IT Services warns campus of DeepSeek app security and privacy weaknesses.
As a precautionary measure to protect University of Windsor networks and data, it is recommended that all members of the University of Windsor community remove the DeepSeek App from their mobile devices due to several security and privacy vulnerabilities and weaknesses.
DeepSeek is a Chinese artificial intelligence (AI) application similar to ChatGPT and Gemini and it is currently the #1 app on the Apple Store.
A recent third-party audit of DeepSeek’s mobile app for the Apple iOS operating system has found several critical vulnerabilities concerning security and privacy issues including lack of transport layer security and several poor data encryption practices.
These weaknesses expose any data transmitted or stored, by the DeepSeek App, to potential device tracking and eavesdropping through various network-based and cryptographic attacks.
While the audit was performed for the Apple iOS operating system there are also concerns of lack of transport layer security for the Android app and IT Services expects all weaknesses to apply to both mobile platforms based on investigations done at other Ontario Universities.
Users of the DeepSeek Platform (app and web) should be aware that all data collected are stored in the People’s Republic of China, which means it is not protected by the same legal privacy laws as those in North America and Europe.
Please direct any questions to the IT Service Desk:
- Opening a ticket
- Calling 519-253-3000 ext. 4440