Canvassing apps used by UK political parties riddled with privacy, security issues

The Open Rights Group investigated canvassing apps used by the UK's major political parties and found multiple security and privacy issues: stored secret credentials in the Conservative Share2Win app, dependency-confusion risks, missing privacy controls, Android access to Wi‑Fi data, and reliance on potentially misconfigured Firebase SDKs in the Liberal Democrats' app. Though the ORG's testing was largely static and lacked credentials for full runtime checks, researchers also cited reports of actual data leakage (including MPs' phone numbers and postcodes) and called for greater transparency and regulatory enforcement.