The hidden data leak
THE INVESTIGATION: 75 Swedish and 188 Scandinavian Apps
An investigation into how some of Sweden’s most widely used apps are leaking user data – and what this means for digital sovereignty, consumer protection, and national security.
THE INVESTIGATION
75 Swedish apps across finance, healthcare, education, health, and food are among the 188 apps reviewed. Most app publishers are unaware of what their own apps are doing in the background, or why.
The full report is available for download, including methodology, industry findings, and in-depth analysis.
You Own What You Don’t See
Anyone who publishes an app carries the legal responsibility for everything that happens within it. Not knowing what an app does in a live environment is harmful to both the user and the organization behind the app.
Employees’ Phones Are Part of Your Infrastructure
The same apps covered in the investigation are installed on employees’ phones. The same data flows, the same recipients. For a data broker or third party, there is no distinction between a private device and a work device.
Documented Security Efforts Build Oversight Readiness and Trust arbete påverkar både tillsyn och förtroende
Organizations that can demonstrate ongoing information security efforts are better positioned during regulatory oversight. More importantly, the same documentation serves as proof to customers that the product is secure and trustworthy.
“An app that leaks data is also an app that leaks information about your organization.”
VIBEKE SPECHT : PEAK PRIVACY
“This does not apply only to security‑sensitive operations. It applies to all organizations that have information worth protecting.”
ANDREAS LUNDGREN : SHIBUYA
Download the Summary
The concise 12‑page review. Industry‑specific results, selected findings, and conclusions. PDF in Swedish.
Download PDF
The Full Report
A Scandinavian deep dive. 188 apps across finance, healthcare, education, health, and food, including sector‑specific findings and a methodology appendix. Available for download shortly.
The hidden data leak - form
Request a Confidential Briefing
For organizations that want to understand what the investigation may mean for their own apps.
Book an app-date
HOW WE HELP YOU MOVE FORWARD
FROM INSIGHT TO CONCRETE PROTECTION
The investigation reveals what happens behind the scenes in the apps used across Sweden. For organizations ready to take the next step, we have packaged the services required to map, remediate, and monitor risks — with operations hosted in Swedish data centers and under Swedish jurisdiction.
PEAK PRIVACY
A Platform for Autonomous App Compliance and Vulnerability Analysis
Used by the Danish Agency for Digital Government. We make it easy for organizations to demonstrate evidence‑based compliance to regulators, boards, auditors, and customers.
Vibeke Specht : Medgrundare
vibeke@peakprivacy.eu
SHIBUYA
Swedish Cloud Since 1964
We are a family‑owned technology company delivering business‑critical IT from Swedish data centers, with local support and 24/7 monitoring, under Swedish and European jurisdiction.
Andreas Lundgren : Compliance & Security
andreas.lundgren@shibuya.se
shibuya.se