• Location (once Every 30 seconds for some variants of the app…)
• Phone Calls
• Screenshots
• Network Information (Wifi Networks’ SSID, MAC address, Carrier, Network Type, IMSI (possible), IMEI, local IPs, other devices on the network…)
• Facial Data
• Address
• Clipboard
• Phone Data (cpu, hardware ids, screen dimensions, dpi, memory usage, disk space, etc)
• Installed Apps
• Rooted/Jailbroken Status

TikTok requires you to provide a phone number upon signup on most occasions to function normally within the app, so they can link your identity to your phone number. They also collect your call log (people you’ve called) and have the permission to make calls from your device, although I’ve never heard of a case of this happening. Phone numbers are generally very unique, so this combined with location and name would already be enough to identify virtually anyone using this app in the U.S.

So, social media or spyware? Why not both?

I’m probably going to continue to use the app, but I’ll be sure not to say Xi Jinping looks like Winnie the Pooh or mention the Falun Gong genocide . At least, not while TikTok is watching.