react-native-background-geolocation icon indicating copy to clipboard operation
react-native-background-geolocation copied to clipboard

Bring back Encryption

Open throwaway34241 opened this issue 1 year ago • 10 comments

Your Environment

  • Plugin version: 4.10.1
  • Platform: both
  • OS version: n/a
  • Device manufacturer / model: n/a
  • React Native version (react-native -v): n/a
  • Plugin config
BackgroundGeolocation.ready({
+  encrypt: true
});

Expected Behavior

I propose to bring back the encryption feature, removed in #1246. As far as I understand, it was removed because the RNCryptor package was flagged as a virus. Maybe we can use another library, e.g. a pure JS one?

AFAIU, the previous implementation encrypted the data before it entered the local on-device SQLite database. I personally think this is overkill, I think it solves a threat model that's limited to maybe people whose personal locations are really sensitive data with risk of the device being accessed. But for the huge majority of use cases, I believe encryption before sending to the HTTP server is enough, so that the location data is stored encrypted on the server.

Actual Behavior

No encryption.

Steps to Reproduce

n/a

Context

Since precise location data (as provided by this library) is considered personally identifiable information, I think adding encryption is going in the right direction.

Debug logs

n/a

throwaway34241 avatar Mar 20 '23 09:03 throwaway34241