Carrier IQ is the name of an app that was secretly installed on millions of Android, BlackBerry, and Nokia smartphones as a rootkit -- a piece of software that has root access to all of the smartphone's systems, and can't be removed or detected by conventional means. The Carrier IQ software was bundled with these phones when they were sold, by either the manufacturer or the carrier, and most owners of smartphones with Carrier IQ installed do not know they have it.
Carrier IQ was discovered by Android security researcher Trevor Eckhart, and has been the subject of ongoing research by the experts at XDA-Developers. The company that makes Carrier IQ sent Eckhart a cease-and-desist letter after he published his research, but withdrew it after the Electronic Frontier Foundation's team of legal defenders challenged the letter.
Carrier IQ's website says that over 140 million smartphones have the app installed. Is your phone among them? Here's a partial list of which devices may be affected:
Apple iPhone
Erica Sadun of The Unofficial Apple Weblog has compiled information found by iPhone jailbreak programmers, which shows "Carrier IQ references" in the latest version of iOS. The "probably benign" references, however, may not be enabled unless a flag called DiagnosticsAllowed is set, and they don't seem to do anything more than monitor call signal strength -- one of the main features that Carrier IQ advertises its software for.
Samsung Android smartphones
Eckhart has posted screenshots of the Carrier IQ software, which show what it looks like before it is modified: An actual app, which lets you choose what you want to give feedback on.
Android expert k0nane on the XDA-Developers forum posted screenshots of what the app looks like on Samsung phones, as well as technical background. It's been heavily modified, with an array of switches to control which of your activities are logged. You can turn it off, but it requires advanced skill to access the app to begin with.
HTC Android smartphones
Unlike the Samsung phones, HTC phones' version of Carrier IQ has had its menu stripped down to the point where it's impossible to tell what each option does from looking at it. This prevents HTC smartphones' owners from disabling the app from inside it, even if they can find it to start with.
Smartphones on Sprint's network
According to Eckhart, "Sprint is known to collect carrier IQ data because users have the application running reporting to them, but have no privacy policy, retention policy, or public information on what they use the data for." Even a Sprint phone purchased second-hand and used only on Wi-Fi will still report in to Sprint.
Smartphones on Verizon's network
Verizon has publicly acknowledged what data it collects, and that it uses the data it collects to help it serve ads (among other things). It has given its customers the choice to opt out of having their data used for these purposes, but not to opt out of having it collected to begin with.
Jared Spurbeck is an open-source software enthusiast, who uses an Android phone and an Ubuntu laptop PC. He has been writing about technology and electronics since 2008.




3 comments