What’s in your apps?? Lessons from the Los Angeles / Weather Channel app lawsuit.

This report summarizes z3A (Zimperium) analysis of The Weather Channel iOS app prompted by a Los Angeles lawsuit alleging covert user location tracking and data sales; the analysis identifies multiple privacy and security deficiencies — high-risk access to EXIF metadata and pinpoint location, numerous medium-risk data leakage issues (including PII and UUIDs sent to advertisers), use of non-encrypted HTTP, and insufficient cryptographic/TLS protections — and notes the app failed five of the OWASP Mobile Top 10 categories.