Technology

Google finally admits data collection in Chrome's 'incognito' mode

Published

2 years ago

January 20, 2024

Google finally admits data collection in Chrome's 'incognito' mode

Google is finally revealing it is collecting your data if you use Google Chrome, even if you use incognito mode. This comes after the internet giant agreed to settle for $5 billion to avoid a 2020 lawsuit.

The lawsuit claimed Google collected information like your IP address, device data and even browser history — despite incognito mode seemingly offering a private browsing experience. Google claimed it warned users about websites potentially tracking user activity in order to dismiss the lawsuit.

However, a judge ruled that Google never explicitly told users it was tracking them and collecting information. And if users weren’t aware, they couldn’t consent to data collection.

CLICK TO GET KURT’S FREE CYBERGUY NEWSLETTER WITH SECURITY ALERTS, QUICK VIDEO TIPS, TECH REVIEWS, AND EASY HOW-TO’S TO MAKE YOU SMARTER

What’s happened since Google agreed to settle the lawsuit

Google Chrome on smartphone. (Kurt “CyberGuy” Knutsson)

Since Google agreed to settle last month, two major developments have happened: Google has updated its disclaimer in incognito mode, according to MSPowerUser, and lawyers have been working to finalize a settlement.

So far, Google has only updated the disclaimer in its Canary developer tool on Windows, Android and other devices. If you use it and go into incognito mode, you’ll see a message that says:

NEXT-GEN TECH OUTSMARTS DOCTORS WITH MORE ACCURATE DIAGNOSES AND BETTER BEDSIDE MANNER: STUDY

“Others who use this device won’t see your activity, so you can browse more privately. This won’t change how data is collected by websites you visit and the services they use, including Google. Downloads, bookmarks and reading list items will be saved.”

Google Chrome Incognito Mode. (Google)

Lawyers also have until Feb. 24 to present the court with a finalized settlement agreement. Plaintiffs originally wanted $5,000 in damages per user for violating federal wiretapping and California privacy laws.

We reached out to Google, and a spokesperson released this statement to Cyberguy:

“Incognito mode in Chrome will continue to give people the choice to browse the internet without their activity being saved to their browser or device.”

MORE: HOMELAND SECURITY WARNS FEDERAL AGENCIES OF HACKERS TARGETING GOOGLE CHROME AND EXCEL SPREADSHEETS

How to stay private when browsing the internet

Keeping your information private while browsing the internet can be a tough task. However, here are some easy ways to keep your data away from any prying eyes:

Turn off “web & app” activity

“Web & App” Activity is basically Google’s main tool to collect your data. Google assumes you have given them access to your online activity when this setting is on. Google claims it does not sell your personal information to anyone. However, Google may use your activity data to show you personalized ads on Google sites and apps and on sites and apps that partner with Google to show ads.

How to turn “web & app” activity off using a Mac

On the Google Chrome page, click on your icon in the top right corner and select Manage your Google Account, or click on this link
In the top left, click on Data & Privacy
Scroll down and find the box that says History Settings
In the box, the first row says Web & App Activity; Click on the blue check next to the word On
Find the box that says Web & App Activity and click Turn Off on the right
Select Turn off and Delete activity
Click Next in the bottom right
Select any Google products you wish to delete your activity by selecting its respective box to the right, checking it off, or clicking Select All in the top right to delete all activity
Click Next and then Delete once you have confirmed you want to delete. Then tap Got it.

Turning “web & app” activity off using a PC

On the Google Chrome page, go to Activity controls in a web browser. To turn off web and app activity on your PC, you can access your Activity Controls in a web browser. If you’re not signed in to your Google account, you’ll be prompted to do so
Click Turn Off under “Web & App Activity.” You’ll see this option near the top of the page
Scroll down and click the Pause button. You won’t be able to click Pause until you’ve scrolled to the bottom of the page. This pauses your web and search activity until you enable it again. To delete your Web & App Activity history, click Delete old activity under “Setting is Off” and then select a time range. Click Got It when you’re finished to return to the previous screen.

PRINCE HARRY WITHDRAWS LAWSUIT AGAINST UK PUBLISHER THE DAY HE WAS DUE TO PROVIDE DEFENSE OF CLAIMS

How to turn “web & app” activity off using iPhone

On the Google home page, click on your icon in the top right corner
Select Google Account or click on this link
Then tap Data & Privacy near the top of the screen
Scroll down and find the box that says History Settings

Google Account page. (Google)

In the box, the first row says Web & App Activity; Click on the > icon
Find the box that says Web & App Activity and click Turn Off on the right
Select Turn off and Delete activity
Click Next in the bottom right
Select any Google products you wish to delete your activity by selecting its respective box to the right, checking it off, or clicking Select All in the top right to delete all activity
Click Next and then Delete once you have confirmed you want to delete. Then tap Got it.

How to turn “web & app” activity off using Android

Settings may vary depending on your Android phone’s manufacturer.

On the Google home page, click on your icon in the top right corner
Select Google Account, or click on this link
Click on Data & Privacy
Scroll down and find the box that says History Settings
Find the row that says Web & App Activity and click the > icon
Find the box that says Web & App Activity and click Turn Off on the right
Select Turn off and Delete activity
Click Next in the bottom right
Select any Google products you wish to delete your activity by selecting its respective box to the right, checking it off, or clicking Select All in the top right to delete all activity
Click Next and then Delete once you have confirmed you want to delete. Then tap Got it.

Limit data sharing with sites and services

While there are many valid reasons for allowing Google to give third-party apps and services access to your data, it puts your privacy at risk. Google can track whenever you sign in to another app with your Google sign-in and which service.

How to turn off data sharing with sites and services on Mac

On the Google Chrome page, click on your icon in the top right corner and select Manage your Google Account, or click on this link
In the top left, click on Data & Privacy
Scroll down and find the box under the heading Data from apps and services you use
Click on Third-party apps & services
Select any apps you wish to get rid of Google’s connections with
Click the box on the bottom that says Delete all connections you have with [website] and click confirm

Turning off data sharing with sites and services on PC

On the Google Chrome page, click the menu icon (three dots) in the top right corner and select Settings
Then, click Privacy and security

Google Settings page. (Google)

Next, tap Site settings
Here, you can manage how Chrome handles cookies, location, camera, microphone, notifications, and other permissions for different sites
You can also clear your browsing data and disable third-party services from accessing your data

How to turn off data sharing with sites and services on iPhone

On the Google home page, click on your icon in the top right corner and select your
Select Google Account, Or click on this link
Click on Data & Privacy
Scroll down and find the box under the heading Data from apps and services you use
Click on Third-party apps & services
Scroll down and select any apps you wish to get rid of Google’s connections with by clicking on it
Next, scroll down and click the box on the bottom that says Delete all connections you have with [website] and click confirm

How to turn off data sharing with sites and services on Android

Settings may vary depending on your Android phone’s manufacturer.

On the Google home page, click on your icon in the top right corner
Select Google Account, or click on this link
Click on Data & Privacy
Scroll down and find the box under the heading Data from apps and services you use
Click on Third-party apps & services
Select any apps you wish to get rid of Google’s connections with by clicking on it
Click the box on the bottom that says Delete all connections you have with [website] and click confirm

Turn off Location History

Google can track the places you go and collect your location data. However, the tricky thing with this setting is that you must have Web & App activity turned off for your Location History to be fully turned off.

How to turn off Location History on Mac

On the Google Chrome page, click on your icon in the top right corner and select Manage your Google Account, or click on this link
In the top left, click on Data & Privacy
Scroll down and find the box that says History Settings
Click on the row that says Location History
Click on the box that says Turn off
Select Turn off again and then Got it

MORE: HOW TO CHECK THAT YOU’RE NOT ACCIDENTALLY SHARING YOUR LOCATION

How to turn off “web & app” activity using a PC

On the Google Chrome page, go to Activity controls in a web browser. To turn off web and app activity on your PC, you can access your Activity Controls in a web browser. If you’re not signed in to your Google account, you’ll be prompted to do so
Click Turn Off under “Web & App Activity.” You’ll see this option near the top of the page
Scroll down and click the Pause button. You won’t be able to click Pause until you’ve scrolled to the bottom of the page. This pauses your web and search activity until you enable it again. To delete your Web & App Activity history, click Delete old activity under “Setting is Off” and then select a time range. Click Got It when you’re finished to return to the previous screen

How to turn Location History off on iPhone

On the Google home page, click on your icon in the top right corner
Select your Google Account or click on this link
At the top, click on Data & Privacy
Scroll down and find the box that says History Settings
Click on the row that says Location History

Google Location History setting. (Google)

Click on the box that says Turn off
Select Turn off again and then Got it

How to turn off Location History on Android

Settings may vary depending on your Android phone’s manufacturer.

On the Google home page, click on your icon in the top right corner
Select Google Account, or click on this link
Click on Data & Privacy
Scroll down and find the box that says History Settings
Click on the row that says Location History
Click on the box that says Turn off
Select Turn off again and then Got it

Stop targeted ads

Google’s targeted ads can be a bit too specific for comfort, but there is a way to turn them off:

How to stop targeted ads on Mac

On the Google Chrome page, click on your icon in the top right corner and select Manage your Google Account, or click on this link
In the top left, click on Data & Privacy
Find the box that is titled Personalized ads and click on My Ad Center
In the top right corner, click on the box that says Personalized ads, and then click on Turn Off in the bottom right of the next box. Then tap Got it

How to stop targeted ads on iPhone

On the Google home page, click on your icon in the top right corner
Select Google Account, or click on this link
Click on Data & Privacy
Find the box that is titled Personalized Ads and click on My Ad Center
In the top right corner, click where it says On
Then on the bottom right, click where it says Turn Off
Then tap Got it

How to stop targeted ads on Android

On the Google home page, click on your icon in the top right corner
Select Google Account, or click on this link
Click on Data & Privacy
Find the box that is titled Personalized ads and click on My Ad Center
In the top right corner, click where it says ON next to Personalized ads
Scroll down and click Turn Off in the bottom right
Then click Got it

Person on Google home page. (Kurt “CyberGuy” Knutsson)

MORE: WAS YOUR PRIVATE DATA BEING SOLD ON THIS DARK WEB MARKETPLACE

Use a VPN for better privacy

Consider using a VPN to protect against being tracked and to identify your potential location on websites that you visit. Many sites can read your IP address and, depending on their privacy settings, may display the city from which you are corresponding. A VPN will disguise your IP address to show an alternate location. See my expert review of the best VPNs for browsing the web privately on your Windows, Mac, Android & iOS devices.

Kurt’s key takeaways

While it can be exhausting taking so many precautions to protect your data, it really pays off at the end of the day. Taking a few steps can make all the difference. But by not protecting yourself, you are leaving yourself susceptible to data collection, targeted ads and even worse. At the end of the day, protecting your privacy is your responsibility.

How do you protect yourself from data collection? Are you worried about Google collecting your data? Let us know by writing us at Cyberguy.com/Contact

For more of my tech tips & security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter

Ask Kurt a question or let us know what stories you’d like us to cover.

Answers to the most-asked CyberGuy questions:

Kurt “CyberGuy” Knutsson is an award-winning tech journalist who has a deep love of technology, gear and gadgets that make life better with his contributions for Fox News & FOX Business beginning mornings on “FOX & Friends.” Got a tech question? Get Kurt’s CyberGuy Newsletter, share your voice, a story idea or comment at CyberGuy.com.

Technology

It’s a new heyday for gas thanks to data centers

Published

3 hours ago

January 30, 2026

Press Room

It’s a new heyday for gas thanks to data centers

The US is now leading a global surge in new gas power plants being built in large part to satisfy growing energy demand for data centers. And more gas means more planet-heating pollution.

Gas-fired power generation in development globally rose by 31 percent in 2025. Almost a quarter of that added capacity is slated for the US, which has surpassed China with the biggest increase of any country. More than a third of that growth in the US is expected to directly power data centers, according to a recent analysis by the nonprofit Global Energy Monitor (GEM).

More gas means more planet-heating pollution

The rush to install more powerful hardware into expanding data centers used for generative AI has led to forecasts of skyrocketing power demand. There’s still a lot of uncertainty about whether AI will become as ingrained in everyday life as tech companies might like, and many proposed data centers could fall flat. Even so, plans to build out more gas plants in the name of AI are stalling efforts to transition to cleaner energy sources.

“There is a risk that this capacity could lock in future emissions and become stranded assets if anticipated electricity demand from AI never materializes,” Jenny Martos, project manager for GEM’s Global Oil and Gas Plant Tracker, said in a press release.

Already, 2026 is shaping up to be a record-smashing year for gas. If all of this year’s proposed projects cross the finish line, it would be an even bigger jump in added capacity than the record set in 2002. That’s pretty remarkable considering the 2000s ushered in America’s so-called “shale gas revolution,” when fracking suddenly unleashed previously hard-to-reach reserves. Gas is now a cheaper power source than coal and creates less carbon pollution when burned. But gas production releases methane, a more potent greenhouse gas than carbon dioxide even though it doesn’t persist in the atmosphere for as long.

Image: Global Energy Monitor

Ramping up electricity generation from gas is also a sharp pivot away from global climate goals. A decade ago, nearly every country on Earth — including its two biggest greenhouse gas polluters, China and the US — signed a historic deal in Paris to limit global warming. The only way to achieve the most ambitious goals set out in the Paris agreement would be to replace fossil fuels with less-polluting alternatives like renewable energy and slash greenhouse gas emissions to net zero by around 2050.

Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.

Justine Calma

Technology

Thousands of iPhone apps expose data inside Apple App Store

Published

4 hours ago

January 30, 2026

Press Room

Thousands of iPhone apps expose data inside Apple App Store

NEWYou can now listen to Fox News articles!

Apple often promotes the App Store as a secure place to download apps. The company highlights strict reviews and a closed system as key protections for iPhone users. That reputation now faces serious questions.

New research shows that thousands of iOS apps approved by Apple contain hidden security flaws. These flaws can expose user data, cloud storage and even payment systems.

The issue is not malware; it’s poor security practices baked directly into the app code.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

APPLE WARNS MILLIONS OF IPHONES ARE EXPOSED TO ATTACK

Cybernews researchers found that many iOS apps store sensitive secrets directly inside app files, where they can be easily extracted. (Kurt “CyberGuy” Knutsson)

What researchers discovered inside iOS apps

Security researchers at Cybernews, a cybersecurity research firm, analyzed the code of more than 156,000 iPhone apps. That represents about 8% of all apps available worldwide.

Here is what they found:

Over 815,000 hidden secrets inside app code
An average of five secrets per app
71% of apps leaked at least one secret

These secrets include passwords, API keys and access tokens. Developers place them directly inside apps, where anyone can extract them. According to Cybernews researcher Aras Nazarovas, this makes attackers’ jobs much easier than most users realize.

What are hardcoded secrets in simple terms?

A hardcoded secret is sensitive information saved directly inside an app instead of being protected on a secure server. Think of it like writing your bank PIN on the back of your debit card. Once someone downloads the app, they can inspect its files and pull out those secrets. Attackers do not need special access or advanced hacking tools. Both the Cybersecurity and Infrastructure Security Agency and the Federal Bureau of Investigation warn developers not to do this. Yet it is happening at a massive scale.

Cloud storage leaks exposed huge amounts of data

One of the most serious problems involves cloud storage. More than 78,000 iOS apps contained direct links to cloud storage buckets. These buckets store files such as photos, documents, receipts and backups. In some cases, no password was required at all. Researchers found:

836 storage buckets are fully open to the public
Over 76 billion exposed files
More than 406 terabytes of leaked data

This data included user uploads, registration details, app logs and private records. Anyone who knew where to look could view or download it.

APPLE PATCHES TWO ZERO-DAY FLAWS USED IN TARGETED ATTACKS

This chart shows the most common types of hardcoded secrets found inside iOS apps, with Google-related keys appearing most often, according to Cybernews research. (Cybernews)

Firebase databases were also left open

Many iOS apps rely on Google Firebase to store user data. Cybernews found more than 51,000 Firebase database links hidden in app code. While some were protected, over 2,200 had no authentication. That exposed:

Nearly 20 million user records
Messages, profiles, and activity logs
Databases that are mostly hosted in the U.S.

If a Firebase database is not locked down, attackers can browse user data like a public website.

Payment and login systems were at risk too

Some of the leaked secrets were far more dangerous than analytics or ads. Researchers discovered secret keys for:

Stripe, which handles payments and refunds
JWT authentication systems that control logins
Order management tools used by shopping apps

A leaked Stripe secret key can allow attackers to issue refunds, move money or access billing details. Leaked login keys can let attackers impersonate users or take over accounts.

AI and social apps were among the worst offenders

Some of the apps with the largest leaks were related to artificial intelligence. According to VX Underground, security firm CovertLabs identified 198 iOS apps leaking user data. The worst known case was Chat & Ask AI by Codeway. Researchers say it exposed chat histories, phone numbers and email addresses tied to millions of users. Another app, YPT – Study Group, reportedly leaked messages, user IDs and access tokens. CovertLabs tracks these incidents in a restricted repository called Firehound. The full list of affected apps has not been publicly released, and researchers say the data is limited to prevent further exposure and to give developers time to fix security flaws.

MALICIOUS GOOGLE CHROME EXTENSIONS HIJACK ACCOUNTS

This example shows how sensitive keys like Google API credentials and Stripe payment secrets can be stored directly inside an iOS app’s files, where they are easy to extract. (Cybernews)

Why Apple’s App review can miss hidden security risks

Apple reviews apps before they appear in the App Store. However, the review process does not scan app code for hidden secrets. If an app behaves normally during testing, it can pass review even if sensitive keys are buried inside its files. This creates a gap between Apple’s security claims and real-world risks. Removing leaked secrets is not simple for developers. They must revoke old keys, create new ones and rebuild parts of their apps. That can break features and delay updates. Even though Apple says most app updates are reviewed within 24 hours, some updates take weeks. During that time, vulnerable apps can remain available.

CyberGuy contacted Apple for comment, but did not receive a response before publication.

Ways to stay safe right now

You cannot easily inspect an app for hidden secrets. Apple does not provide tools for that. Still, you can reduce your risk and limit exposure by being selective and cautious. These steps help reduce the risk if an app leaks data behind the scenes.

1) Stick to established app developers

Well-known developers tend to have stronger security teams and better update practices. Smaller or unknown apps may rush features to market and overlook security basics. Before downloading, check how long the developer has been active and how often the app is updated.

2) Review and limit app permissions

Many apps ask for more access than they need. Location, contacts, photos and microphone access all increase the risk of data leaks. Go into your iPhone settings and remove permissions that are not essential for the app to work.

3) Delete apps you no longer use

Unused apps still retain access to data you shared in the past. They may also store information on remote servers long after you stop opening them. If you have not used an app in months, remove it. Here’s how: Open Settings, tap General, select iPhone Storage, and scroll through the list of apps to see when each one was last used. Tap any app you no longer need and select Delete App to remove it and reduce ongoing data exposure.

4) Be cautious with personal and financial details

Avoid entering sensitive information unless it is absolutely necessary. This includes full names, addresses, payment details and private conversations. AI apps are especially risky if you share deeply personal content.

5) Use a password manager for every account

A password manager creates strong, unique passwords for each app and service. This prevents attackers from accessing multiple accounts if one app leaks data. Never reuse passwords tied to your email address.

Next, see if your email has been exposed in past breaches. Our No. 1 password manager pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords and secure those accounts with new, unique credentials.

Check out the best expert-reviewed password managers of 2026 at Cyberguy.com.

6) Change passwords tied to exposed apps

If an app uses your email address for login, change that password immediately. Do this even if there is no confirmation of a breach. Attackers often test leaked credentials across other services.

7) Consider using a data removal service

Some leaked data ends up with data brokers that sell personal information online. A data removal service can help find and remove your details from these databases. This reduces the chance that exposed app data gets reused for scams or identity theft.

While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.

8) Monitor your accounts for unusual activity

Watch for unexpected emails, password reset notices, login alerts, or payment confirmations. These can signal that leaked data is already being abused. Act quickly if something looks off.

9) Pause use of risky AI and chat apps

If you use AI apps for private conversations, consider stopping until the developer confirms security fixes. Once data is exposed, it cannot be pulled back. Avoid sharing sensitive details with apps that store conversations remotely.

Kurt’s key takeaways

Apple’s App Store still offers important protections, but this research shows it is not foolproof. Many trusted iPhone apps quietly expose data due to basic security mistakes. Until app reviews improve, you need to stay alert and limit how much data you share.

How many apps on your iPhone have access to information you would not want exposed? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Kurt “CyberGuy” Knutsson is an award-winning tech journalist who has a deep love of technology, gear and gadgets that make life better with his contributions for Fox News & FOX Business beginning mornings on “FOX & Friends.” Got a tech question? Get Kurt’s free CyberGuy Newsletter, share your voice, a story idea or comment at CyberGuy.com.

Technology

Apple just had a record-breaking iPhone quarter

Published

15 hours ago

January 29, 2026

Press Room

Apple just had a record-breaking iPhone quarter

Apple says the iPhone had its “best-ever” quarter, with revenue hitting more than $85.3 billion over the past few months. The company announced the news as part of its Q1 2026 earnings report, which also revealed record-breaking revenue of $143.8 billion, up 16 percent when compared to the same time last year.

“iPhone had its best-ever quarter driven by unprecedented demand, with all-time records across every geographic segment, and Services also achieved an all-time revenue record, up 14 percent from a year ago,” Apple CEO Tim Cook says in the press release.

Apple’s services revenue, which includes subscriptions like Apple Music, iCloud, and Apple TV surged 14 percent year over year, while Mac and wearable revenue were down.

In the coming months, Apple will bring promised AI-powered personalization features to Siri. Apple is partnering with Google to power this upgrade, which will use a custom version of Google’s Gemini AI model.

The company is also acquiring an AI startup, called Q.ai, for $2 billion, according to the Financial Times. Though there aren’t any details on how Apple plans to use the startup’s technology, the Financial Times reports that Q.ai’s patents “show its technology being used in headphones or glasses, using ‘facial skin micro movements’ to communicate without talking.”