Reward App Accused Of Harvesting Sensitive Data After Sprint To Top Of App Charts

Subheadline: Freecash climbed the U.S. app charts on the back of flashy TikTok ads and heavy marketing; Apple removed it Monday after researchers flagged extensive personal data collection and misleading promotions.

A mobile rewards app that rode a wave of social-video advertising into the app-store top ranks has been pulled from Apple’s store after researchers accused it of hoarding sensitive user information and using deceptive tactics to win installs. Freecash, which advertised easy earnings for casual mobile activity on platforms such as TikTok, reached as high as the No. 2 spot on Apple’s U.S. App Store before the removal; it remained available on Google Play as of Monday afternoon. The German owner of the product denied the most serious accusations when contacted by reporters.

Security investigators say the software does more than hand out small rewards for installing games and completing offers. A technical review by an anti-malware firm concluded the app collected an unusually broad set of personal attributes — including ethnicity, religious identifiers, intimate-life signals, sexual orientation, health indicators and certain biometric markers — and operated largely as a middleman, pairing paying game makers with audiences likeliest to spend. Researchers also raised alarms about the way the program promoted titles that rely on in-app purchases to generate revenue.

Market-intelligence figures show how quickly the app’s popularity ballooned. App-store tracking data indicate Freecash jumped from roughly nine-tenths of a million downloads in October to about five-and-a-half million by January, sending it to the top tier of the App Store. Downloads reportedly peaked at nearly six million in February and then slid to roughly half that level by April. Analysts say the rapid rise helped sustain the app in daily top-five rankings for weeks after it began aggressive promotional campaigns.

The app’s path into the stores raises further questions. Third-party records suggest an earlier Freecash submission appeared on Apple’s marketplace in spring 2024 but was taken down after a few months after drawing about 70,000 installs. Months later the Freecash name returned when an existing app from a different developer was updated and rebranded. That pattern — exiting the market and reappearing under another developer account — has been documented in past app-store scams and can be used to sidestep prior enforcement. The company behind Freecash says it did not orchestrate fake traffic or misleading campaigns and that its products repeatedly pass platform reviews.

Independent analysts point to a mix of paid social ads, affiliate networks and apparent manipulation of discovery signals as the likely engine behind the surge. “Apps like this often rely on large paid install campaigns and third-party promoters, and they can mask or boost ratings to avoid scrutiny,” said Dr. Lena Ortiz, a cybersecurity researcher who studies app fraud. She added that users can be funneled from shiny short-form video ads into offers that reward installs while the underlying value is the data trail those installs generate.

Apple said it removed the app after a review determined the product violated rules that bar misleading promotions and bait-and-switch practices. The company urged users to report suspected scams through its problem-reporting portal. Google said it is investigating the listing on Play. Security experts recommend users uninstall unfamiliar reward apps, revoke app permissions tied to sensitive information, and monitor accounts for unusual activity while authorities and platform operators assess the case.