Jio ‘s COVID-19 symptom checker leaks user data

-

Jio : As the outbreak of the crisis increased in India. Government looked for ways to protect its citizens. Companies in the meanwhile were looking for profitable opportunities to survive through the crisis. In the initial time of lockdown started developing apps and various websites for immediate symptoms, tracking general health of individual, and to detect yourself.

There are various apps and websites involved with similar features. Most of these COVID-19 symptom checkers works on the basis of asking people about their relevant information which is mainly health related. To begin with you are required to fill up your name, age and gender. Later about your health condition, travel history, distancing measures and if you or any of your family member have come in contact with a COVID-19 infected person or not.

Government app named Aarogya Setu is used to track any corona infected person near your surroundings along with the individual health. Earlier it had bugs and exposed some user related details of its users to Google’s YouTube.
And now similarly, Reliance Jio launched its coronavirus self-symptom checker in March as and when the lockdown was imposed to stop further spread of the virus. The checker allows anyone to check their symptoms from phone or Jio’s website to acknowledge their health condition.

But a security lapse occurred which was technically came into the knowledge of a security researcher Anurag Sen who gave the information to TechCrunch to notify the company. The system was pulled off once it came to the knowledge of the company but has no relevant information about who else accessed the databases of users.
Jio claimed that they took immediate action and explained that it was for the sole purpose of people doing a self-check to observe their health on a regular basis and that the serves was evaluating the performance of the site.

The user’s database contains thousands of logs and records till April 17. Each test which was taken is logged in the database and has maintained a record of who took the test such as self or relative, their personal details like age and gender. It also has the information about the operating system and browser version and can track user’s online activity which is as dangerous to the user as the virus. There are individual records maintained in the website of their details, signed up and created profile, health conditions and symptoms experienced. Few records also contains the location which was known by the longitude and latitude measurements and is highly used in cities like Mumbai, Pune along with in UK and North America.

 

Also read:- Government will provide 100% guarantee for small business loans