An investigation from TechCrunch found that several popular apps record users’ iPhone screens without their knowledge or consent by embedding third-party “session replay” technology into their apps. The report notes that several apps employ Glassbox, a customer experience analytics firm, to allow them to see a user’s screen, follow and track keyboard entries, and understand how that user interacted with the app. There are several other session replay services available that are often used to understand why apps break, but the report notes the failure of some app developers to properly mask its session replay files when they are sent from a device to the company’s servers, potentially exposing sensitive data to attack.  
Full Story