Instagram tracking user behaviour, data via in-app browser, says report

The Instagram app can track every user interaction — including inputs such as addresses, passwords, text selections, every single tap, and screenshots — using external websites accessed through the in-app browser, a report suggests.

The report said the app injected JavaScript code into every website, including when clicking on ads, allowing the company to monitor user interactions. Meta Platforms, the owner of Instagram, said the script that the Instagram app injected helped it “aggregate events” and respect App Tracking Transparency opt-out choice.