Zoom privacy risks: The video chat app could be sharing more information than you think
Make sure you update your Zoom privacy settings.
Make sure you update your Zoom privacy settings.Sarah Tew/CNET
The Zoom video meeting and chat app skyrocketed in popularity as millions of people looked for new ways to work, study and socialize amid the coronavirus pandemic. With the option to customize your background and newer features such as Immersive View and a vanishing pen tool, it's easy to see why Zoom's popularity isn't dwindling even as COVID-19 vaccines and booster shots roll out and offices become hybrid workplaces. But with all that popularity, comes privacy risks.Brett Pearce/CNET
From built-in attention-tracking features (which have since been disabled) to exploitable software bugs and issues with "Zoom-bombing" (where uninvited attendees break into and disrupt meetings) -- Zoom's security practices have drawn scrutiny from users worldwide.
New York's Attorney General Letitia James sent Zoom a letter outlining privacy vulnerability concerns in March 2020. The Electronic Frontier Foundation also cautioned users working from home about the software's onboard privacy features. Read more: 20 Zoom video chat tips, tricks and hidden features
Privacy experts previously expressed concerns about Zoom in 2019, when the video-conferencing software experienced both a webcam hacking scandal, and a bug that allowed snooping users to potentially join video meetings they hadn't been invited to, if those meetings were not protected with a password. The issues exacerbated by widespread adoption at the start of the pandemic were just the latest chapter in the software's rocky security history, and prompted Zoom CEO Eric Yuan to respond to concerns in April 2020, freezing feature updates to address security issues over a 90-day update rollout. Though Zoom has since added security features like end-to-end encryption, there are still a few things you should watch out for to keep your chats as private as possible.
Here are some of the privacy vulnerabilities in Zoom that you should watch out for. CNET Apps Today
Discover the latest apps: Be the first to know about the hottest new apps with the CNET Apps Today newsletter.
Zoom's cloud recording feature might share meeting video with people outside the call
For paid subscribers, Zoom's cloud recording feature can either be a life-saver or a catastrophic faux pas waiting to happen. If the feature is enabled on the account, a host can record the meeting along with its text transcription and a text file of any active chats in that meeting, and save it to the cloud where it can later be accessed by other authorized users at your company, including people who may have never attended the meeting in question.
Yikes. As Mashable's Jack Morse put it, "What that suggests, but doesn't clarify, is that for non-webinar/standard meetings, your person-to-person chat messages would be later sent to your boss after a call recorded to the cloud." Zoom does allow a narrowing of the audience here, however.
Administrators can limit the recording's accessibility to only certain preapproved IP addresses, even if the recording has already been shared. Participants can also see when a meeting is being recorded. Read more: The best VPN services for 2021
Zoom even shared information with Facebook
Fair enough. But what to do when Zoom gets caught sending some of your analytics data to Facebook -- whether or not you even have a Facebook account? An analysis by Vice's Motherboard found the iOS version of the Zoom app doing exactly that.
Courtesy of Facebook's Graph API, Zoom was telling Facebook whenever you opened the Zoom app, what phone or device you were using, and your phone carrier, location and a unique advertising identifier. Motherboard also reported that Zoom had updated its iOS app so the app would stop sending certain data to Facebook. In a March 2020 blog post, Zoom addressed the issue, noting "our customers' privacy is incredibly important to us, and therefore we decided to remove the Facebook SDK in our iOS client and have reconfigured the feature so that users will still be able to log in with Facebook via their browser."
Zoom can share information with third parties, including Facebook.Sarah Tew/CNET
Regarding its relationship to third-party data handlers described above, the company drew a line in the sand between its product and its website. "This only pertains to user activity on the zoom.us website. No data regarding user activity on the Zoom platform -- including video, audio, and chat content -- is ever provided to third parties for advertising purposes," the company said. You should probably review your Zoom and device security settings with an eye toward minimizing permissions, and make sure any anti-tracking software on your device is up to date and running.
It may not help, but it can't hurt. It's also important to keep your Zoom app up to date so your privacy is always protected with the latest security patches. Luckily, Zoom recently rolled out a new automatic update feature that makes this process a whole lot more convenient.
And, does Zoom's free plan have ads now?
Now playing: Watch this: 3 video calling alternatives to Zoom