Location? Oh sweet summer child.
Tiktok's Android app has been disassembled enough to tell that the built-in browser likely contains a keylogger, but also contains the ability to receive plaintext commands and execute them in the Java VM.
Now realize that tiktok likely has location, camera, photo, and microphone permissions.
Oh yeah, and they've been spending lots of effort on anti-virtual-machine and obfuscation techniques.
A data leak at Alibaba revealed they're collecting: GPS locations, full lists of
mobile contacts, SMS logs, IMSI numbers, IMEI numbers, device models and versions, stored
app data from previous installations, and memory data.
https://penetrum.com/tiktok/Penetrum_TikTok_Security_Analysi...