How X (Twitter) Might be Secretly Leaking Your Data

Spam runs rampant, verification badges have lost their meaning, and privacy and security have taken a nosedive. In the post-Elon Musk era, X grapples with notable privacy issues, shedding privacy and security-focused employees and, consequently, witnessing the erosion of crucial features. 

While the premise of Circles is clear enough—private chat groups meant for a select, trusted few—recent developments suggest a breach in this circle of trust. TechCrunch sheds light on a concerning trend: private Twitter Circle tweets entering the For You feeds of users who don’t belong to the intended Circle.

Even more alarming is when these tweets appear in the feeds of individuals who don’t follow the original poster at all. The issue’s scope remains uncertain, leaving users to question the reliability of a feature designed to safeguard sensitive or private thoughts, ultimately calling into question X’s handle on privacy at large.

In a working system, only the Circle member should have the ability to like and, consequently, see the tweet. However, to Coldwater’s surprise, three people, including two non-followers, liked the tweet. Confirming the issue, other users in the thread acknowledged seeing the message in their feeds without the Twitter Circle label.

However, for those using Twitter Circle as an outlet to vent about work, seek confidential advice, or share personal struggles with trusted connections, the warning bells ring loud and clear—this may no longer be a secure space.

A comparison with platforms like Instagram’s Close Friends and Snapchat’s Private Story, which continue to operate seamlessly, accentuates the failure of Twitter Circles. It prompts users to reevaluate their reliance on a platform grappling with the erosion of privacy features and the ability to uphold user expectations.

While not as immediately alarming as the exposure of supposedly private tweets, any data leakage is cause for concern. In this case, it revolves around crash reports.

Unfortunately, that’s not the case. The app defies your choice and surreptitiously shares crash reports without your knowledge or consent.

What makes this breach even more unsettling is the fact that crash reports, according to the App Privacy breakdown, are not anonymized or aggregated but are personally linked to individual users. In essence, every time the app crashes or restarts, a report tied to your identity is dispatched to Crashlytics.

As users grapple with these concerning developments, the immediate solution proposed is stark but straightforward—delete the X app from your iPhone. It’s advice that carries weight, urging users to reconsider their digital interactions with a platform that seems increasingly unreliable in safeguarding user data.

The consequences are not just technical glitches but a tangible erosion of user privacy and trust. The vulnerabilities in Circles and the involuntary sharing of crash reports underscore a broader issue—the platform’s struggle to maintain robust privacy measures and uphold user expectations.

X’s decline serves as a stark reminder that user trust is fragile and must be constantly earned and upheld. In an era where digital platforms play a central role in our lives, the vigilance and discernment of users become crucial in navigating the increasingly blurred line between the public and private.