The Russia connectionFBI, FTC asked to examine whether FaceApp is a Kremlin’s data-collection tool

Published 18 July 2019

FaceApp is a selfie app designed by a Russian programmer, which uses AI-like techniques to apply various changes to faces, making them look older or younger, adding accessories and even changing their race. On Wednesday, Senate Minority Leader Chuck Schumer (D-New York) sent a letter to the FBI and Federal Trade Commission to investigate the data-collecting and data-retention mechanisms of the Russia-based app — and whether the “personal data uploaded by millions of Americans onto FaceApp may be finding its way into the hands of the Russian government.”

FaceApp is a selfie app designed by a Russian programmer, which uses AI-like techniques to apply various changes to faces, making them look older or younger, adding accessories and even changing their race.

On Wednesday, Senate Minority Leader Chuck Schumer (D-New York) sent a letter to the FBI and Federal Trade Commission to investigate the data-collecting and data-retention mechanisms of the Russia-based app — and whether the “personal data uploaded by millions of Americans onto FaceApp may be finding its way into the hands of the Russian government.”

TechCrunch reports that in a letter to FBI director Christopher Wray and FTC Chairman Joseph Simons, Schumer expressed concerns that FaceApp, which is headquartered in Saint Petersburg, has “opaque disclosures” of how users consent to providing their photos and data, and how it might be weaponized against the United States.

It would be deeply troubling if the sensitive personal information of U.S. citizens was provided to a hostile foreign power actively engaged in cyber hostilities against the United States,” he wrote.

Here are excerpts from the letter:

I write today to express my concerns regarding FaceApp.

In order to operate the application, users must provide the company full and irrevocable access to their personal photos and data. According to its privacy policy, users grant FaceApp license to use or publish content shared with the application, including their username or even their real name, without notifying them or providing compensation.

Furthermore, it is unclear how long FaceApp retains a user’s data or how a user may ensure their data is deleted after usage. These forms of “dark patterns,” which manifest in opaque disclosures and broader user authorizations, can be misleading to consumers and may even constitute a deceptive trade practices. Thus, I have serious concerns regarding both the protection of the data that is being aggregated as well as whether users are aware of who may have access to it.

In particular, FaceApp’s location in Russia raises questions regarding how and when the company provides access to the data of U.S. citizens to third parties, including potentially foreign governments.

FaceApp’s website says it has over 80 million active users. FaceApp’s website promotes the app by saying: “Transform your face using Artificial Intelligence with just one tap,” showing photos with changes in users’ appearances.