A hidden piece of software in your Android phone may be watching your every move and sending that information to an unknown recipient, a security researcher has alleged. In a video posted earlier this week, Android researcher Trevor Eckhart shows a program called Carrier IQ logging keystrokes, text messages, and web history—including supposedly secure HTTPS addresses, which sometimes contain username and password data, CNET reports. What’s worse, the program can’t be removed.
Eckhart first broached his findings earlier this month, only to be slapped with a cease-and-desist order from Carrier IQ. The Electronic Frontier Foundation came to his defense and Carrier backed down, but insisted that it did not spy on customers and merely provided a “diagnostic tool” for companies. Sprint, a Carrier IQ client, said the data was used solely to assess network performance. Wired notes that the software is installed on most Android, Nokia, and Blackberry phones.