Apple Removes Facebook's Snooping VPN App from the App Store

Apple has stepped up and removed Facebook’s free VPN app, Onavo Protect, from its App Store

Onavo Protect was found to be snooping on user activity and reporting it back to Facebook HQ. In the world of VPN apps, this is a pretty obvious no-no.

What’s more, Onavo Protect was sending data back to Facebook when the app itself was not running.

Onavo Protect is still available for Android, but it goes by another name: Protect Free VPN+ Data Manager.

What Did Onavo Protect Collect?

Will Strafach, a cybersecurity researcher, decided to look into Onavo Protect in detail.

He found that the app was picking up information about the user’s WiFi usage, data usage, time connected to the free VPN connection, and details of when the device was switched on and off.

Information about the amount of data used was connected when the VPN was not active. The whole lot was bundled back to a Facebook-owned domain:

Alarmingly, Onavo Protect was promoted within the Facebook app for mobile devices as far back as February this year. At the time, various media outlets warned users not to install it. Gizmodo referred to it as “corporate spyware”.

Some countries block Facebook at a national level; China is one of the best examples. So it’s in Facebook’s interests to provide apps like Onavo to work around those blocks. It purchased Onavo in 2013 for a fee said to be in the region of $100 million.

But it’s seemingly used its VPN to harvest even more data about individuals to boost its already huge archives. And given Facebook’s track record, that’s a pretty stark development.

Beware Free VPN Apps

Most VPN users are interested in protecting their privacy online. In theory, a good VPN provider should not keep any logs about what you’re accessing, or how you connect.

But some providers are more honest about their logging activity than others. And in the case of Onavo Protect, it isn’t really a true VPN at all.

At a high level, free VPNs tend to be more risky than paid ones because they may have a vested interest in selling your data to other companies to make money.


If you are looking for a good quality VPN, we recommend looking at the industry leaders and checking all their policies on data logging in detail. There’s a huge amount of variation in what these apps do behind the scenes, and the claims they make on their website homepage might be written in a way that disguises what information is being collected and tracked.

Finally, before installing any browser extensions or apps that offer free VPN services, check the terms carefully. If they sound too good to be true, they probably are.

Security & Privacy

University Papers Still for Sale in 2019?
The Issue of selling Univiersity Papers continues to Rumble on
26 January 2019

Identity Protection

Most websites leak the presence of user accounts
How this puts users at risk and how to fix it
01 November 2018

Tips & Advice

Don’t Get Locked Out of Your User Accounts
Some account security and recovery best practices
22 October 2018