Security bugs in popular phone-tracking app iSharing exposed users’ precise locations

**Executive summary:** A security researcher discovered API authorization flaws in the iSharing location‑tracking app that allowed any user to retrieve precise location coordinates and personally identifiable information for other users (name, profile photo, email, phone). The researcher reported the issue and iSharing patched the bug around April 20–21; the company reported no evidence of prior exploitation.