SafeBoda is reportedly sharing data with companies and Facebook in particular as per a reveal made by Unwanted Witness Uganda-A civil society organization. In a report published by the Organization, SafeBoda which so far operates in Uganda, Kenya, and Nigeria operates against its actual Privacy policy.
Through sharing User data with 3rd parties without any notification or permission from end-users, SafeBoda gradually operates on the opposite side of Section 7 of the Data Protection and Privacy Act of Uganda.
Notably, SafeBoda uses a Facebook-owned System developed kit (SDK) which allows the Social media giant to routinely collect information about clients using the SafeBoda App.
Luckily, SafeBoda managed to fix the flaw by removing Facebook trackers from its App source code, But then introduced even more data sharing trackers in replacement.
Two trackers, Clever Trap and Amplitude still solicit user data from the SafeBoda App without user consent once the App processes are launched.
Basing on these two trackers, and the historical use of Facebook trackers, Unwanted Witness Uganda shared its backdoor concerns with the SafeBoda team and received a response on why the Boda hailing Wing continues to use the Clever Tap in particular.
I have spoken to the tech team about our use of Clevertap. Clevertap is an analytics tool that is used for tracking marketing communication and identifying product issues. It does not have the right to use that data for any purposes and as such is akin to the storage of data on AWS or any other storage/analytics tool. If you believe that it would be appropriate then we can amend our Customer Terms of Use that some data is stored on servers operated by third party data processors. The Data policies already make reference to ‘third-party data processors.
– The SafeBoda response read
Clever Tap is a US-based mobile marketing company headquartered in Mountain View California and provides mobile App analytics together with user engagement products to over 800 companies worldwide.
Given the fact that CleverTap is not only an external tracker, but also has data-sharing allegations tamed to its brand name. Unwanted Witness went ahead to publish a list of recommendations SafeBoda can consider to stop user data sharing through App trackers:
- Safeboda was advised to offer users a genuine choice to consent to the processing of their data for marketing and analytics purposes, including via third parties like CleverTapthat may act as processors. Bundling consent negates users’ choice.
- The privacy policy should show the date it was last modified to allow individuals to track any changes made by the company.
- The final recommendation to the Safeboda was to exhaustively specify the third-parties and the exact personal data it shares with them in its privacy policy.
For now, SafeBoda has not replied to the listed allegations of sharing user data with 3rd parties contrary to its Privacy Policy listed on its multi-feature ride-hailing App.
But if the Boda hailing firm has been sharing user data to external services as revealed, the company will have to route through legal battles in countries where it operates, and Uganda as it’s base zone.