Millions of smartphones send metadata to servers in Russia

Yandex
(Image credit: Yandex)

Web services provider Yandex has admitted that it stores user metadata in Russia-based servers, raising concerns that the government in Moscow could be able to track individual users via their smartphone.

Yandex has traditionally been positioned as a ‘Russian Google’, offering users a range of services like search, email, maps and an app store where users can download applications to their Android handset.

It also offers software development kits (SDKs) that allow other app developers to include certain functionality into their creations. One of these, AppMetrica, is widely used to help developers gather and analyze data for marketing purposes.

Yandex data 

However, security researcher Zach Edwards discovered that AppMetrics sends metadata, such as device, network, and IP address to Russia. This has been confirmed by four researchers contacted by the Financial Times.

Yandex told the newspaper that it did send data to both Russia and Finland, but stressed the information was anonymous and that no one in practice would be able to identify the user in question.

However, this view has been challenged by other observers, and has led to many applications uninstalling the SDK to in order to protect user privacy. It is thought AppMetrica is on 52,000 different applications on both iOS and Android, and that there has been more than 100 million installations.

Conversely, the SDK has been added to several applications, including those claiming to offer virtual private network (VPN) services and free calls, seemingly only to capture data to send back to Russia.

Russia’s invasion of Ukraine appears to have at least temporarily halted Yandex’s international ambitions and highlights the difficulties that Russian technology firms will have in the near future. The company, which is listed on the New York Stock Exchange, recently laid off workers at its robot and self-driving car divisions in the US, while Estonian ministers have suggested the Yandex Go taxi app be banned in the country.

Earlier this month, Mozilla removed Russian search engine providers Yandex and Mail.ru from its list of providers amid concerns that they prioritized misinformation over other forms of content.

Via Financial Times

Steve McCaskill is TechRadar Pro's resident mobile industry expert, covering all aspects of the UK and global news, from operators to service providers and everything in between. He is a former editor of Silicon UK and journalist with over a decade's experience in the technology industry, writing about technology, in particular, telecoms, mobile and sports tech, sports, video games and media. 

Read more
Vector illustration of the word Censored in a glitch distorted style
Google, Apple, and internet restriction – how Big Tech is making censorship "much worse" according to experts
Shape of Russia filled with Russian flag-colored internet codes on a black hacking background
A new wave of blocks in Russia targets VPN apps and Cloudflare subnets
Data breach
Privacy of millions worldwide compromised as huge data location broker got hacked
Outdoor photograph of a pair of hands holding a smartphone with navigator location points in the background
Millions of phone location records feared leaked as one of the biggest data leaks ever may be a whole lot worse
An AI face in profile against a digital background.
Worried about DeepSeek? Well, Google Gemini collects even more of your personal data
Fingerprint
Profit over privacy? Google gives advertisers more personal info in major ‘fingerprinting’ U-turn
Latest in Security
Data leak
Top home hardware firm data leak could see millions of customers affected
Representational image depecting cybersecurity protection
Third-party security issues could be the biggest threat facing your business
A stylized depiction of a padlocked WiFi symbol sitting in the centre of an interlocking vault.
Broadcom warns of worrying security flaws affecting VMware tools
Android Logo
Devious new Android malware uses a Microsoft tool to avoid being spotted
URL phishing
HaveIBeenPwned owner suffers phishing attack that stole his Mailchimp mailing list
Ransomware
Cl0p resurgence drives ransomware attacks to new highs in 2025
Latest in News
Hisense U8 series TV on wall in living room
Hisense announces 2025 mini-LED TV lineup, with screen sizes up to 100 inches – and a surprising smart TV switch
Nintendo Music teaser art
Nintendo Music expands its library with songs from Kirby and the Forgotten Land and Tetris
An image of Pro-Ject's Flatten it closed and opened
Pro-Ject’s new vinyl flattener will fix any warped LPs you inadvertently buy on Record Store Day
The iPhone 16 Pro on a grey background
iPhone 17 Pro tipped to get 8K video recording – but I want these 3 video features instead
EA Sports F1 25 promotional image featuring drivers Oscar Piastri, Carlos Sainz and Oliver Bearman.
F1 25 has been officially announced, with this year's entry marking a return for Braking Point and a 'significant overhaul' for My Team mode
Garmin clippd integration
Garmin's golf watches just got a big software integration upgrade to help you improve your game