Trump White House app set to be force-installed on all DHS employee phones, data sharing practices raise security concerns

According to an internal email obtained by Politico, the Department of Homeland Security (DHS) notified all employees on Tuesday that the official White House app will soon be automatically installed on all DHS-issued work phones. The email describes the app as a „convenient way to access official White House communications,“ with features including: push notifications for major announcements and executive orders, live and on-demand video streaming, an audio archive of Trump’s speeches, and a portal for submitting text or voice feedback. The White House’s official description says the app provides „unfiltered real-time updates straight from the source.“ The app launched on the App Store and Google Play in March, and last month the Trump administration ordered all federal agencies to install it on employee phones. The Federal Aviation Administration (FAA) is one of the agencies previously confirmed to be rolling out the app automatically.

This practice has raised alarms in the government cybersecurity community. Sonny Hashmi, former IT director at the General Services Administration (GSA), told Government Executive that forced automatic installation is a „red flag“ because „any app installed on a government device can create a backdoor into government networks behind the firewall.“ A prior investigation by the outlet Notus also found that the app shares users’ time zone, IP address, and other data with third parties, and that its data-sharing disclosures are „different from most apps." The White House has not yet publicly responded to the security concerns.

Politico | Gizmodo