Is Skout safe? Data breach history, GDPR fines and safety record

How the score is made up

The score concerns security only. Every service starts with 100 points in two parts: Security & breaches (55) and Privacy enforcement (45). We deduct points only for publicly documented problems, never opinions, rumours or user reviews. No part can go below 0. Consumer and billing findings are shown separately without points.

• Security & breaches43/55

  Confirmed data breaches, leaks and security flaws.

• Privacy enforcement45/45

  Final fines or orders from privacy regulators, and privacy lawsuits or settlements.

A score is not a guarantee of safety.

Documented findings

Verified public records, newest first. Each shows the points deducted and its source.

1. 2018-10 · Security & breaches−4 points

   ISSRE 2018 paper: Skout sent location data in unencrypted HTTP, accepted replayed requests with forged coordinates, and exposed relative distances usable for trilateration. Fix not documented.

   yangzhangalmo.github.io

2. 2014-09 · Security & breaches−4 points

   Skout Android app 4.3.3 did not verify SSL certificates, allowing man-in-the-middle interception (CVE-2014-5701, CERT/CC test). No known misuse.

   nvd.nist.gov

3. 2013-05-24 · Security & breaches−4 points

   Researcher Aldo Cortesi: Skout's unencrypted profile API returned users' exact date of birth and location coordinates to 3 decimal places (~110 m). Exact coordinates removed within hours.

   corte.si

Spotted an error? Request a correction. See how ratings work.