Carrier IQ

Carrier IQ, the company that everyone -- for right or wrong -- has come to hate of late has released a document explaining in plain English how it does what it does. "Understanding Carrier IQ Technology -- What Carrier IQ Does and Does Not Do" was released on Carrier IQ's website late Dec. 12 and is a PDF that details what Carrier IQ is, how it's loaded on devices (and what kinds of devices it can be used on), what information is collected, how it can be used by Carrier IQ's customers, and how the data is protected in the process.

Let's break it down.

A few choice points

  • Carrier IQ maintains that it's a provider of diagnostic data, and "that having an effective solution requires that the software gather only the critical diagnostic information and do so in a manner that protects consumers’ information."
  • Carrier IQ has been used on feature phones, smartphones, data modems and tablets.
  • Data is uploaded from the device once a day, at about 200kb a pop. The carrier absorbs the charge for the data.

Carrier IQ is loaded onto the phone as one of three ways

  • Preload: Installed by the hardware manufacturer at the behest of CIQ's client -- the carrier, it's not considered a traditional app and is not easily removed by the consumer, but it only has access to data accessible through the system APIs.
  • Aftermarket: Installed as a typical application, after purchase of the phone. Can be deleted by the consumer.
  • Embedded: Installed using a specific API from Carrier IQ, and differs from Preloaded in that it can report radio signal information.

Explaining the video

Speaking on the now infamous video from Trever Eckhart, Carrier IQ says that while it can't comment on every manufacturer implementation of its product (really?) the company says it looks like a hook was left in place that allows the CIQ metrics being collected to be passed to the Android debugging software, which is exactly what we see in the video, and that it's possible for that to be turned off. 

CIQ also contends that just because something was visible in the debugging screen (and, again, they're working to get that turned off), it doesn't mean it was necessarily being collected and/or transmitted by Carrier IQ. Think of it as the difference between being able to see something versus seeing, remembering and then sharing with someone else.

CIQ also explains that, indeed, it's possible to collect URLs that are visited -- if it's part of the data collection profile that the carrier put into place. 

Unintended collection

CIQ's also come clean about some unintended data collection. Apparently while collecting signal information (ie what's going on with the network when you drop a call), it's possible that if you're on a call and you receive an SMS message, that SMS "may have unintentionally been included in the layer 3 signaling traffic that is collected by the IQ Agent." CIQ contends that "These messages were encoded and embedded ... and are not human readable," and that it's working with the carriers to make sure that information is no longer being collected. Only embedded versions of Carrier IQ had that problem.

Who owns the data?

Carrier IQ maintains that it has "no rights to the data that is gathered ... for any Carrier IQ customer." The servers that handle all of the data collection can be run by Carrier IQ, or by the carrier (or conceivably a third party). Carrier IQ says to its knowledge, it's never had a data breach.

The wrap up

There's more in the white paper regarding network analytics, and the entire thing is worth a read. You'll still have to come to your own conclusion about just how scary this whole thing is, and it's worth another mention that Carrier IQ doesn't exist in a vacuum. Carrier IQ is a customer of network operators -- the carriers you pay good money to every month.

And all that said -- we continue to believe that a simple disclosure and option to disable the analytics collection at initial startup would go a long way toward defusing this whole situation and restoring trust in Carrier IQ as well as in the carriers that hire its services.

Latest And Best Prime Day Deals

The Ring Alarm security system is reaching new low prices for Prime Day
Ring Alarm home security systems

Various configurations of the Ring Alarm are discounted to their best prices yet exclusively for Prime members at Amazon through Tuesday night to help keep your home secure.

The Sonos Beam Prime Day deal includes a $40 discount and 2 $50 Amazon gift cards
Sonos Beam Smart TV sound bar with 2 $50 Amazon gift cards
$359.00 $499.00 Save $140

That's just so much savings in one deal. You'll have to wait for the physical gift cards, but that's basically $100 to spend however you want.

Prime Day dropped this PlayStation 4 console bundle to just $250
PlayStation 4 Slim 1TB console with Marvel's Spider-Man and Horizon Zero Dawn
$249.99 $359.98 Save $110

This deal on the PlayStation 4 Slim console saves you $50 off its regular price while also including Marvel's Spider-Man and Horizon Zero Dawn Complete Edition for free. You'll just need an Amazon Prime membership to snag it.

The newest device in the Echo family, the Show 5, is now down to just $50
Echo Show 5
$49.99 $89.99 Save $40

It's only been on the market since May, but it hasn't escaped the Prime Day price cuts.

Amp up your home security with these huge Prime Day discount on nearly all Ring products
Save on Ring products today only

Whether you need a video doorbell, whole home alarm system, or some lights to brighten a dark area, Amazon has it all marked down today!

These huge price drops on the entire Galaxy S10 lineup might be one of the best Prime Day phone deals we'll see
Samsung Galaxy S10 128GB unlocked Prism Black Android smartphone
$599.99 $900.00 Save $300

We love the Galaxy S10, and we love deals. This combines two of our true loves in one!

Scour Amazon Warehouse's deals to save an extra 20% on tech and more through Prime Day
Extra 20% off Amazon Warehouse

Amazon Warehouse sells a myriad of items in varying conditions, from refurbished to open-box, used, warehouse-damaged, and more. It's a great place to snag a deal, and now Prime members can save an extra 20% off select items at checkout.

There's never been a better deal on the Ring Video Doorbell 2 than this pre-Prime Day offer
Ring Video Doorbell 2 (Certified Refurbished)
$89.99 $169.99 Save $80

Amazon is taking $80 off the certified refurbished Ring Video Doorbell 2, which lets you see and speak with visitors at your front door no matter where you are in the world.

More Prime Day Deals