Onavo

Last updated

Onavo, Inc.
Company type Subsidiary
Industry Software
Founded2010
Founders
  • Guy Rosen
  • Roi Tiger
Defunct2019
Headquarters
Products
  • Onavo Count
  • Onavo Extend
  • Onavo Protect
ServicesOnavo Insights
Parent Facebook, Inc.
Website onavo.com

Onavo, Inc. [1] was an Israeli mobile web analytics company owned by Facebook, Inc. (now Meta Platforms). The company primarily performed its activities via consumer mobile apps, including the virtual private network (VPN) service Onavo Protect, which analysed web traffic sent through the VPN to provide statistics on the usage of other apps.

Contents

Guy Rosen and Roi Tiger founded Onavo in 2010. In October 2013, Onavo was acquired by Facebook, which used Onavo's analytics platform to monitor competitors. This influenced Facebook to make various business decisions, including its 2014 acquisition of WhatsApp.

Since the acquisition, Onavo was frequently classified as being spyware, as the VPN was used to monetize application usage data collected within an allegedly privacy-focused environment. In August 2018, Facebook pulled Onavo Protect from the iOS App Store due to violations of Apple's policy forbidding apps from collecting data on the usage of other apps. In February 2019, in response to criticism over a Facebook market research program employing similar techniques (including, in particular, being targeted towards teens), Onavo announced that it would close the Android version of Protect as well.

History

Onavo was founded in 2010 by Roi Tiger and Guy Rosen. [2] Onavo won multiple awards in 2011. The company received first prize at the Mobile Beat 2011 conference hosted by VentureBeat, [3] and the award for most innovative app at the 2011 International Startup Festival, as well as being selected as the "Best Mobile Startup" by The Next Web . [4] [5]

Onavo had two rounds of funding: the first was a Series A investment for $3 million from Magma Venture Partners and Sequoia Capital in May 2011. [6] The second was a Series B investment of $13 million from Magma Ventures, Sequoia Capital, and Horizons Ventures. Onavo's sale to Facebook is one of the top exits for Magma Venture Partners and other Israeli venture capital firms. [7]

On October 13, 2013, Facebook bought Onavo for approximately $120 million. [8] [9] [10]

In an email dated June 9, 2016, Facebook CEO Mark Zuckerberg directed engineers at Facebook to find a method of obtaining "reliable analytics" about Snapchat, which he noted that Facebook lacked due to Snapchat's network traffic being encrypted. [11] The solution Facebook engineers proposed to Zuckerberg's directive was to use Onavo, which allowed the company to read network traffic on a device prior to its being encrypted, thereby giving the company the ability "to measure detailed in-app activity" and to collect analytics on Snapchat app usage from devices on which Onavo was installed. [11] It did this by creating "fake digital certificates to impersonate trusted Snapchat, YouTube, and Amazon analytics servers to redirect and decrypt secure traffic from those apps for Facebook’s strategic analysis." [12] The program, which was named "Project Ghostbusters" in reference to Snapchat's ghost-shaped logo, was later expanded to include Amazon and YouTube. [11]

In February 2018, it was reported that Facebook had begun to include advertising for the Onavo Protect app within the Facebook app for iOS users in the United States. This led to denouncements of the app by media outlets, who classified Onavo as spyware because it is used by Facebook to monetize usage habits within a privacy-focused environment, and because the app listing did not contain a prominent disclosure of Facebook's ownership. [13] [14] [15] The app's listings were later amended to disclaim that Onavo Protect may collect information on app and website usage to improve Facebook products and services. [16] [17]

In August 2018, Facebook pulled Onavo Protect from the iOS App Store after pressure by Apple, who declared it a violation of guidelines barring apps from harvesting data from other apps on a user's device. [24]

On February 21, 2019, in the wake of renewed controversy over the service due to the related Facebook Research program, Facebook announced that it would sunset Onavo Protect VPN and pull its app from Google Play Store. Effective immediately, the service ceased collecting personal data. [25]

The Australian Competition & Consumer Commission (ACCC) initiated legal proceedings against Facebook on December 16, 2020, alleging that Facebook engaged in "false, misleading or deceptive conduct" by using personal data collected from Onavo "for its own commercial purposes" contrary to Onavo's privacy-oriented marketing. Facebook responded that it was "always clear about the information we collect and how it is used", and would defend itself in court. [26] [27] In July 2023 Australia's Federal Court ordered Facebook's owner to pay A$20 million for failing to disclose how Onavo would be used to collect data, as well as A$400,000 to cover the ACCC's legal fees. [28]


Products

Onavo maintained consumer-oriented utility apps, including Onavo Count, which tracked bandwidth usage by apps, as well as Onavo Extend and Onavo Protect, which were VPN services for data compression and security, respectively. [32]

In 2013, the company launched Onavo Insights, a mobile analytics platform that tracked the market share and active usage of apps using data obtained from Onavo's consumer apps. [30] In 2016, CEO Mark Zuckerberg tasked Facebook employees with developing a means to decrypt the network traffic of the video sharing app Snapchat for analytics purposes, citing "how quickly they're growing". A method of intercepting the traffic was developed and proposed by the Onavo team; Facebook internally referred to its analytics scheme as "Project Ghostbusters"—an allusion to Snapchat's logo and the film franchise. [33] [34]

In August 2017, The Wall Street Journal reported that since the acquisition of Onavo by Facebook, the company had been using the company's data to monitor Snapchat and other startups that are performing "unusually well". This data influenced Facebook to acquire WhatsApp in 2014, and plan a video chat app to rival Houseparty in 2017. [35] [36] [37]

Facebook Research

On January 29, 2019, TechCrunch published a report detailing "Project Atlas"—an internal market research program employed by Facebook since 2016. It invited users between the ages of 13 and 35 to install the Facebook Research app—allegedly a rebranded version of Onavo Protect—on their device, to collect data on their app usage, web browsing history, web search history, location history, personal messages, photos, videos, emails, and Amazon order history. Participants received up to $20 per-month to participate in the program, which was promoted to teenagers via targeted advertising on Instagram and Snapchat. Facebook Research is administered by third-party beta testing services, including Applause and BetaBound, and requires users to install a Facebook root certificate on their phone. On iOS, this is prohibited by Apple's Enterprise Developer License Agreement, as the methods used are intended solely for use by a company's employees (for use cases such as internal software specific to their environment, and internal pre-release versions of apps). [9] [38]

Responses

Facebook initially responded by claiming that Facebook Research did not violate Apple's developer license agreement, and denied that the program was intended to bypass the rules that banned Onavo Protect from the iOS App Store, nor was intended to replace Onavo. Facebook later announced that it would discontinue the Facebook Research program on iOS. Facebook Research remains available for Android devices. [39] [9]

On January 30, 2019, Apple revoked Facebook's Enterprise Developer Program certificates, which caused all of the company's internal iOS apps (including beta versions of its public software, as well as internal apps relating to Facebook's workplace) to become inoperable. [40] [41] Apple's public relations team stated that "Facebook has been using their membership to distribute a data-collecting app to consumers, which is a clear breach of their agreement with Apple", and that the certificates were revoked "to protect our users and their data". [40] Apple reinstated the certificates on January 31. [42]

Of particular concern was that users as young as 13 were allowed to participate in the program. Connecticut Senator Richard Blumenthal criticized Facebook Research, stating "wiretapping teens is not research, and it should never be permissible. This is yet another astonishing example of Facebook’s complete disregard for data privacy and eagerness to engage in anti-competitive behavior." [43] [44] Massachusetts Senator Ed Markey announced that he would introduce a bill to strengthen the Children's Online Privacy Protection Act (COPPA), and said that it "is inherently manipulative to offer teens money in exchange for their personal information when younger users don’t have a clear understanding how much data they're handing over and how sensitive it is." [43] [44] Virginia Senator Mark Warner published an open letter to Mark Zuckerberg, in which he declared that he was "working on legislation to require individualized, informed consent in all instances of behavioral and market research conducted by large platforms on users". [43]

Facebook Study

After discontinuing Onavo Protect and Facebook Research, Facebook released a market research app named Facebook Study (also known as Study or Study from Facebook) on June 11, 2019. Access to Study is restricted to Facebook users who are at least 18 years old. Addressing concerns with previous incarnations of the research app, Study does not use a VPN or a root certificate to conduct its data collection. Study participants are paid through PayPal. [45] [46]

Litigation

In 2020, a class-action lawsuit was filed on behalf of Facebook users, alleging that the company "exploited the rich data it deceptively extracted from its users to identify nascent competitors and then 'acquire, copy, or kill' these firms." [47]

Related Research Articles

<span class="mw-page-title-main">Facebook</span> Social-networking service owned by Meta Platforms

Facebook is a social media and social networking service owned by the American technology conglomerate Meta Platforms. Created in 2004 by Mark Zuckerberg with four other Harvard College students and roommates Eduardo Saverin, Andrew McCollum, Dustin Moskovitz, and Chris Hughes, its name derives from the face book directories often given to American university students. Membership was initially limited to Harvard students, gradually expanding to other North American universities. Since 2006, Facebook allows everyone to register from 13 years old, except in the case of a handful of nations, where the age limit is 14 years. As of December 2022, Facebook claimed 3 billion monthly active users. As of October 2023, Facebook ranked as the 3rd most visited website in the world, with 22.56% of its traffic coming from the United States. It was the most downloaded mobile app of the 2010s.

<span class="mw-page-title-main">App Store (Apple)</span> App distribution platform by Apple Inc

The App Store is an app marketplace developed and maintained by Apple Inc., for mobile apps on its iOS and iPadOS operating systems. The store allows users to browse and download approved apps developed within Apple's iOS SDK. Apps can be downloaded on the iPhone, iPod Touch, or iPad, and some can be transferred to the Apple Watch smartwatch or 4th-generation or newer Apple TVs as extensions of iPhone apps.

<span class="mw-page-title-main">Facebook F8</span> Mostly-annual conference held by Facebook, intended for developers and entrepreneurs

Facebook F8 is a mostly-annual conference held by Meta Platforms since 2007, intended for developers and entrepreneurs who build products and services around the website. The event has generally started with a keynote speech by Facebook founder Mark Zuckerberg, followed by various breakout sessions concentrating on specific topics. Facebook has often introduced new features and made new announcements at the conference.

<span class="mw-page-title-main">History of Facebook</span> History of the social networking service

Facebook is a social networking service originally launched as TheFacebook on February 4, 2004, before changing its name to simply Facebook in August 2005. It was founded by Mark Zuckerberg and his college roommates and fellow Harvard University students, in particular Eduardo Saverin, Andrew McCollum, Dustin Moskovitz, and Chris Hughes. The website's membership was initially limited by the founders to Harvard students, but was expanded to other colleges in the Boston area, the Ivy League, and gradually most universities in the United States and Canada, corporations, and by September 2006, to everyone with a valid email address along with an age requirement of being 13 or older.

<span class="mw-page-title-main">Instagram</span> Social media platform owned by Meta Platforms

Instagram is a photo and video sharing social networking service owned by Meta Platforms. It allows users to upload media that can be edited with filters, be organized by hashtags, and be associated with a location via geographical tagging. Posts can be shared publicly or with preapproved followers. Users can browse other users' content by tags and locations, view trending content, like photos, and follow other users to add their content to a personal feed. A Meta-operated image-centric social media platform, it is available on iOS, Android, Windows 10, and the web. Users can take photos and edit them using built-in filters and other tools, then share them on other social media platforms like Facebook. It supports 32 languages including English, Spanish, French, Korean, and Japanese.

<span class="mw-page-title-main">WhatsApp</span> Messaging and VoIP service owned by Meta Platforms

WhatsApp is an instant messaging (IM) and voice-over-IP (VoIP) service owned by technology conglomerate Meta. It allows users to send text, voice messages and video messages, make voice and video calls, and share images, documents, user locations, and other content. WhatsApp's client application runs on mobile devices, and can be accessed from computers. The service requires a cellular mobile telephone number to sign up. In January 2018, WhatsApp released a standalone business app called WhatsApp Business which can communicate with the standard WhatsApp client.

<span class="mw-page-title-main">Messenger (software)</span> American instant messaging app

Messenger, also known as Facebook Messenger, is an American proprietary instant messaging app and platform developed by Meta Platforms. Originally developed as Facebook Chat in 2008, the company revamped its messaging service in 2010, released standalone iOS and Android apps in 2011, and released standalone Facebook Portal hardware for Messenger calling in 2018. In April 2015, Facebook launched a dedicated website interface, Messenger.com, and separated the messaging functionality from the main Facebook app, allowing users to use the web interface or download one of the standalone apps. In April 2020, Facebook released a Messenger desktop app for Windows and macOS.

Snapchat is an American multimedia instant messaging app and service developed by Snap Inc., originally Snapchat Inc. One of the principal features of Snapchat is that pictures and messages are usually only available for a short time before they become inaccessible to their recipients. The app has evolved from originally focusing on person-to-person photo sharing to presently featuring users' "Stories" of 24 hours of chronological content, along with "Discover", letting brands show ad-supported short-form content. It also allows users to store photos in a password-protected area called "my eyes only". It has also reportedly incorporated limited use of end-to-end encryption, with plans to broaden its use in the future.

<span class="mw-page-title-main">Facebook Paper</span> Standalone mobile app by Facebook

Facebook Paper was a standalone mobile app created by Facebook, only for iOS, that intended to serve as a phone-based equivalent of a newspaper or magazine. The app was announced by Facebook on January 30, 2014, and released for iOS on February 3, 2014. The iPhone app appeared in the iOS App Store as "Paper – stories from Facebook"; there was no iPad version. Facebook shut Paper down on July 29, 2016.

Crashlytics was a Boston, Massachusetts-based software company founded in May 2011 by entrepreneurs Wayne Chang and Jeff Seibert. Crashlytics helps collecting, analyzing and organizing app crash reports.

<span class="mw-page-title-main">Reception and criticism of WhatsApp security and privacy features</span> Reception and criticism of security and privacy features in the WhatsApp messaging service

This article provides a detailed chronological account of the historical reception and criticism of security and privacy features in the WhatsApp messaging service.

ExpressVPN is a VPN service which offers privacy and security software that encrypts users' web traffic and masks their IP addresses. It is offered by a Hong Kong-based company registered in the British Virgin Islands as Express Technologies Ltd.

NordVPN is a Lithuanian VPN service provided by Nordsec Ltd with applications for Microsoft Windows, macOS, Linux, Android, iOS, Android TV, and tvOS. Manual setup is available for wireless routers, NAS devices, and other platforms.

<span class="mw-page-title-main">AdGuard</span> Ad blocking and privacy protection software

AdGuard is an ad blocking service for Microsoft Windows, Linux, MacOS, Android and iOS. AdGuard is also available as a browser extension.

Guardian Firewall is a VPN, firewall, and password manager for iOS, which also blocks data and location trackers. Its network crypto suite is IPSec. The service, which claims to collect no user information, takes the form of an app which first became available in June 2019.

Meta Platforms Inc., or Meta for short, has faced a number of privacy concerns. These stem partly from the company's revenue model that involves selling information collected about its users for many things including advertisement targeting. Meta Platforms Inc. has also been a part of many data breaches that have occurred within the company. These issues and others are further described including user data concerns, vulnerabilities in the company's platform, investigations by pressure groups and government agencies, and even issues with students. In addition, employers and other organizations/individuals have been known to use Meta Platforms Inc. for their own purposes. As a result, individuals’ identities and private information have sometimes been compromised without their permission. In response to these growing privacy concerns, some pressure groups and government agencies have increasingly asserted the users’ right to privacy and to be able to control their personal data.

Apple's Identifier for Advertisers (IDFA) is a unique random device identifier Apple generates and assigns to every device. It is intended to be used by advertisers to deliver personalized ads and attribute ad interactions for ad retargeting. Users can opt-out of IDFA via the "Limit Ad Tracking" (LAT) setting.

<span class="mw-page-title-main">Michael Sayman</span> Latin American internet entrepreneur

Michael Arthur Sayman, is a Peruvian–Bolivian–American mobile application entrepreneur, software engineer, political activist, and author. He is best known for creating top-charting apps as a teenager to provide for his family during the Great Recession, as well as his subsequent work at Facebook. Described by Semana as "the most influential Latino in Silicon Valley", in 2019, Sayman was included on Forbes's 30 Under 30 list, and has additionally been featured at TED.

The iOS operating system utilizes many security features in both hardware and software, from the boot process to biometrics.

References

  1. "Onavo, Inc". OpenCorporates . February 13, 2012. Retrieved August 20, 2023.
  2. Goldenberg, Roy (December 24, 2015). "The Israeli bringing Facebook next billion users - Globes". Globes . Retrieved June 2, 2020.
  3. Hardawar, Devindra (January 24, 2012). "Mobile data shrinking app Onavo raises $10M, working on compression for Android". Venture Beat.
  4. "Meet Onavo, crunching mobile data to save you money [Video Interview] #TNW2011". The Next Web. April 29, 2011.
  5. "And The Next Web Startup Rally Winner is…SILK #TNW2011". The Next Web. April 29, 2011.
  6. Parag, Noa (May 18, 2011). "Data shrinking co Onavo raises $3m in first round - Globes". Globes . Retrieved June 2, 2020.
  7. Goldenberg, Roy (January 5, 2015). "Israeli VC raises $855m in new funds in 6 months". Globes.
  8. Lunden, Ingrid (October 13, 2013). "Facebook Buys Mobile Data Analytics Company Onavo, Reportedly For Up To $200M… And (Finally?) Gets Its Office In Israel". TechCrunch.
  9. 1 2 3 Constine, John (January 29, 2019). "Facebook pays teens to install VPN that spies on them". TechCrunch. Archived from the original on November 19, 2020. Retrieved January 30, 2019.
  10. Rosen, Guy (November 7, 2013). "We are joining the Facebook team". Onavo Blog. Archived from the original on November 7, 2013. Retrieved January 30, 2019.
  11. 1 2 3 Franceschi-Bicchierai, Lorenzo (March 26, 2024). "Facebook snooped on users' Snapchat traffic in secret project, documents reveal". TechCrunch . Archived from the original on March 26, 2024. Retrieved March 26, 2024.
  12. Belanger, Ashley (March 27, 2024). "Facebook secretly spied on Snapchat usage to confuse advertisers, court docs say". Ars Technica.
  13. Perez, Sarah. "Facebook is pushing its data-tracking Onavo VPN within its main mobile app". TechCrunch. Retrieved February 14, 2018.
  14. 1 2 "Facebook's New 'Onavo Protect' VPN is a Spyware App". ExtremeTech. February 14, 2018. Archived from the original on August 28, 2018. Retrieved February 14, 2018.
  15. "Facebook's Protect security feature is essentially Spyware". IT PRO. Retrieved February 14, 2018.
  16. Palladino, Valentina (August 23, 2018). "Facebook violates Apple's data-gathering rules, pulls VPN from App Store". Ars Technica. Retrieved September 3, 2018.
  17. Wagonseil, Paul (August 23, 2018). "Apple Boots Facebook's Nosy VPN Out of App Store". Tom's Guide. Retrieved September 3, 2018.
  18. "Apple removed Facebook's Onavo from the App Store for gathering app data". TechCrunch. Retrieved August 23, 2018.
  19. "Facebook will pull its data-collecting VPN app from the App Store over privacy concerns". The Verge. Retrieved August 23, 2018.
  20. Grothaus, Michael (August 23, 2018). "Apple makes Facebook pull its spyware(ish) VPN from the App Store". Fast Company. Retrieved September 3, 2018.
  21. McKay, Tom (August 22, 2018). "Facebook Pulls Its Data-Harvesting Onavo VPN From App Store After Apple Says It Violates Rules". Gizmodo. Retrieved September 3, 2018.
  22. Miller, Chance (August 22, 2018). "At Apple's request, Facebook is removing its spyware-like Onavo VPN app from the App Store". 9to5Mac. Retrieved September 3, 2018.
  23. Morse, Jack (August 22, 2018). "Facebook to pull its creepy VPN Onavo from App Store after Apple pushback". Mashable. Retrieved September 3, 2018.
  24. [18] [19] [20] [21] [22] [23]
  25. "Facebook will shut down its spyware VPN app Onavo". TechCrunch. February 22, 2019. Retrieved February 22, 2019.
  26. Spadafora, Anthony (December 16, 2020). "Facebook sued for using VPN to spy on users". TechRadar . Retrieved January 7, 2021.
  27. Duckett, Chris (December 16, 2020). "Facebook dragged to court by ACCC over deceptive VPN conduct allegations". ZDNet . Retrieved January 7, 2021.
  28. Kaye, Byron (July 26, 2023). "Australia fines Facebook owner Meta $14 million for undisclosed data collection". Reuters. Retrieved March 27, 2024.
  29. "Data hungry apps revealed with Onavo Count, free usage tracker for iOS". Engadget. Retrieved February 14, 2018.
  30. 1 2 Cutler, Kim-Mai. "Finally, A Quantcast For Mobile Apps? Onavo Launches Insights". TechCrunch. Retrieved February 14, 2018.
  31. "Onavo Extend helps you use less data on Android". CNET. August 30, 2012. Retrieved February 14, 2018.
  32. [29] [30] [31] [14]
  33. Franceschi-Bicchierai, Lorenzo (March 26, 2024). "Facebook snooped on users' Snapchat traffic in secret project, documents reveal". TechCrunch. Retrieved March 31, 2024.
  34. Council, Stephen. "Project 'Ghostbusters': Facebook secretly spied on Snapchat data, docs allege". SFGATE. Retrieved March 31, 2024.
  35. Morris, Betsy; Seetharaman, Deepa (August 9, 2017). "The New Copycats: How Facebook Squashes Competition From Startups". Wall Street Journal. ISSN   0099-9660 . Retrieved August 15, 2017.
  36. "The New Copycats: How Facebook Squashes -2-". Fox Business. August 9, 2017. Retrieved August 15, 2017.
  37. "Facebook knew about Snap's struggles months before the public". Engadget. Retrieved August 15, 2017.
  38. Wagner, Kurt (January 30, 2019). "Apple says it's banning Facebook's research app that collects users' personal information". Recode. Retrieved January 30, 2019.
  39. Newton, Casey (January 30, 2019). "Facebook will shut down its controversial market research app for iOS". The Verge. Retrieved January 30, 2019.
  40. 1 2 Wagner, Kurt (January 30, 2019). "Apple says it's banning Facebook's research app that collects users' personal information". Recode. Archived from the original on June 9, 2022. Retrieved January 30, 2019.
  41. Warren, Tom (January 30, 2019). "Apple blocks Facebook from running its internal iOS apps". The Verge. Retrieved January 30, 2019.
  42. Isaac, Mike (January 31, 2019). "Apple Shows Facebook Who Has the Power in an App Dispute". The New York Times. ISSN   0362-4331 . Retrieved February 2, 2019.
  43. 1 2 3 Constine, Josh (January 30, 2019). "Senator Warner calls on Zuckerberg to support market research consent rules". TechCrunch. Retrieved January 31, 2019.
  44. 1 2 Lapowsky, Issie (January 30, 2019). "By Defying Apple's Rules, Facebook Shows It Never Learns". Wired. ISSN   1059-1028 . Retrieved January 31, 2019 via www.wired.com.
  45. Rodriguez, Salvador (June 11, 2019). "Facebook will once again pay users to install an app that tracks their app usage". CNBC . Retrieved July 27, 2019.
  46. Constine, Josh (June 11, 2019). "Facebook's new Study app pays adults for data after teen scandal". TechCrunch . Retrieved July 27, 2019.
  47. Monti, Ashley (December 7, 2020). "Class-action lawsuit against Facebook alleges anticompetitive behavior". Jurist . Archived from the original on December 8, 2020. Retrieved March 26, 2024.