Mode is enabled. And now Xiaomi has updated both Mi Browser as well as Mint Browser with enhanced privacy options. The new update gives users the option to turn off data collection when in incognito mode.
A couple of days back a report surfaced online stating that Xiaomi is collecting and sending data from users device via Mi Browser to remote servers operated by Alibaba.
Cybersecurity researchers Gabriel Cirlig and Andrew Tierney with the help of Forbes cybersecurity analysts started to research. Gabriel Cirlig noted that his Redmi Note 8 was sending data from his phone to remote servers by Alibaba.
As per the research conducted by the team, they found it to be true and the Browser was collecting data like web history, viewed content on Xiaomi’s Newsfeed, etc even when the incognito mode was enabled.
The data were found to be encrypted in base64 before sending it to the server. base64 is not that strong encryption and can be easily decoded to find user information.
Responding to this, Manu Kumar Jain said “Our user’s privacy and internet security are of top priority at Xiaomi; we are confident that we strictly follow and are fully compliant with local laws and regulations. We have reached out to Forbes to offer clarity on this unfortunate misinterpretation”.
He also told that all the data collected by Mi Browser and Mi Cloud are stored in AWS servers in the country itself.
After the update, here is what Xiaomi wrote in a blog post, “Given our goal of providing world-class secure services and products to all users, our next Mint Browser and Mi Browser software update will include an option in incognito mode for all users of both browsers to switch on/off the aggregated data collection, in an effort to further strengthen the control we grant users over sharing their own data with Xiaomi”.