Well this isn't a great look — but there's an explanation.
A concern from earlier this year over how much data OnePlus has been collecting has resurfaced this week, pointing to the fact OxygenOS on all recent OnePlus phones keeps track of all sorts of information on the phone and sends it back to the company. Despite this being something that's been happening for some time on OnePlus phones and that's several months since first being discovered, users have just now been reminded of it and are (rightfully) concerned over just how much is being collected and what's being done with it.
OnePlus, just like any other phone manufacturer, collects information on how your phone is being used, what apps are installed, and what issues may arise — and it's often tied to that phone and your user account in particular. The report from earlier this year clearly shows how a OnePlus phone (a OnePlus 2 in this case) was collecting how long apps were used for, what Wi-Fi networks were being connected to, the phone's associated user account and much more. It was sending the data back to OnePlus as well — and mostly for good reason, as it helps OnePlus improve its software and help with customer support should the need arise.
When asked for a comment on the matter, OnePlus responded with exactly as we'd expect:
We securely transmit analytics in two different streams over HTTPS to an Amazon server. The first stream is usage analytics, which we collect in order for us to more precisely fine tune our software according to user behavior. The second stream is device information, which we collect to provide better after-sales support.
While it may seem like a massive treasure trove of information that shouldn't be leaving the phone, this sort of diagnostic and usage data is collected routinely, with rare exception, on smartphones. In this case, some of the data collection can actually be turned off. The first "stream" of information, which includes things like which apps are installed and how the software is used, can be disabled by going to Settings, Advanced and turning off "Join user experience program." The second "stream" cannot be turned off, as is typical on phones.
Now the fact that this wasn't something that was clearly explained to the user during setup or even in the settings where you turn it off is something that's worth being a bit upset about. As is the fact that personally identifiable information like user accounts and IMEI numbers are being tied to the data, as shown by the research. But OnePlus is hardly alone in what it's collecting from its phones, and the core issue of the data itself being collected isn't something we should be surprised or alarmed by — and taking OnePlus as its word, it seems to be handling the data appropriately as well.
Reader comments
OnePlus responds to OxygenOS data collection concerns
The thing many members here (and apparently OnePlus management themselves) don't realize is, many countries (ie: USA, Canada, the EU, among others) have strict laws requiring OPT-OUT options covering data collection and usage.
OnePlus seems to have forgotten these requirements (on purpose or by accident) with regard to a SECOND (previously undisclosed) data stream that was also being collected/used, and sent to Amazon servers, and which DID NOT have an Opt-Out option , as required by law.
In my opinion, OnePlus will pay dearly for this omission.
Alert:::::: mods are acting like liberals..... removing$hit they don't like. You will create your own demise...
Alert -- Russian being a douchenozzle
Eh, I get what they're saying, but the best practice is opt-in, not opt-out. Most people would next through it anyways. Would be nice if they explained what "The second stream is device information, which we collect to provide better after-sales support." entails.
Yeah I agree data collection is really nothing new, I trust Oneplus they are working hard to keep up a good rep.
Data collection has been around for numerous years. This is nothing new.
Analytics have been around for years.
There has been third party developers that make such tools for awhile - that you could insert into your application. Those that I have known of - admittedly more than a couple of years ago - and I'm being polite in that - were basically non evasive - looking for errors when the application was running. The introduction of analytics being deployed on any users computer or device was a developers dream - they could get feedback on what was working and what wasn't. This was a better alternative than of communicating through email or phone support.
Evidently things have broaden in the mobile world - including analytics. Shocking? No.
Enter the new AI age; which by the way - will use analytics to refine the AI on a personal level to a particular device. This is where all of the major players are going.
That's why finding a eco system you trust is important.
And I'll beat the dead horse again - frequent security updates - and OS updates - are important. I would prefer all OEMs to provide such a service.
- rant over -
All smartphone manufacturers collect user data of some kind, and use it either for the betterment of their support, or to understand user behavior. There's nothing wrong about it. The only concern is that all of this is being done without user being notified. But wait, how's Google making money? Is that not through data monetization? When Google can collect your data, and use it, why can't others do that?
In this world of smartphones, user data is no more personal. The services that you're being offered are in exchange to your personal data. Understanding that will make lives easy.
Agreed.
I don't understand why you basically gloss over the actual issues here, which are that they didn't make this clear and the data is not anonymous. It's pretty obvious that's why people are upset, so I don't see why you relegated those two serious issues to a sentence or two in the last paragraph. We all know other companies collect data like this, it's the disclosure and how they are gathering and storing it that is the issue. Not sure why this article attempts to brush the actual issue under the rug.
Wait, you just told screenplayhouse it was made quite clear. So which is it? Quite clear or glossed over?
Read my comment again, I know you can do it. My issue with the article is that the author makes it about how all companies do this, which ISN'T the issue. He knows it's not the issue, but that is what he chose to focus on. He does lay it out pretty clearly, but in the last paragraph over the course of two sentences or so. It is disingenuous article that does very little to address the actual issue.
The ball that got this all rolling is some mystery man named Chris Moore. Am I right in thinking he's magically found a common smartphone practice and little else? Please someone explain to me how OnePlus is different in this? No, seriously -- no snark intended. What's the big deal?
On a side note -- some interesting racism in the comments above.
The article actually spells it out pretty clearly.
See how you avoided answering my question? It sure sounds like a bigger deal when you see the list of stuff OnePlus collects, the servers it's served to, all the code -- LIONS AND TIGERS AND BEARS, OH MY!
But when asked the big question of -- no, seriously, explain to me the big deal -- it comes down to two things --
1. The data collected is typical by many other phones and tech companies -- but the data isn't anonymous
2. Users weren't being notified that this was happening
Okay. As a OnePlus user I have no interest in being an apologist. Please note I'm also someone who recently intentionally bought a new Vivomini PC that doesn't come with a mic or camera (so that there's no way for Cortana to listen or watch me --
1. The data not being anonymous isn't a big scary problem. Per se. "OMG! OnePlus knows which phone I bought!" Umm, yeah? They knew it when you purchased it. Google knew it when you logged into it. Have you ever said to anyone, "Where can I buy a smartphone that has no idea who I am?" Does such a phone exist?
And if OnePlus knows your name and phone serial number and IMEI -- sooooo what? "Why my phone could be spoofed somewhere somehow!!!!" Calm down. They already knew the second two, right? My Firefox browser KNOWS my login info to Amazon and could treat itself to all sorts of things. Right? Every time you use a credit card at a store 'they' 'know' all sorts of things about you. Right?
I don't know. I'm looking up but I don't really see the sky falling.
2. Users not being notified. Yeah. Right. Umm... you know those things we sign before we install new software? Those short novels of info we never read? Would you be much happier if OnePlus forced those upon people instead? You'd have the same result. Nearly all users blissfully unaware of what was just 'disclosed' to them.
Again -- this is why I asked specifically what was so terribly wrong. I'm not saying I love this but we live in a world where people are actually stupid enough to buy those Amazon/Google mics that listen to you all damn day. But OnePlus is the problem?
Codius layed it out fairly well below... It basically boils down to them not putting an EULA with a tick box in the setup process.
Also, I didn't notice any racism in the comments as of this writing... The first comment is unfortunately but unsurprisingly a little xenophobic, but that seems to be the only one.
The real truth is, anyone that is concerned about having their information taken should never touch a cell phone, computer, or sign up for any online account for any reason whatsoever. Learn to live with it because it will happen regardless if you want it to or not.
Come on, People! The God called Google also collects your life's data. Its not just OP. Just get over it.
Exactly. And your ISP, and everybody else who wants it. You can't put a tracker in your pocket and then whine that you're being tracked. Well duh lol.
It's not the same thing. That's OK, you can shill your data to the Chinese, my life is worth more than that.
So basically... a released statement to slow the bad PR they've gotten in the past several hours? Not sure I trust that explanation they gave, them being them and all.
They released a statement to give people information on the situation so they don't have to speculate so much.
Exactly.
Any of these companies that sell their phones at cost have to make it up somehow. I guarantee there is more to dig up than what is provided in One plus' statement. Thanks, I will pay a hundred or two more to avoid this garbage.
I also wonder if some of this analytics data was used to help OnePlus figure out the issue that had affected 911 calling in some areas back when the OnePlus 5 was launched.
Almost certainly, it was likely invaluable.
Doesn't really make it ok that they collected it without notifying users though.
Unless you hit next next next next like a dumb when you set up your phone from scratch, you ARE notified. But lazy people know just to cry on forums
Dont think they use collected data for these bugs( 911 bug was due to some carrier changes or something) but rather to get user usage of apps and the memory this usage uses, in order to make their software lag, glitch,crash -less. And btw, you cant hide your data from anyone on the internet, unless you are not using it at all. Also, its not like they get you data that you are using tinder,pornhub and stuff like this and you family and girlfriend finds out. Or you are working on nasa or something else and they steal your work stuff. Ffs
Hang on, doesn't Facebook, Google etc do exactly the same thing? And if the data is encrypted then what's the big deal? FWIW I have the OnePlus 5 and whilst it's not perfect (ho-hum design) it's a damn good device for the price, which is about half of an equivalent Android flagship from Samsung or Google in Australia. TBH there's so much data mining going on by other tech companies I don't get the hate OnePlus is getting (especially over at Android Police).
I don't think people are singling out OP on this, Google, Apple, MS, etc all get their fair share of hate. I tend to think people are getting tired of it though.
I simply don't trust this company with my info. Don't care how they respond.
Just a gut feeling.
Why does this article sound like they're excusing the behavior?
"Everyone else is doing it so oh well, just accept it and move on, nothing to see here..."
Sure, other phone manufacturers do it, but it doesn't make it okay. Also, saying they do it 'securely' doesn't make me feel any better about it either. Luckily, there is a way to turn it off using adb shell.
Also, Librem 5 cannot come soon enough.
It not excusing only this company but this practice. On the other hand it doesn't matter what company you buy your phone from since they ALL do this.
Of course they will respond like that.
I had the first 2 phones put out by these joker's....never again. POS phones.
#neveragain
Again, I'm not sure how this is what you got out of this article. The data collection is completely standard practice. The only issue is how it was named/explained to users — not something other companies are particularly good at either.
Further, the "Join user experience program" was already off by default on my OnePlus 5. So no big deal I would say.
You would be wrong. Two OnePlus 5's and one 3T in my immediate family and we are all very satisfied. Coming from various other phones. But whatever lol
Oooh. Forgot my OnePlus one that is still running like a champ too. POS they are not.
The 3/3T and 5 certainly aren't. They're phenomenal. I'm gonna
Be using my 3T for atleast another 6 months to a year.
Bla1ze, unfortunately you've nailed it.
This is the problem with Chinese phones. Attractive price for the hardware but at the risk of not only bad after sales support but spying like this. Perhaps custom ROMs are the only way to go with these phones?
Did you even read the article tho?
That's not the commenting order nowadays.
Bada bing bada boom!
BIG badda boom.
Lol unfortunately you're bang on. Read the article? Ain't nobody got time for that.
Upvote for "The Fifth Element" reference...
Perhaps if your site didn't have so many garbage ads, more people might stick around long enough to read the whole article.
OR...just do not comment. Reading is fundamental (I read somewhere).
Adblock all the things!
Like you just did, right?
so, you are worried about Chinese ??!!
How about, OnePlus (just like most of the OEMs) using "secure" Amazon servers? Maybe secure from a 12 yr old hacker, but Bezos has a 600 million contract with CIA. That's how secure is your info. Just think what benefits China has on knowing your usage. They ain't gonna come knocking on your door for sure. But one day , the men in Black may, with that Habeas Corpus cut in pieces , trashed in front of you. That's what you should be worried about.
Some of us don't want anyone (not particularly the Chinese) recording our usage statistics without permission or a warrant. With Chinese phones in particular, there are known issues and previous precedents that were very alarming. That all being said, the comment above was left by someone who clearly didn't read the article.
More so with no way to opt out ....