Datávoros: auditing the apps that spy on you (and how to use them for good)

Do you know how many trackers are there in the apps you use every day? Why does a goverment app require access to your location 24/7? Why would you install stalkerware on your children?

Datávoros is a project that investigates the voracious collection of data through mobile applications developed by governments and companies. We run tests and technical analyses to provide insights on the main security and privacy flaws in mobile applications.

This session is designed for beginners interested in mobile apps auditing, digital privacy, transparency, and accountability.

We will present the methodology used by Datávoros to analyze mobile applications, including network analysis, identification of permissions and trackers, and evaluation of security and privacy measures. Through concrete examples, we will show how analyses have been conducted on citizen security applications, applications for monitoring ,dating apps and parental control apps.

In addition, we will discuss how the evidence generated by these analyses can be used by activists, journalists, and civil society organizations to demand better practices in personal data protection.

We will invite participants to learn about, contribute to, and to provide feedback on our methodology.

See also: Discord Thread
The speaker’s profile picture
Paul Aguilar

Paul Aguilar has been part of the SocialTIC team for eight years, overseeing the Digital Security program. He has experience in technical research, training, and rapid response with human rights defenders, journalists, and activists. He has facilitated workshops and consulting sessions in countries such as Mexico, Bolivia, Peru, Nicaragua, El Salvador, and Venezuela. With over 12 years of experience in technology projects and 10 years in free and open source software, he has worked as a software developer and systems administrator. He has collaborated with international and local organizations working on technology, digital rights, surveillance, and espionage.

The speaker’s profile picture
Linda Fernandez

Computer Engineering professional from the Instituto Politécnico Nacional (IPN), with experience in infrastructure and systems administration.
She has worked managing technology infrastructure at SocialTIC, focusing on improving system performance and strengthening security. As a Digital Security Analyst, her work is mainly centered on protecting digital services and helping create safer, more resilient environments. She provides technical support and responds to emergencies involving infrastructure or website attacks, and also performs forensic analysis of devices, networks, and systems to better understand and respond to digital threats.
She’s also been an advocate for building autonomous infrastructure and promotes the use of free and accessible technologies in various projects.