We intercepted the White House app's traffic. 77% of requests go to 3rd parties
7 hours ago
- #analysis
- #privacy
- #tracking
- The White House iOS app contacts 31 unique hosts, with only 23% of traffic going to whitehouse.gov and 77% to third-party services like Elfsight, OneSignal, and Google.
- OneSignal receives detailed user data including language, timezone, IP address, device model, session counts, and a persistent unique identifier, with multiple PATCH requests updating profiles.
- Elfsight domains are extensively used for widgets, implementing a two-stage loader that injects JavaScript scripts and sets over 10 tracking cookies.
- Google DoubleClick ad tracking infrastructure is loaded through YouTube embeds, despite the app's privacy manifest claiming no data collection.
- The app's privacy label states "No Data Collected," but dynamic analysis reveals tracking by third-party services like OneSignal and Elfsight.