A growing number of public schools and colleges in the U.S. are moving to ban TikTok – the popular Chinese-owned social media app that allows users to share short videos.

They are following the lead of the federal government and several states, that are banishing the social media app because authorities believe foreign governments – specifically China – could use the app to spy on Americans.

The app is created by ByteDance, which is based in China and has ties to the Chinese government.

The University of Oklahoma, Auburn University in Alabama and 26 public universities and colleges in Georgia have banned the app from campus Wi-Fi networks. Montana’s governor has asked the state’s university system to ban it.

Some K-12 schools have also blocked the app. Public schools in Virginia’s Stafford, Prince William and Loudoun counties have banned TikTok on school-issued devices and schools’ Wi-Fi networks. Louisiana’s state superintendent of education recommended that schools in the state remove the app from public devices and block it on school-issued devices.

As a researcher who specializes in cybersecurity, I don’t believe these schools are overreacting. TikTok captures user data in a way that is more aggressive than other apps.

The version of TikTok that is raising all these concerns is not available in China itself. In an effort to protect Chinese students from the harmful effects of social media, the Chinese Communist Party has issued a rule that limits the time students can spend on TikTok to 40 minutes a day. And they can view only videos with a patriotic theme or educational content such as science experiments and museum exhibits.

All major social media platforms raise privacy concerns and include security risks for users.

But TikTok does more than the rest. Its default privacy settings allow the app to collect much more information than the app needs to actually function.

Every hour, the app accesses users’ contact lists and calendars. It also collects the location of devices used to access the service and can scan hard drives attached to any of those devices.

...continued