DeepSeek, a widely downloaded Android app, is under fire for its data collection practices following a review by a publication that expressed concern about the app’s handling of user data. The BBC has reached out to multiple parties, including South Korea‘s Personal Information Protection Commission (PIPC), ByteDance, and DeepSeek’s developer, High Flyer, for clarification and responses regarding these allegations. According to Security Scorecard, DeepSeek collects user behavior and device metadata, which are likely sent to servers owned by ByteDance, the Beijing-headquartered company.
The app saw over a million downloads in South Korea before authorities removed it from app stores last weekend due to data protection concerns. Despite reaching the top of the App Store charts in the UK, US, and other countries, DeepSeek's popularity has waned. In the US, a ban on the app is pending resolution until April 5. The concerns stem from PIPC's findings of data being transmitted to domains connected to Chinese state-owned entities.
"These references suggest deep integration with ByteDance's analytics and performance monitoring infrastructure" – Security Scorecard
ByteDance, known for owning popular apps like TikTok, has faced scrutiny due to the Chinese National Intelligence Law, which allows government access to data from Chinese companies. While some argue this law protects private companies and personal data, fears persist about user data being accessed by the Chinese government. Similar concerns previously led the US Supreme Court to uphold a ban on TikTok.
In South Korea, DeepSeek was also banned from government devices, following the example of countries such as Australia and Taiwan. The PIPC has identified a connection between DeepSeek and ByteDance but has not yet confirmed the specifics of any data transfer. A US cybersecurity company had previously alleged potential data sharing between the two entities in February.
"user behaviour and device metadata [are] likely sent to ByteDance servers" – Security Scorecard
DeepSeek made headlines in January when its new AI model disrupted global stock markets, causing billions in losses. However, its rapid rise has been met with increasing skepticism and regulatory challenges. The app's removal from South Korean app stores underscores the growing unease over data privacy and security.
"exercise caution and avoid entering personal information into the chatbot" – regulator