After a flurry of statements from carriers and manufacturers who claim not to install the Carrier IQ tracking software, we've finally gotten an official statement from Sprint, which admits to using Carrier IQ but says it's just for analyzing network performance. Sprint says it collects "enough information to understand the customer experience with devices on our network," but that it can't look at the contents of messages, photos, or videos using Carrier IQ. Of course, this story broke when a Sprint HTC EVO 3D was shown logging keystrokes and call information, so the question remains if Carrier IQ on Sprint phones can monitor, store, or send that data — we'll ask for a clarification.
Sprint also says that its privacy policy clearly says that it collects information about how devices are functioning and being used, and that "Carrier IQ is an integral part of the Sprint service." That sounds to us like Carrier IQ should be covered under Sprint's privacy policy, but the link isn't explicitly made — we're also following up to make sure that's accurate and to find out what options there are for customers who'd like to turn Carrier IQ off. Here's the full statement:
Carrier IQ provides information that allows Sprint, and other carriers that use it, to analyze our network performance and identify where we should be improving service. We also use the data to understand device performance so we can figure out when issues are occurring. We collect enough information to understand the customer experience with devices on our network and how to address any connection problems, but we do not and cannot look at the contents of messages, photos, videos, etc., using this tool. The information collected is not sold and we don't provide a direct feed of this data to anyone outside of Sprint.
Sprint is well known for our serious commitment to respecting and protecting the privacy and security of each customer's personally identifiable information and other customer data. A key element of this involves communicating with our customers about our information privacy practices. The Sprint privacy policy makes it clear we collect information that includes how a device is functioning and how it is being used. Carrier IQ is an integral part of the Sprint service. Sprint uses Carrier IQ to help maintain our network performance.

There are 46 Comments. Add yours.
At least someone fessed up. About time.
Posted on Dec 01, 2011 | 1:54 PM EST reply Recommend (7) Flag actions
I agree that Sprint did the right thing by responding openly and expeditiously. The most significant point for me though, is that our keystrokes, including our passwords, are being transmitted openly and without encryption. This leaves accounts and totally exposed and has financial and identity complications. This demands prompt action by Sprint, HTC, and Google or the American legal system.
Posted on Dec 02, 2011 | 10:58 AM EST via mobile reply Recommend Flag actions
Hahahaha. Sprint continues its philosophy of “blame the customer not the network”
Posted on Dec 01, 2011 | 1:54 PM EST reply Recommend (2) Flag actions
Where do they blame the customer?
Posted on Dec 01, 2011 | 2:05 PM EST reply Recommend (14) Flag actions
I think what he’s saying is Sprint uses the customer as guinea pigs to “make better” their service, which unfortunately results in a breach of privacy. So instead of Sprint being able to fix their network on their own, they use customers’ information without the customer’s knowledge, and that’s kinda messed up.
Posted on Dec 01, 2011 | 2:44 PM EST reply Recommend (1) Flag actions
Actually every carrier uses information from their customers phone use for improving their system. Sprint just chooses to use software developed by Carrier IQ to do it. Every carrier has access to everything you use the phone for. Its their network, not yours. Verizon is trying to look good by not using this software but I’m sure they use something that is the equivalent in order to get information about their network. I’m not saying the type of information that was found to be collected by Carrier IQ is not alarming especially keystroke info. Cell phone providers are required by law to keep keep information about your cell phone use such as text messages, phone calls, and web use for law enforcement reasons.
Posted on Dec 01, 2011 | 3:54 PM EST reply Recommend (4) Flag actions
Giving you a thumbs up for the good, LOGICAL post. Furthermore I’m amused that this is such a big story now since Android developers on XDA forums have known about this stuff since last year…
Posted on Dec 01, 2011 | 5:51 PM EST reply Recommend (2) Flag actions
I’m sorry, but clearly you don’t work in a company that has to make things work for hundreds of thousands or millions of people at a time. I do. You absolutely NEED to be able to look at and analyze customer behavior to make your business work at that scale. It’s the WHOLE point of analytics.
Posted on Dec 01, 2011 | 5:51 PM EST reply Recommend Flag actions
How come customers are not being paid to test their stuff? Are these customers being credited back the data being used to test the network? My services don’t come cheap.
Posted on Dec 02, 2011 | 2:15 AM EST reply Recommend Flag actions
This is not “testing.” This is “ensuring a basic level of service quality.” You can’t do that on the scale of millions of users without knowing at least some of what the users are doing in one way or another.
Posted on Dec 14, 2011 | 12:28 AM EST reply Recommend Flag actions
In his head.
Posted on Dec 01, 2011 | 2:45 PM EST reply Recommend (3) Flag actions
Actually this quote: The Sprint privacy policy makes it clear we collect information that includes how a device is functioning and how it is being used. It reeks to me of “Well you should have read your privacy policy and you’d know this.” While true, it’s still a weird, defensive angle to take when admitting to using CarrierIQ
Posted on Dec 01, 2011 | 6:21 PM EST reply Recommend Flag actions
Am I suppose to believe this?
Posted on Dec 01, 2011 | 1:55 PM EST reply Recommend Flag actions
maybe not “this” specifically, but do believe our privacy is not as private as we would like (or even hope) it to be. it’s the stuff that “you don’t know that you don’t know” that will haunt us
Posted on Dec 01, 2011 | 1:57 PM EST reply Recommend Flag actions
maintain network performance, yeah right.
Posted on Dec 01, 2011 | 1:55 PM EST reply Recommend (1) Flag actions
Dear Sprint, if you’re not looking at our messages, then why is your build of CarrierIQ looking at them? No need to be collecting data you don’t want.
Posted on Dec 01, 2011 | 1:56 PM EST reply Recommend (10) Flag actions
Exactly, plus now that everyone knows about it some nefarious hacker could take advantage of this since the information is logged.
Posted on Dec 01, 2011 | 2:15 PM EST reply Recommend (2) Flag actions
I question if they actually use this data. It took me a year to get them to admit their entire network in Western Idaho is over capacity…
Posted on Dec 01, 2011 | 1:57 PM EST reply Recommend Flag actions
Just because they use the data doesn’t mean that they’re going to fix anything.
It’s amazing how many areas are over capacity but they (all carriers) have wide tolerances for acceptable performance. The wired carriers have been the same way. Try to pin down a representative to a guarantee of performance for just about anything.
Posted on Dec 02, 2011 | 2:49 AM EST reply Recommend Flag actions
Is the snooping grounds for contract termination?
Posted on Dec 01, 2011 | 1:59 PM EST reply Recommend Flag actions
Probably not if it’s in the contract as Sprint is suggesting.
Posted on Dec 01, 2011 | 2:05 PM EST reply Recommend (1) Flag actions
I was worried that would be the reply.
Posted on Dec 01, 2011 | 2:08 PM EST reply Recommend Flag actions
If you root your phone (assuming its Android), you can install a custom PRL and heavily roam on the Verizon network. Sprint will probably then drop you on its own without an ETF.
Posted on Dec 01, 2011 | 2:30 PM EST via mobile reply Recommend (1) Flag actions
Sounds dirty. I like it. Already have CM7.1 running, so that shouldn’t be too hard.
Posted on Dec 01, 2011 | 2:38 PM EST reply Recommend Flag actions
Just install the 00000 PRL or whatever. Thats a Verizon PRL. You’ll get great speeds and within a month they will force you out of their contract.
Posted on Dec 01, 2011 | 3:44 PM EST reply Recommend Flag actions
I wonder how long sprint keeps the info for. My current phone doesn’t have it, but my last phone sure as hell did.
Posted on Dec 01, 2011 | 2:00 PM EST reply Recommend Flag actions
Also, kind of off topic. I love how the Verge staff, Nilay in particular, is killing it with all this carrier IQ coverage. Reminds me of the “This is the Playstation Phone” day back at Engadget.
Posted on Dec 01, 2011 | 2:03 PM EST reply Recommend (1) Flag actions
I think I might be in the minority here, but I really couldn’t care less. Nothing on my phone will get me arrested. If they use Carrier IQ to look at how my user experience is, even if they have the ability to do more than that, I’m happy they are at least admitting to using it and hopefully it goes as far as them at least considering fixing networks in some places.
Posted on Dec 01, 2011 | 2:00 PM EST reply Recommend (1) Flag actions
If they are keylogging, they could have access to passwords, credit card info, etc.
Nothing that could get you arrested, but definitely something that you should worry about.
Posted on Dec 01, 2011 | 2:03 PM EST reply Recommend (8) Flag actions
You’re missing the entire point.
Posted on Dec 02, 2011 | 12:59 AM EST reply Recommend Flag actions
at least they are honest
Posted on Dec 01, 2011 | 2:10 PM EST reply Recommend Flag actions
Not if the XDA Dev is correct and they were logging keystrokes.
Posted on Dec 01, 2011 | 2:12 PM EST reply Recommend Flag actions
Just because IQ is capable of it, does not mean that’s how Sprint is using. I’m all for a healthy distrust of corporations, but damn some of the paranoia ppl exhibit is mind boggling.
Posted on Dec 01, 2011 | 2:48 PM EST reply Recommend (2) Flag actions
The initial reports from the XDA dev was that Carrier IQ was being used by Sprint to log his EVO 3D’s keystrokes. If that is what they are using it for, then it is a big issue.
Posted on Dec 01, 2011 | 3:01 PM EST reply Recommend Flag actions
Admitting to only collecting this information and not saying what it exactly does with the information doesn’t make them at all “honest.”
Posted on Dec 02, 2011 | 12:58 AM EST reply Recommend Flag actions
That’s total BS on their side. They don’t need to have any software installed on the smartphones to track quality of their network. They just have to use the functionalities of their existing infrastructure to get that data.
But obviously, “enough information to understand the customer experience” is a PR excuse saying that they want to keep a close eye on their users…
Posted on Dec 01, 2011 | 2:13 PM EST reply Recommend Flag actions
I hope they keep this information as safe as our credit card numbers. Punks.
Posted on Dec 01, 2011 | 2:16 PM EST reply Recommend Flag actions
Sprint may not be able to “look at the contents of messages, photos, videos, etc”, but what about keystrokes associated with certain website logins, i.e. financial institution websites etc? not quite clear on that (yet)!
Posted on Dec 01, 2011 | 2:39 PM EST reply Recommend Flag actions
then why the hell does my data still suck! as it has for the past 2 years almost
Posted on Dec 01, 2011 | 3:24 PM EST reply Recommend (3) Flag actions
No kidding, maybe they should use something else, doesn’t seem to be working.
Posted on Dec 01, 2011 | 3:39 PM EST reply Recommend (1) Flag actions
I love the update feed on here for things like this.
Posted on Dec 01, 2011 | 5:01 PM EST reply Recommend Flag actions
LOL, isn’t it enough to analysis your own network by checking out your customer services dept???
All the carriers are guilty in this case . I guess Rogers, Bell and Telus are on the same boat even though they might use different softwares.
Posted on Dec 01, 2011 | 5:22 PM EST reply Recommend Flag actions
I want to see a copy of all the carriers’ EUA’s. I wouldn’t be surprised if something regarding this is mention, and then signed off on by the customers. I know it’s a lot, and kind of cliche’, but it’s all in the fine print, as they say. Just because it’s not explicitly lined out to the customer doesn’t mean that it wasn’t part of the agreement all along, and that all relevant documents were not readily available for review. If they could prove me wrong on this, I’d say go ahead, tar-and-feather whomever you like.
Just to be clear, I don’t agree with what’s been going on here, but I simply haven’t been convinced that either the carriers or CIQ have done anything illegal…
Posted on Dec 01, 2011 | 6:12 PM EST reply Recommend Flag actions
Someone should tell Sprint that CIQ is working for them, since Sprint’s network performance is so terrible. PR people are morons.
Posted on Dec 01, 2011 | 6:47 PM EST reply Recommend Flag actions
They still can’t get their speeds right.
Posted on Dec 01, 2011 | 10:04 PM EST reply Recommend Flag actions
T-Mobile should by Sprint, and then AT&T can buy…that….thing…
Posted on Dec 02, 2011 | 6:49 AM EST reply Recommend Flag actions
Something to say? Choose one of these options to log in.