The Shenzen-based company produces smartphones that hew extremely closely to a stock Android build, but without the exorbitant price tags of their Google Nexus or Pixel counterparts. While the answer is not clear, a software has accused OnePlus of collecting too much user data, including details that can identify users. Moore was testing his OnePlus 2 phone for unrelated security research when he found something interesting: His phone was directing traffic back to a domain called "open.oneplus.net".
Now, the company has responded to these claims.
The forum Hacker News explains how to do it in detail.
While the company may have not given a proper response to how stop all transmission, Czekanski's fix enables the transmission to be stopped via ADB tool with USB debugging enabled. This is true for Apple's iPhone and it's specifically true for Android phones. OnePlus might prefer that you spend your time thinking about the upcoming OnePlus 5T and OnePlus 6, but this tale of telemetry is going to dominate for a little while.
Moore found that the OnePlus server would periodically collect data about his phone, including the IMEI and IMSI (the handset and SIM card unique identifiers, respectively), the phone number, MAC addresses (unique identifiers for network ports), mobile network names and wireless network names.
However, it gets even more unnerving.
@chrisdcmoore I've read your article about OnePlus Analytics. OnePlus with this data can easily pinpoint the person using its phones. What's unsettling, however, is that Moore discovered that the data was not anonymized at all.
The decrypted data revealed that time-stamped information about unexpected reboots - as well as every single phone lock and unlock - was being sent to OnePlus. While some of it might sound normal, the Chinese manufacturer is collecting this whole data along with the smartphone serial number.
The lovely albeit familiar and powerful yet not extremely affordable OnePlus 5 was met with plenty of enthusiasm back in June by Android fans focused on "never settling" for less than the best possible quality/price ratio.
"We securely transmit analytics in two different streams over HTTPS to an Amazon server", the company said in a statement. More recently, someone discovered a workaround that will allow OnePlus users to disable OnePlus Analytics without having to root their devices. This transmission of usage activity can be turned off by navigating to "Settings" - "Advanced" - "Join user experience program".