Thousands of popular apps, including Candy Crush and Tinder, may have been hacked to harvest users' location data, implicating rogue advertising industry members. This data, linked to apps from Gravy Analytics, shows extensive breaches through real-time bidding (RTB), allowing data brokers to access sensitive information without user or developer knowledge. The dataset reveals millions of device locations from various apps, including fitness and religious apps, raising privacy concerns and highlighting that many developers might remain unaware of such data exploitation.
https://www.wired.com/story/gravy-location-data-app-leak-rtb/