CORONAVIRUS

Zoom, The Video Conferencing App Everyone Is Using, Faces Questions Over Privacy

Apr 1, 2020, 4:33 PM | Updated: Jul 1, 2022, 11:32 pm

A treader work after the Nasdaq opening bell ceremony on April 18, 2019 in New York City. The video...

A treader work after the Nasdaq opening bell ceremony on April 18, 2019 in New York City. The video-conferencing software company announced it's IPO priced at $36 per share, at an estimated value of $9.2 billion. (Photo by Kena Betancur/Getty Images)

(Photo by Kena Betancur/Getty Images)

(CNN) — The coronavirus outbreak has seen millions of people ordered to stay in their homes flock to Zoom, using the video conference app for everything from brunches and birthday parties to religious events and even a U.K. cabinet meeting. But the spike in popularity is leading to a wave of scrutiny, particularly around privacy.

While video chat apps in general have seen a surge in usage, including Microsoft’s Skype and Teams platforms and Cisco’s Webex, Zoom has emerged as the go-to contender thanks to its ability to host a large number of users — up to 100 in the free version — and fun social features such as customizable photo backgrounds. The company’s stock price has nearly doubled in the past two months.

But that surge in growth and the company’s widespread usage have surfaced several concerns.

In the last week alone, issues with Zoom’s privacy protections have been flagged by users, security researchers and U.S. authorities. The increased attention highlights a new front in the global debate over privacy and security as a result of the global pandemic, as millions of people adapt to working remotely and using technology that could potentially expose their data.

New York Attorney General Letitia James sent a letter to Zoom on Monday asking whether the company “is taking appropriate steps to ensure users’ privacy and security,” a spokesman for James’s office told CNN Business.

In a statement, Zoom said it would address James’s questions. “Zoom takes its users’ privacy, security, and trust extremely seriously,” a spokesperson for the company said in a statement. “During the COVID-19 pandemic, we are working around-the-clock to ensure that hospitals, universities, schools, and other businesses across the world can stay connected and operational. We appreciate the New York Attorney General’s engagement on these issues and are happy to provide her with the requested information.”

On Monday, the FBI issued a warning against “Zoom-bombing,” where hackers or trolls hijack a public video call. The agency cited examples of users entering meetings or virtual classrooms to shout profanities and share pornography. The FBI urged victims of “teleconference hijacking” to report any incidents to the agency.

Zoom founder and CEO Eric Yuan addressed some of those issues in a tweet on Friday, saying they stem from users not enabling some security features such as meeting passwords and additional privacy controls.

“We will enforce these settings in addition to training and blogs,” he said.

A Zoom spokesperson said the company was “deeply upset to hear about the incidents involving this type of attack.”

Users hosting large public meetings should review their settings to make sure only the hosts can share their screen, and activate additional privacy controls, the spokesperson added. “We also recently updated the default screen sharing settings for our education users so teachers by default are the only ones who can share content in class.”

Founded nine years ago, Zoom has found itself suddenly become a vital social and professional lifeline for millions around the world. But that rapid growth has led to it already being hit by the kind of controversies that far larger tech companies like Facebook and Google frequently grapple with.

“They’ve gone from interesting new startup product to part of the global infrastructure in days. And I think the many gaps in maturity are becoming painfully clear,” Jules Polonetsky, CEO of the Future of Privacy Forum and the former chief privacy officer of AOL, told CNN Business in an interview. “Some of them range from just stupid stuff that maybe doesn’t create risk to most users, to other things that are going to create legal liability for them.”

Another recent issue, first reported by Motherboard, involves Zoom’s sharing of user data with Facebook. Zoom originally allowed users to log into its iOS app using their Facebook accounts, but the feature it was using to do so shared details with Facebook about the user’s device, including its timezone, language, model number and IP address. (Facebook offers the tool to any developer to integrate with their apps.)

The revelation led to two Zoom users separately filing class action lawsuits against the company in a Northern California district court this week, with one suit alleging that the video app “has failed to safeguard the personal information of the increasing millions of users of its software” and the other claiming it gave them “no opportunity to express or withhold consent to Zoom’s misconduct.” The lawsuits accuse Zoom of collecting users’ personal information and sharing it with third parties, including Facebook, without properly notifying the users.

Zoom declined to comment on the lawsuits, but directed CNN Business to a recent blog post in which it says it removed the code that allows the data sharing with Facebook to occur. Facebook did not respond to a request for comment.

Some security experts have expressed doubts about Zoom’s claim that it offers “end-to-end encryption for all meetings.”

Instead, Zoom uses something called transport encryption, which only secures the message while it’s en route from a video chat to the company’s servers, according to David Kennedy, founder of cybersecurity firm TrustedSec and a former cyberwarfare specialist with the United States Marine Corps. That means Zoom effectively functions as a middleman in all video conversations on its platform and has access to those conversations, he said.

report by The Intercept first identified the shortcoming.

Zoom did not respond to multiple requests for comment on its encryption. The company released an update to its privacy policy over the weekend, stressing that it “collects only the data from individuals using the Zoom platform required to provide the service and ensure it is delivered effectively.”

The Zoom spokesperson acknowledged that the company collects “basic technical information” such as IP addresses and device details, but stressed that it has strict privacy controls to protect against unauthorized access.

“Importantly, Zoom does not sell user data of any kind to anyone,” the spokesperson added.

Without end-to-end encryption on video, Kennedy says video conversations on Zoom could technically be accessed and stored by the company.

“Zoom doesn’t seem to be very clear on what they record, what they don’t record,” he said. “There’s a lot of things that Zoom is doing that is particularly alarming and concerning, because they’re not using the right language and terminology.”

KSL 5 TV Live

Coronavirus

Deer Creek Reservoir...

Alex Cabrero

State parks expecting another record visitation year, hiring more workers

It didn't matter how cold or snowy it was at Deer Creek State Park Friday afternoon. Nothing was going to stop Leonard Sawyer from taking his boat out to do a little fishing.

15 days ago

FILE —  Respiratory virus illness activity continues to increase across the US.
(Joe Burbank/Orl...

Emma Benson

‘Not viruses to mess around with’: Experts urge caution during ongoing ‘tripledemic’

Experts say though not as severe as last year, this winter we're seeing another "tripledemic" – rising cases of COVID-19, flu and RSV in Utah.

2 months ago

FILE - COVID-19 antigen home tests. (AP Photo/Patrick Sison, File)Credit: ASSOCIATED PRESS...

Emma Benson

‘The ICUs are full:’ Keep yourself and others healthy this holiday

It's time for holiday gatherings, but with more people around us comes a greater risk of getting sick.

2 months ago

Julianna Preece goes through the mountain of medical documents she's acquired for her health condit...

Lauren Steinbrecher

Herriman couple is suing CVS, says 5x Covid vaccine dose mistake caused health problems

A couple is suing a Utah CVS vaccination clinic, saying a nurse’s mistake led to the wife receiving five times the normal COVID-19 vaccine dose and caused serious health issues she’s still dealing with today.

3 months ago

FILE - COVID-19 antigen home tests. (AP Photo/Patrick Sison, File)Credit: ASSOCIATED PRESS...

Associated Press

More free COVID-19 tests from the government are available for home delivery through the mail

Americans can order more free COVID-19 tests online for home delivery.

3 months ago

FILE - Doses of the anti-viral drug Paxlovid are displayed in New York, Aug. 1, 2022. The COVID-19 ...

Amanda Seitz, Associated Press

COVID-19 treatments to enter the market with a hefty price tag

The COVID-19 treatments millions of have taken for free from the federal government will enter the private market next week with a hefty price tag.

4 months ago

Sponsored Articles

Modern chandelier hanging from a white slanted ceiling with windows in the backgruond...

Lighting Design

Light Up Your Home With These Top Lighting Trends for 2024

Check out the latest lighting design trends for 2024 and tips on how you can incorporate them into your home.

Technician woman fixing hardware of desktop computer. Close up....

PC Laptops

Tips for Hassle-Free Computer Repairs

Experiencing a glitch in your computer can be frustrating, but with these tips you can have your computer repaired without the stress.

Close up of finger on keyboard button with number 11 logo...

PC Laptops

7 Reasons Why You Should Upgrade Your Laptop to Windows 11

Explore the benefits of upgrading to Windows 11 for a smoother, more secure, and feature-packed computing experience.

Stylish room interior with beautiful Christmas tree and decorative fireplace...

Lighting Design

Create a Festive Home with Our Easy-to-Follow Holiday Prep Guide

Get ready for festive celebrations! Discover expert tips to prepare your home for the holidays, creating a warm and welcoming atmosphere for unforgettable moments.

Battery low message on mobile device screen. Internet and technology concept...

PC Laptops

9 Tips to Get More Power Out of Your Laptop Battery

Get more power out of your laptop battery and help it last longer by implementing some of these tips from our guide.

Users display warnings about the use of artificial intelligence (AI), access to malicious software ...

Les Olson

How to Stay Safe from Cybersecurity Threats

Read our tips for reading for how to respond to rising cybersecurity threats in 2023 and beyond to keep yourself and your company safe.

Zoom, The Video Conferencing App Everyone Is Using, Faces Questions Over Privacy