A total of 71 mobile applications have been identified for non-compliant collection and use of personal information, according to a notice issued following inspections by the National Computer Virus Emergency Response Center. The findings are based on laws and regulations including the Cybersecurity Law and the Personal Information Protection Law.
The violations are categorized as follows:
1. Seventeen applications failed to present privacy policies clearly upon initial launch, used default consent mechanisms instead of explicit user agreement, made privacy policies difficult to access, or omitted clear disclosures about data handlers' identities, contact methods, or data retention periods. These include: Android Beacon扫描SDK (v5.1.0), SEPHORA丝芙兰 (WeChat Mini Program), UdeskSDK-Android (v5.2.6), 白秋洁 (WeChat Mini Program), 彩色消除 (WeChat Mini Program), 成家相亲 (WeChat Mini Program), 德风堂拍卖 (WeChat Mini Program), 简单做决定 (v2.7.27), 雷速体育 (WeChat Mini Program), 零零享租机 (Alipay Mini Program), 梦想驾 (Douyin Mini Program), 泡泡玛特 (WeChat Mini Program), 热雪奇迹 (WeChat Mini Program), 人人租 (Alipay Mini Program), 闪电修 (v2.9.9), 铁兽运动 (WeChat Mini Program), and 星迈StarmaxSDK (v1.0.0).
2. Forty-five applications did not specify the purposes, methods, or scope of personal data collection in their privacy policies, including data collected by third parties. Affected apps include: E英语宝 (v8.6.1), UdeskSDK-Android (v5.2.6), 白秋洁 (WeChat Mini Program), 帮车宝 (v5.1.22), 保标招标网 (v9.1.6), 车点点 (v10.26.0), 橙光 (v3.26.0.0115), 宠TA一生 (v1.1.2), 搭搭校园 (v1.0.7), 大象冥想 (v2.3.3), 德风堂拍卖 (WeChat Mini Program), 电池维护大师 (v2.8), 丁香医考 (v6.86.1), 福昕PDF编辑器 (v4.7.33161), 附近爱夜陌生人 (v6.28.1), 港信期货博易 (v5.6.8), 格林大华智赢 (v5.7.0), 怪兽轻断食 (v4.4.6), 简单做决定 (v2.7.27), 建设通 (v5.32.1), 考试宝 (v3.5.91), 懒人轻断食 (v1.4.16), 乐心 (v2.3.0), 联联周边游 (v8.5.1), 麦吉减肥法 (v3.2.2), 美缘婚恋 (v2.1.6.0127), 梦想驾 (Douyin Mini Program), 喵喵记账 (v5.0.9), 魔训 (v4.5.0), 曲靖智停 (v2.0.53), 手绘视频制作 (v1.7.2), 速看短剧 (v3.1.7.4), 铁兽运动 (WeChat Mini Program), 网易蜗牛读书 (v1.9.78), 微商侠 (v2.1.2), 星迈StarmaxSDK (v1.0.0), 学堂在线 (v4.5.12), 一个 (v5.5.0), 一汽大众汽车 (WeChat Mini Program), 易次元 (v4.17.11), 瑜小九 (v1.15.24), 语畔 (v1.9.0), 知户型 (v26.1.3), 中欧财富 (v5.8.1), and 追读小说 (v2.7.4).
3. Sixteen applications shared user data with third parties without proper notification, consent, or anonymization. These include: SEPHORA丝芙兰 (WeChat Mini Program), UdeskSDK-Android (v5.2.6), 白秋洁 (WeChat Mini Program), 成家相亲 (WeChat Mini Program), 德风堂拍卖 (WeChat Mini Program), 菇源地 (v1.2.1), 怪兽轻断食 (v4.4.6), 华宝智投 (v6.9.60), 懒人轻断食 (v1.4.16), 乐心 (v2.3.0), 雷速体育 (WeChat Mini Program), 轻断食减肥 (v1.0.7), 热雪奇迹 (WeChat Mini Program), 铁兽运动 (WeChat Mini Program), 网易蜗牛读书 (v1.9.78), and 易次元 (v4.17.11).
4. One application, 零零享租机 (Alipay Mini Program), began collecting personal data or activating data-related permissions prior to obtaining user consent.
5. Four applications lacked effective user data correction, deletion, or account cancellation features, or imposed unreasonable conditions on such requests. These are: Android Beacon扫描SDK (v5.1.0), 川川云手机 (v3.25.2), 德风堂拍卖 (WeChat Mini Program), and 星迈StarmaxSDK (v1.0.0).
6. The app 零零享租机 (Alipay Mini Program) failed to establish convenient mechanisms for users to exercise their personal data rights.
7. Twenty-four applications did not offer clear methods for users to withdraw consent for data collection. They include: Android Beacon扫描SDK (v5.1.0), ARCFOX 极狐 (v3.4.20), UdeskSDK-Android (v5.2.6), 车点点 (v10.26.0), 橙光 (v3.26.0.0115), 大象冥想 (v2.3.3), 菇源地 (v1.2.1), 怪兽轻断食 (v4.4.6), 坚蛋运动 (v4.5.1), 建设通 (v5.32.1), 懒人轻断食 (v1.4.16), 乐心 (v2.3.0), 零零享租机 (Alipay Mini Program), 麦吉减肥法 (v3.2.2), 喵喵记账 (v5.0.9), 泡泡玛特 (WeChat Mini Program), 轻断食减肥 (v1.0.7), 曲靖智停 (v2.0.53), 速看短剧 (v3.1.7.4), 铁兽运动 (WeChat Mini Program), 网易蜗牛读书 (v1.9.78), 瑜小九 (v1.15.24), 语畔 (v1.9.0), and 追读小说 (v2.7.4).
8. The app 成家相亲 (WeChat Mini Program) used automated decision-making for messaging and marketing without providing opt-out options.
9. Two applications, 微商码头 (v4.2.5) and 鸭咪 (v1.3.50), processed sensitive personal data without obtaining separate consent or explaining necessity.
10. Six applications failed to establish specific rules for handling minors' data or obtaining parental consent. These are: Android Beacon扫描SDK (v5.1.0), UdeskSDK-Android (v5.2.6), 彩色消除 (WeChat Mini Program), 车点点 (v10.26.0), 建设通 (v5.32.1), and 星迈StarmaxSDK (v1.0.0).
11. Eighteen applications lacked adequate security measures such as encryption or de-identification. They include: ARCFOX 极狐 (v3.4.20), SEPHORA丝芙兰 (WeChat Mini Program), UdeskSDK-Android (v5.2.6), 白秋洁 (WeChat Mini Program), 保标招标网 (v9.1.6), 德风堂拍卖 (WeChat Mini Program), 飞凡汽车 (v4.2.4), 福昕PDF编辑器 (v4.7.33161), 坚蛋运动 (v4.5.1), 联联周边游 (v8.5.1), 零零享租机 (Alipay Mini Program), 魔训 (v4.5.0), 群发宝 (v2.2.0), 热雪奇迹 (WeChat Mini Program), 闪电修 (v2.9.9), 铁兽运动 (WeChat Mini Program), 微商管家 (v2.1.8), and 微商侠 (v2.1.2).
12. Six applications used facial recognition as the sole verification method without offering alternatives. These are: 宠TA一生 (v1.1.2), 美缘婚恋 (v2.1.6.0127), 微商码头 (v4.2.5), 鸭咪 (v1.3.50), 友趣 (v8.8.0), and 语畔 (v1.9.0).
13. Four applications operated without any privacy policy: 大忙人便民服务 (Baidu Mini Program), 海尚移民 (Baidu Mini Program), 美福国际移民 (Baidu Mini Program), and 威鲨移民 (Baidu Mini Program).
Additionally, 19 of the 72 applications previously flagged in an earlier notice remain non-compliant upon re-inspection and have been removed from app stores by distribution platforms.
The inspection period for the listed applications was from January 22, 2026, to February 25, 2026.
