
After credit card data breach, OnePlus has now come under the radar for allegedly sending clipboard data back to a Chinese server. Reacting to the allegations, OnePlus, however, said that no user data was being sent to any server without consent in OxygenOS.
A French security researcher with the name of Elliot Alderson alleged that the file in the OxygenOS beta called badwords.txt may have helped the company to identify some data and send it back to a Chinese server without a user’s consent.
For those who are not aware, TeddyMobile is a Chinese company that currently works with leading phone manufacturers, including OnePlus, Oppo, Vivo, Gionee, Xiaomi, and Lenovo, among others. It appears that the company has been able to recognise words and details in texts messages. OnePlus has been accused of sending users’ IEMI number (including bank account details) to a Chinese server owned by TeddyMobile.
Given the sensitivity of the issue, OnePlus responded with a statement (via Reddit) that reads:
“There’s been a false claim that the Clipboard app has been sending user data to a server. The code is entirely inactive in the open beta for OxygenOS, our global operating system. No user data is being sent to any server without consent in OxygenOS. In the open beta for HydrogenOS, our operating system for the China market, the identified folder exists in order to filter out what data to not upload. Local data in this folder is skipped over and not sent to any server”.