Zip News: Latest & Alerts

"We collect your device and network connection information... SDK/API/JS code version, IP address, platform, timestamp, application identifier, application version, application distribution channel, independent device identifier, iOS ad identifier (IDFA), Android ad master identifier, crash log, diagnostics, network card (MAC) address, and international mobile device identification code (IMEI) The equipment model, the terminal manufacturer, the terminal device operating system version, the location of the language, the time zone and the network state (Wi-Fi and so on), the CPU, and the battery use, screen resolution, memory usage, storage usage, SIM operator, SIM card country."

The app collects an extraordinarily broad range of device identifiers and hardware data including IMEI, MAC address, SIM operator, battery usage, CPU info, memory usage, and storage usage — far beyond what most apps need for core functionality.

"Location access, approximate location (network-based), precise location (GPS and network-based). We may collect location information about your device that you volunteer or enable through the App or your device to offer you news."

The app requests both approximate and precise (GPS) location access, ostensibly for news personalization, which is an unusually invasive permission for content delivery.

"Third-party SDKs integrated in our app may access your information, including: Google Advertising ID, Demographic data (e.g. determination of your IP address), Data to fight against fraud (e.g. click fraud in advertising), Data associated with your device (e.g. device type, technological information, country), Data to do advertising, marketing and analysis. Advertisers may store or read cookies. The information collected by third-party SDKs is governed by the providers of these SDKs and we have no control over such third parties."

The app integrates over 20 third-party advertising and analytics SDKs (including Google AdMob, Facebook, IronSource, AppLovin, Mintegral, Moloco, and many others) that independently collect user data, with the company disclaiming control over their data practices.

"We store the information collected through the Android ID tied to the device you are using. In this way, we can retain your advertising behavior while you are using the app. We will treat this information as personal information. Number of clicks, unlock phone actions, landing pages, pages viewed and order of those pages, the amount of time spent on particular pages, the type of content you view, and the time, frequency and duration of your activities, advertisement interactions."

The app ties behavioral data to persistent device identifiers (Android ID) to track advertising behavior, and third-party partners like Adjust and AppsFlyer collect cross-app attribution data including installed apps and in-app interactions.

"Any information that is collected is subject to the Policy in effect at the time such information is collected. When material changes are made, we will provide you additional forms of notice of modifications or updates as appropriate under the circumstances. Your continued use of our app or services following the change of the Policy will mean you accept those changes."

The company can change the privacy policy at any time and treats continued use of the app as acceptance of the new terms, without requiring explicit consent.

"Time to retain personal data: Stored for the lifetime of your use of the Service (i.e., until account deletion in accordance with your request) and then for 30 days."

While a 30-day post-deletion retention period is stated, data is kept indefinitely during active use with no periodic purging, and there is no clarity on whether data already shared with 20+ third-party partners is also deleted.

"You may request us to delete any of your personal information we hold through easemobileteam@gmail.com... please submit a verifiable consumer request to us by easemobileteam@gmail.com. Only you or your authorized agent may make a verifiable consumer request related to your personal information. A verifiable consumer request must: Provide sufficient information that allows us to reasonably verify your identity."

There is no self-service account or data deletion option — users must email a Gmail address and go through an identity verification process, with the company taking up to 45-90 days to respond.