Chinese-Linked VPNs Still Listed on App Stores After Report

• VPNs with Chinese military links remain listed on app stores despite security concerns.
• Investigation traced VPNs with Chinese military links to Qihoo 360, a sanctioned company.
• These VPNs risk data sharing due to China’s data laws and unclear policies.

Surveys conducted in April revealed that more than 20 VPN apps linked to the Chinese military remained listed on both the Apple App Store and Google Play Store. Two months later, an investigation by the Tech Transparency Project confirms that over 10 of these apps are still available, raising concerns about user data and national security.

The ownership of these VPN services is obscured by shell companies, but connections to Qihoo 360, a company designated as a "Chinese Military Company" by the US and sanctioned in 2020, have been uncovered. Popular VPNs like Turbo VPN, VPN Proxy Master, Thunder VPN, Snap VPN, and Signal Secure VPN are among those traced to Qihoo 360 and still downloadable in both US and UK app stores.

These VPNs were found on the Apple Store: X-VPN, Ostrich VPN, VPNIFY, VPN Proxy OvpnSpider, WireVPN, Now VPN, Speedy Quark VPN, Best VPN Proxy AppVPN, HulaVPN, and Pearl VPN.

These Chinese-linked VPNs were all found on the US Google Play Store: Turbo VPN, VPN Proxy Master, Snap VPN, and Signal Secure VPN

Chinese data laws allow the government to demand user data, and lacking verified no-logs policies, these VPNs can collect IP addresses, browsing history, device IDs, and location. Sharing such metadata with authorities poses risks, particularly for American users, although the exact scope of the threat remains unclear.

While Apple and Google’s policies prohibit VPNs that misuse user data, the continued presence of these apps, often featuring in-app purchases, potentially profits the app stores, which charge via commission structures. Apple charges up to 30% on in-app sales, while Google charges 15–30%, depending on revenue.

Apple states it enforces strict developer guidelines around data practices and will take action against violations. Google emphasizes compliance with legal standards and its commitment to user privacy, removing apps that breach its terms.

Given the persistent risk, users are advised to steer clear of these questionable VPN services. Instead, reputable VPN providers with transparent no-logs policies should be chosen, whether paid or free VPNs, to ensure genuine privacy protection without compromising data security.