US Army examines TikTok security concerns after Schumer’s data warning

“National security experts have raised concerns about TikTok’s collection and handling of user data, including user content and communications, IP addresses, location-related data, metadata, and other sensitive personal information,” Schumer wrote in a Nov. 7 letter to McCarthy.

Schumer said he was especially concerned about Chinese laws requiring domestic companies “to support and cooperate with intelligence work controlled by the Chinese Communist Party.”

The Committee on Foreign Investment in the United States (CFIUS) has launched a national security review of TikTok owner Beijing ByteDance Technology Co’s $1 billion acquisition of US social media app Musical.ly.

TikTok did not immediately respond to a request for comment.

The company has previously emphasized its independence from China but has failed to assuage congressional concerns about the security of the personal data of US citizens who use the platform and whether content on the platform is subject to any censorship from Beijing.

In a Nov. 5 blog post, TikTok’s US general manager, Vanessa Pappas, said that the company’s data centers “are located entirely outside of China.” She said US user data is stored in the United States, with backup redundancy in Singapore.

ByteDance is one of China’s fastest-growing startups. About 60% of TikTok’s 26.5 million monthly active users in the United States are between the ages of 16 and 24, the company said this year.

Earlier this year, Schumer also called on the FBI and the Federal Trade Commission to conduct a national security and privacy investigation into FaceApp, a face-editing photo app developed in Russia.

The potential for the sharing of army information through the use of apps was highlighted after researchers found in 2018 that fitness-tracking app Strava was inadvertently exposing military posts and other sensitive sites.

In 2017, the Army ordered its members to stop using drones made by Chinese manufacturer SZ DJI Technology Co Ltd because of “cyber vulnerabilities” in the products.