TikTok allegedly tracked Grindr activity via third-party tracker

Austrian privacy group None of Your Business (noyb) has filed complaints against TikTok, Grindr, and AppsFlyer, alleging violations of European Union privacy laws.

Noyb claims the companies tracked user activity across different apps without consent, potentially exposing sensitive data.

The group said TikTok monitored a user’s Grindr activity using data from AppsFlyer, raising concerns about compliance with the General Data Protection Regulation (GDPR).

Noyb alleged that TikTok used this information for targeted ads and analytics, and did not inform the user until after repeated requests.

The group also said neither AppsFlyer nor Grindr had legal grounds to share the data with TikTok.

🔗 Source: Reuters

🧠 Food for thought

Implications, context, and why it matters.

noyb alleges AppsFlyer’s Software Development Kit (SDK) enables cross-app tracking

noyb alleges AppsFlyer likely acted as a go-between that got sensitive data about the complainant from Grindr, then sent it to TikTok. TikTok told the user it knows which apps he used plus some in‑app events such as adding a product to a shopping cart, including use of Grindr 1.
noyb claims TikTok withheld details about off‑TikTok tracking. It pushed the user to a download tool with only data TikTok calls ‘most relevant’, which noyb says breaches GDPR Articles 12 and 15 1.
The complaint describes how tracking SDKs in many apps can link activity across dating, shopping, and social services. noyb argues platforms can build a picture of people’s online activity beyond their own app 1.

Mobile app developers should audit SDKs to manage GDPR risk

noyb’s complaints allege third‑party SDKs like AppsFlyer can trigger processing of special‑category data such as sexual orientation without a valid legal basis, contrary to GDPR Article 9(1) 1. Penalties can reach €20 million or 4% of global annual turnover, whichever is higher 2.
Norway’s Privacy Appeals Board upheld a €5.8 million fine against Grindr for illegal data sharing with advertising partners 3. Ireland’s regulator fined TikTok €530 million in May over concerns about data transfers to China 4. Developers should audit SDKs, then secure consent and a legal basis.