It only took 17 days for China-based shopping app Temu to speed past Instagram, WhatsApp, Snapchat in the Apple App Store top downloads in the U.S.

We warned you about Temu’s security problems back in May. Its sister app, Pinduoduo, was caught using malicious code to bypass cellphone security settings to spy on other apps, read notifications and messages, and even change settings. Now, even the U.S. government has accused Temu of data risks.
https://news.yahoo.com/cybersecurity-experts-warn-temu-comes-113335679.html

Why are so many people shopping Temu?
Social media influencers are promoting Temu on their channels. Many of them are even saying that Temu is better than Amazon and Dollar Tree. How about an HD Wi-Fi security cam for $6.98. An Android fitness watch for $8.38, wireless Lenovo earbuds $8.98, computer keyboards $15 or five pairs of socks for $1.69.

You might get lucky and find a gem that matches the description, but I wouldn’t count on it. Shipping is slow, too, since the items are coming from China.

In exchange for those cheap goods and prices, Temu makes money with your data. The app requests 24 permissions on your device, including access to your Wi-Fi network info, Bluetooth, photos and videos, contact info and payment details. Yikes.

What about the website?
If the app is off-limits, is the website safe to use? Sorry, but no. You’re still handing over (at a minimum) your full name, address, phone number, email and payment details.

The more permissions an app request, the more you should consider whether it’s truly worth having on your smartphone. If you don’t think that’s a big deal, think about what you do on your phone: Have private conversations with friends, log into your bank app, type in passwords, enter your credit card info and so much more.

Keep these security challenges in mind before you hit “install” on Temu:
Biometrics (like fingerprint and face scans) should be stored locally, not sent back to an app’s servers. (Temu’s e-commerce buddy Pinduoduo does this.)

Limit all the permissions that you can. Turn off access to your camera, microphone, GPS location and anything else you can.

Read the reviews.
No, you can’t trust them all, but scan for reports of strange phone behavior after installation. That’s usually a sign of malware.

Want one more reason to avoid Temu?
Products made in China’s western province of Xinjiang are being sold to U.S. consumers through the online shopping platform Temu, in breach of a ban that forbids goods from the region due to links to forced labor.
https://www.latimes.com/business/story/2023-06-15/temu-sells-products-linked-to-forced-labor-in-china

Our original chat about Temu can be found here:
https://actsmartit.com/if-it-seems-too-good-to-be-true/

It’s hard to tell what’s legit and what you should avoid these days, but I firmly believe that Temu falls under the “Avoid at all costs” category.