DeepSeek’s iOS app sending sensitive user data to Chinese servers, report claims

DeepSeek

DeepSeek is a generative AI app, similar to ChatGPT, which has gained rapid popularity in the past few weeks as its cost-efficient-but-high-performance V3 and R1 models have received global attention. However, the AI chatbot now faces scrutiny over multiple security vulnerabilities that could put users’ privacy at risk and expose it to interception and manipulation attacks.

DeepSeek’s unprotected data channels put users’ data at risk: Key details

The DeepSeek has been the top of Apple’s App Store downloads chart this year, with users drawn to its lower cost and perceived equivalence to ChatGPT and Google Gemini. However, findings published by Chicago-based NowSecure, a cybersecurity firm that focuses on mobile apps, has accused the DeepSeek app on iPhones and iPads of sharing sensitive data over unprotected channels, meaning anyone who can monitor the traffic will be able to read your data.

Moreover, according to the report by NowSecure, this data is being controlled by ByteDance, the Chinese company that owns TikTok. While some of that data is properly encrypted using transport layer security, once it's decrypted on the ByteDance-controlled servers, it can be used to identify specific users and potentially track queries and other usage. The report also notes that the Android app is even less secure than the iOS one.

Considering the privacy and security risks associated with these findings, the report recommends not using the DeepSeek app or web platform for personal or your organisation needs, until things are fixed and better standards are in place.