News · By Ghost Delete · November 14, 2026. Source: CBC Marketplace, "The app trap: Where does your data go?", first broadcast November 13, 2026. Article by Bobby Hristova, Kathleen Coughlin and Rosa Marchitelli. Read the full CBC story.

The App Trap: What CBC Found in Your Apps

CBC Marketplace tested six popular Canadian apps, Tim Hortons, PC Optimum, The Weather Network, Facebook, Amazon and YouTube, and watched in real time where the data goes. Tim Hortons sent data to third parties as soon as the app launched. A search for prenatal vitamins in PC Optimum went to 10 outside companies. Here is what left your phone.

How CBC tested it

Joel Reardon, associate professor of computer science at the University of Calgary, and his team scanned the network traffic of the six apps on Android. Privo scanned the same apps on iOS. Celeste Rollason, an independent analyst formerly with Privo, analyzed the findings with Reardon. They watched, in real time, where each app sent data.

Tim Hortons: data left the moment the app opened

Tim Hortons sent data to third parties as soon as the app launched. One overseas third party got enough to build a digital fingerprint of the device: the device name, a unique device identifier, a list of sensors, camera details, the names of ringtones and alarm sounds, and the names of nearby Wi-Fi routers. Reardon called it "beyond the pale." Tim Hortons says the third party collects this only for fraud prevention, not marketing, and that Tim Hortons does not sell personal information to third parties or data brokers.

PC Optimum: a vitamin search went to 10 outside companies

A search for prenatal vitamins in PC Optimum went to 10 outside companies. One third party got the user's latitude and longitude plus a unique device identifier. An overseas third party got the user's first name, unredacted email address, PC Optimum member number, device identifier, and how the user interacts with the app. Loblaw says it has never sold personal information.

The Weather Network: precise location for targeted ads

When location access was allowed, The Weather Network sent a third party the user's precise latitude and longitude, local weather conditions, and the device advertising ID, for targeted ads. Pelmorex says the Weather Network does not sell user data to third parties and data brokers.

Facebook, Amazon, and YouTube

Facebook, given camera roll access to post one image, collected metadata from other images and videos that were never uploaded. Posted images also had their latitude and longitude collected. The app tracked every scroll and how long users lingered. No data went to third parties during the scan. Meta had no comment.

Amazon collected what users searched for, even sensitive products, plus the device advertising ID. No data went to third parties during the scan. Amazon says it never sells customers' personal data.

YouTube sent no data to third parties during the test. Data only went to the US. No targeted ads appeared while watching a children's video. Google says it does not sell personal information.

What the experts said

Ann Cavoukian, former privacy commissioner of Ontario (1997 to 2014): "You lack total control. It can be used in a variety of unorganized ways. It can come back to haunt you." The Office of the Federal Privacy Commissioner of Canada said the findings raise "a number of concerns." The experts' advice: ask companies what data is being collected and why, ask for it to be deleted when they no longer need it, and delete apps you are not using.

Why this matters for Ghost Delete

CBC's piece is about apps collecting and sharing data, not about data brokers directly. CBC did not find data brokers involved. The honest connection is this: the same personal details these apps collect, names, emails, locations, device identifiers, are the details that end up listed by data brokers. Knowing what leaves your phone is step one. Getting it removed from the listings is step two, and that is the job Ghost Delete is being built to do. Removal is coming soon for the US and Canada, with screenshot proof for every removal.