10个APP中7个会泄露你的个人信息你知道吗？

　　Our mobile phones can reveal a lot about ourselves: where we live and work; who our family, friends and acquaintances are; how (and even what) we communicate with them; and our personal habits.

　　手机可以泄露很多关于我们的信息：包括我们住在哪儿，在哪儿工作，我们的家人、朋友和熟人都有谁，我们怎么和他们沟通(甚至我们和他们说了些什么)，以及我们的个人习惯等等。

　　With all the information stored on them, it isn’t surprising that mobile device users take steps to protect their privacy, like using PINs or passcodes to unlock their phones.

　　由于所有的信息都储存在手机里，因此手机用户采取措施保护自己的隐私就不奇怪了，就像使用PIN码和密码来给自己手机上锁一样。

　　The research that we and our colleagues are doing identifies and explores a significant threat that most people miss: More than 70 percent of smartphone apps are reporting personal data to third-party tracking companies like Google Analytics, the Facebook Graph API or Crashlytics.

　　我和我的同事正在做的这项研究揭示、探讨了一个我们大多数人都没有意识到的重大威胁：超过70%的手机APP都会向第三方企业报告我们的个人信息，比如谷歌分析、Facebook图形API、以及Crashlytics等。

　　When people install a new Android or iOS app, it asks the user’s permission before accessing personal information.

　　当人们安装一个新的安卓或者iOS软件的时候，在访问个人信息之前会征求用户的同意。

　　Generally speaking, this is positive.

　　一般而言，这还是好的。

　　And some of the information these apps are collecting are necessary for them to work properly: A map app wouldn’t be nearly as useful if it couldn’t use GPS data to get a location.

　　而APP搜集的某些信息对它们的正常运作来说是必要的：比如说，如果地图APP不能使用GPS信息定位的话，那基本就没什么用。

　　But once an app has permission to collect that information, it can share your data with anyone the app’s developer wants to – letting third-party companies track where you are, how fast you’re moving and what you’re doing.

　　但是一旦一个APP被允许收集这些信息，那么它就可以和任何程序开发人员想要的人分享你的数据——从而使得第三方企业能够追踪到你在哪、你的移速是多少、以及你在做什么。

　　An app doesn’t just collect data to use on the phone itself.

　　而且APP还不仅仅只收集在手机上运转所需要的数据。

　　Mapping apps, for example, send your location to a server run by the app’s developer to calculate directions from where you are to a desired destination.

　　比如说，地图APP会把你的地点发送到开发人员运行的服务器中，从而计算出方向——不管你是想知道你在哪儿，或者是你想去哪。

　　The app can send data elsewhere, too.

　　但是这些APP也能发送数据到其他地方。

　　As with websites, many mobile apps are written by combining various functions, precoded by other developers and companies, in what are called third-party libraries.

　　与网页一样，许多移动APP的开发都是通过把各种功能结合到一起，使用由其他开发者和企业发布的预编码——即所谓的第三方代码库。

　　These libraries help developers track user engagement, connect with social media and earn money by displaying ads and other features, without having to write them from scratch.

　　有了这些代码库之后就无需从头编写软件，可以帮助开发者追踪用户的使用情况、与社交媒体连接、并通过发布广告和其他功能来赚钱。

　　However, in addition to their valuable help, most libraries also collect sensitive data and send it to their online servers – or to another company altogether.

　　然而虽然代码库提供了很有价值的帮助，但是它们也会收集敏感数据、并将其发送到在线服务器中——或其他的公司。

　　Successful library authors may be able to develop detailed digital profiles of users.

　　成功的代码库作者可以开发出详细的数字用户配置文件。

　　For example, a person might give one app permission to know their location, and another app access to their contacts.

　　比如说，用户可能会允许一个APP获取他的位置信息，而让另一个APP知道他的联系人信息。