In light of recent alarming findings regarding the DeepSeek app, which features the Chinese DeepSeek-R1 Large Language Model, iPhone users are urged to reassess their decision to keep this app installed. After briefly dominating the rankings in Apple’s iOS App Store, DeepSeek has raised substantial concerns about user privacy and data security, prompting experts to caution users about potential risks.
Mobile security firm NowSecure conducted a thorough investigation and uncovered critical vulnerabilities within the app that could jeopardize the personal and sensitive data of not only individuals but also government entities and corporations. Users should be informed of these significant risks before continuing their use of DeepSeek.
Notably, the DeepSeek app transmits sensitive user data unencrypted, making it susceptible to interception. Furthermore, it utilizes outdated encryption methods and stores sensitive information such as usernames and passwords improperly, which increases the likelihood of data theft. Adding to these vulnerabilities, the app collects personal and device information that can lead to de-anonymization and potential tracking by malicious actors. Alarmingly, user data is reportedly sent to servers operated by ByteDance, the parent company of TikTok, risking exposure to the Chinese government.
Given that individuals are not the only ones at risk, NowSecure recommends that businesses and government agencies ban the DeepSeek app from managed and personal devices, as the risks of data breaches and infringements on privacy are substantial. They advocate for the selection of alternative AI applications that emphasize robust data security measures.
NowSecure has compiled a list highlighting the various issues associated with the DeepSeek app:
- Privacy concerns due to unprotected data transmission
- Security vulnerabilities arising from hardcoded encryption keys
- Data sharing with third parties such as ByteDance
- Data analysis and storage occurring in China
- Potential loss of intellectual property and sensitive information
- Compromised data integrity from security weaknesses
- Risk of tracking and surveillance due to excessive data collection
- Loss of control over personal data transmitted to China
Asking DeepSeek (L) who won the Stanley Cup only gives us the results of the 2023 Stanley Cup Finals while ChatGPT (R) correctly shows my Florida Panthers as the 2024 champs. | Image credit-PhoneArena
The personal experience shared by this author indicates that DeepSeek has not been trained on data later than December 2023, which undermines its currentness when compared to models like Google’s Gemini or OpenAI’s ChatGPT. Therefore, for security purposes, it is advisable that iPhone users consider removing the DeepSeek app, regardless of whether they are part of a corporate or government entity.
