White House App Auto-Installs on Federal Phones, Sparking Cybersecurity and Privacy Concerns
Federal workers report immediate reinstallation after deletion attempts, while experts flag data sharing with third parties and widgets from a Russian firm
The White House app has been automatically downloaded onto the work phones of millions of US federal employees, including staff at the Department of Agriculture, the State Department, and the Department of Labor. The application, developed by Ohio-based firm 45Press, cannot be uninstalled by users, with employees reporting that attempts to delete the software result in its immediate reinstallation. Workers who spoke to WIRED on condition of anonymity cited fears of retaliation for their concerns.
The app, which debuted in March, features a button allowing users to text President Trump with a pre-filled message reading "Greatest President Ever." Its news section curates sources including Fox, Breitbart, Reuters, and The New York Post, presenting content that employees described as favouring the administration. One government worker characterised the content as "shooting pure unadulterated propaganda into our veins," while another noted that the editorial standards of included outlets may be compromised.
Cybersecurity experts raised alarms shortly after the app’s launch, noting that it initially shared user location and IP addresses with third parties. An investigation by NOTUS further revealed that the app incorporated widgets created by Elfsight, a Russia-based company, which exposed the personal information of White House officials. Elfsight stated it reviewed the findings, implemented a fix, and shared details of the remediation with relevant contacts.
The White House maintains that the app is secure and does not require users to create an account or enter data. Spokesperson Olivia Wales stated that government devices typically include preinstalled apps to provide value to employees' day-to-day work. However, federal workers have expressed alarm over potential security vulnerabilities on devices used for diplomatic communications, particularly given the app’s inability to be removed from phones used for sensitive foreign contacts.
According to the System for Award Management, 45Press received $1.5 million in government contracts and was eligible for more than $8 million. While the State Department confirmed that department-issued devices are configured to meet federal security requirements, it declined to elaborate on specific measures taken regarding the app. Several employees noted they rarely use their government-issued phones or have not actively used the app, while others reported that not all agencies, such as the General Services Administration, have pushed the software to their devices.
