The eight Android and iOS apps fail to adequately protect user data, which transmits sensitive information, such as device details, geolocation, and credentials, over the HTTP protocol instead of HTTPS.
It leaves the data exposed to potential attacks like data theft, eavesdropping, and man-in-the-middle attacks. Encryption is a fundamental security measure for protecting user data, but it seems that many app developers are implementing it incorrectly.
https://cybersecuritynews.com/android-i ... tive-data/