Delta Air Lines publishes privacy policy, but reseacher finds a fault

A security researcher has found that the Fly Delta application shares a hardware identifier, the UDID, with ad networks

Delta Air Lines quickly published a privacy policy for its mobile application on Friday after being sued by California's attorney general, but a privacy researcher has already found a fault with it and the app.

Ashkan Soltani, who was previously a staff technologist within the Division of Privacy and Identity Protection at the Federal Trade Commission, found that Delta's updated iPhone application reveals a unique device identifier (UDID) to third-party advertising networks, which is not noted in the privacy policy.

A UDID is a 40-character sequence of letters and numbers assigned to a piece of hardware, such as an iPhone or an iPad. Developers have used UDIDs for authentication and tracking purposes, but the practice is frowned upon as a potential privacy concern. In March, Apple stopped accepting iPhone and iPad applications for submission to the store that collect and share UDIDs.

Soltani analyzed Fly Delta using an application called MobileScope, that he and two other researchers, David Campbell and Aldo Cortesi, developed. MobileScope analyzes mobile applications to see what information the applications handle.

Soltani wrote on Twitter that Delta does not say in its privacy policy that it shares the UDID with third parties. He described the behavior as "silly."

California's lawsuit alleges that Delta violated the state's Online Privacy Protection Act for failing to include a privacy policy in its app, which has been distributed since at least October 2010. California Attorney General Kamala D. Harris has aggressively pursued companies this year to comply with the law, which is intended to give consumers more visibility over how their personal information is shared.

Delta could face a penalty of US$2,500 for each time a non-compliant mobile application is downloaded, the attorney general's office said. The application has been downloaded millions of times from Google's Play and Apple's iTunes application markets, according to the lawsuit.

Delta published an updated version of its application on Friday, noting in the update on Apple's iTunes store that Fly Delta now has a privacy policy.

Send news tips and comments to jeremy_kirk@idg.com. Follow me on Twitter: @jeremy_kirk

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection

Tags securitydata breachDelta Air Lines

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Jeremy Kirk

IDG News Service
Show Comments

Cool Tech

SanDisk MicroSDXC™ for Nintendo® Switch™

Learn more >

Breitling Superocean Heritage Chronographe 44

Learn more >

Toys for Boys

Family Friendly

Panasonic 4K UHD Blu-Ray Player and Full HD Recorder with Netflix - UBT1GL-K

Learn more >

Stocking Stuffer

Razer DeathAdder Expert Ergonomic Gaming Mouse

Learn more >

Christmas Gift Guide

Click for more ›

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Kurt Hegetschweiler

Brother PocketJet PJ-773 A4 Portable Thermal Printer

It’s perfect for mobile workers. Just take it out — it’s small enough to sit anywhere — turn it on, load a sheet of paper, and start printing.

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?