Glassbox

{{Short description|Israeli analytics software company}}

{{About|the analytics company|the game engine GlassBox|SimCity (2013 video game)}}

{{Infobox company

| name = Glassbox Ltd.

| logo = Glassbox Logo 2021.png

| type = Private company

| industry = Software

| website = {{url|www.glassbox.com}}

| location = London, United Kingdom

| founded = 2010

| founders = Yoav Schreiber, Yaron Gueta, Hanan Blumstein

}}

Glassbox is an Israeli software company.{{Cite web|url=https://www.bloomberg.com/profile/company/1658913D:IT|title=Glassbox Ltd - Company Profile and News|website=Bloomberg.com}}{{Cite web|url=https://finovate.com/videos/finovateeurope-2020-glassbox/|title=FinovateEurope 2020 – Glassbox|website=Finovate}} It sells session-replay analytics software and services.{{cite web|last=|first=|date=2021-03-10|title=Glassbox now supports more than One Trillion Customer Journeys annually.|url=https://www.theretailbulletin.com/retail-solutions/glassbox-now-supports-more-than-one-trillion-customer-journeys-annually-10-03-2021/|accessdate=|website=The Retail Bulletin|quote=Glassbox, the leading digital experience analytics provider for web and mobile applications, today announced another year of significant growth and a milestone of supporting more than one trillion digital journeys annually. In 2020, the company saw additional investment, strategic personnel appointments and business growth.}}

History

As of October 2018, Glassbox had raised US$32.5 million of capital funding. In exchange for investing in Glassbox, Washington, DC, equity firm Updata Partners was given two Glassbox board seats.

In April 2020, Glassbox raised US$40 million in series C funding.{{cite web|last=Wiggers|first=Kyle|date=2020-04-07|title=Glassbox raises $40 million to track customer journeys with AI|url=https://venturebeat.com/2020/04/07/glassbox-raises-40-million-to-track-customer-journeys-with-ai/|website=VentureBeat|publisher=|quote=Glassbox, which designs automated solutions to optimize web and mobile apps, today announced that it raised a $40 million funding round. Glassbox’s investments in AI and machine learning manifest in its customer behavior and churn prediction, real-time fraud detection and prevention, and anomaly detection systems, and they could help enterprise clients anticipate issues within apps before they impact the bottom line. Perhaps more importantly, they could enable triaging teams to mitigate problems such as crashes, bugs, or downtime before they occur.}}

In October 2020, Glassbox acquired its rival SessionCam.{{Cite web|last=|first=|date=October 15, 2020|title=Glassbox Acquires SessionCam and Accelerates Vision to Deliver Frictionless Digital Journeys|url=https://finance.yahoo.com/news/glassbox-acquires-sessioncam-accelerates-vision-135000528.html|website=Yahoo! Finance}}

Privacy concerns

{{quote|text=Last year, we published an expose about how Glassbox’s SDK was being adopted by some customers, where they were not fully disclosing to their own customers just how their online actions were being monitored and tracked in the name of quality control; and how and if sensitive data was being sucked up in the process.

It turns out that the story did open up some cracks and help both Glassbox, its customers, and platform operators like Apple and Google (in the case of apps) get on the same page with how well these tools worked, and when.|author=Ingrid Lunden |source=Glassbox raises $40M to track and optimise web user experience, a year after getting dinged over transparency, April 2020{{Cite web|url=https://techcrunch.com/2020/04/07/glassbox-raises-40m-for-tools-to-track-and-optimise-web-user-experience/|title=Glassbox raises $40M to track and optimise web user experience, a year after getting dinged over transparency|website=techcrunch.com/2020/04/07/glassbox-raises-40m-for-tools-to-track-and-optimise-web-user-experience/|date=7 April 2020 }}}}

From at least as early as October 2018, Glassbox promoted its software as allowing its customers' websites or mobile apps to "see exactly what your customers do in real time".{{cite web | title=Glassbox on Twitter: "Imagine if your website or mobile app could see… | website=Twitter | url=https://twitter.com/GlassboxDigital/status/1052311155077722113 | date=2018-10-16 | archive-date=2019-02-05 | archive-url=https://archive.today/20190205194835/https://twitter.com/GlassboxDigital/status/1052311155077722113 | access-date=2020-12-10 | quote=Imagine if your website or mobile app could see exactly what your customers do in real time... This is Glassbox. | url-status=live }}{{Cite web|last=Orbach|first=Meir|date=2020-04-20|title=Top Israeli Startups 2020: Most Promising Logistics and E-Commerce Companies|url=https://www.calcalistech.com/ctech/articles/0,7340,L-3812350,00.html|website=Calcalist}} This prompted some Twitter users to express privacy concerns about Glassbox's software.{{cite web|quote=The answer from one Twitterer: “unacceptable surveillance.” From another: “A perfect nightmare for humanity.”|url=https://nakedsecurity.sophos.com/2019/02/08/iphone-apps-record-your-screen-sessions-without-asking/|title=iPhone apps record your screen sessions without asking|first=Lisa |last=Vaas|website=Naked Security |publisher=Sophos|date=2019-02-08}}

In February 2019, TechCrunch reported that numerous popular applications in Apple's iOS App Store used Glassbox software to record users' activities without the users' informed consent, which compromised users' privacy and contravened the rules of the iOS App Store.{{Cite web|url=https://mashable.com/article/iphone-screen-recording-apps/|title=A bunch of popular iPhone apps silently record your screen, report claims|first=Stan|last=Schroeder|website=Mashable |date=7 February 2019 | access-date=2019-02-08 | archive-url=https://web.archive.org/web/20201107230057/https://mashable.com/article/iphone-screen-recording-apps/?europe=true | archive-date=2020-11-07}}{{cite web | first=Richard | last=Lawler | title=Did you know these iPhone apps record your screen while you use them? | website=Engadget | date=2019-02-07 | url=https://www.engadget.com/2019-02-07-iphone-screen-recording-analytics.html | access-date=2019-02-08 | archive-url=https://web.archive.org/web/20190208180318/https://www.engadget.com/2019/02/07/iphone-screen-recording-analytics/ | archive-date=2019-02-08}}{{Cite web|url=https://appleinsider.com/articles/19/02/06/popular-ios-apps-use-glassbox-sdk-to-record-user-screens-without-permission|title=Popular iOS apps use Glassbox SDK to record user screens without permission|website=AppleInsider | access-date=2019-02-08 | first=Mikey |last=Campbell |date=6 February 2019 | archive-url=https://web.archive.org/web/20190207011952/https://appleinsider.com/articles/19/02/06/popular-ios-apps-use-glassbox-sdk-to-record-user-screens-without-permission | archive-date=2019-02-07}} The affected apps included ones published by Abercrombie & Fitch, Air Canada, Expedia, Hollister, Hotels.com, and Singapore Airlines.{{Cite web|url=https://www.macrumors.com/2019/02/06/iphone-apps-screen-recordings-analytics/|title=Some Popular iPhone Apps Secretly Record Your Screen for Analytics Purposes|website=MacRumors | access-date=2019-02-08 | first=Juli | last=Clover |date=6 February 2019 | archive-url=https://web.archive.org/web/20190206234723/https://www.macrumors.com/2019/02/06/iphone-apps-screen-recordings-analytics/ | archive-date=2019-02-06}}

In response, Apple told app developers that if they continued to flout the rules of the iOS App Store, their apps would be removed from it.{{Cite web|website=TechCrunch | url=https://techcrunch.com/2019/02/07/apple-glassbox-apps/|title=Apple tells app developers to disclose or remove screen recording code | access-date=2019-02-08 | first=Zack | last=Whittaker | date=2019-02-07 |url-status=live | archive-url=https://web.archive.org/web/20190207221508/https://techcrunch.com/2019/02/07/apple-glassbox-apps/ | archive-date=2019-02-07}}{{Cite web|url=https://arstechnica.com/gadgets/2019/02/apple-to-developers-disclose-screen-recording-or-get-booted-from-app-store/|title=Apple to developers: disclose screen recording or get booted from App Store|first=Valentina|last=Palladino|date=February 8, 2019|website=Ars Technica | access-date=2019-02-08 | archive-url=https://web.archive.org/web/20190208152039/https://arstechnica.com/gadgets/2019/02/apple-to-developers-disclose-screen-recording-or-get-booted-from-app-store/ | archive-date=2019-02-08}}{{Cite web|url=https://www.independent.co.uk/life-style/gadgets-and-tech/news/iphone-apple-apps-security-privacy-screen-recording-data-a8770651.html|title=Apple tells apps secretly recording what users do on iPhone to stop immediately|date=February 8, 2019|website=The Independent | access-date=2019-02-08 | first=Andrew | last=Griffin | archive-url=https://web.archive.org/web/20190208232216/https://www.independent.co.uk/life-style/gadgets-and-tech/news/iphone-apple-apps-security-privacy-screen-recording-data-a8770651.html | archive-date=2019-02-08}} However, it was not clear whether Apple's request was heeded.{{cite web|quote=It's unclear whether the affected apps, which include some of the more popular retail and travel brands in the App Store, have complied with Apple's request.|website=Fortune|title=Apple Reportedly Threatens to Take Down Apps that Secretly Record Users' Activity|first=Don |last=Reisinger|archive-url=https://web.archive.org/web/20190208225107/http://fortune.com/2019/02/08/apple-screen-recording-apps/|archive-date=2019-02-08|access-date=2019-02-08|url=https://fortune.com/2019/02/08/apple-screen-recording-apps/|date=2019-02-08}}

Following TechCrunch's investigation, security researchers from Symantec's enterprise mobile threat division found 277 iOS apps and 291 Android apps that employed Glassbox software, including a number of banking and credit card apps, "putting a user's financial information at risk of exposure".{{Cite web|url=https://symantec-enterprise-blogs.security.com/blogs/expert-perspectives/app-analytics-sdks-could-expose-sensitive-data|title=App Analytics SDKs Could Expose Sensitive Data|website=symantec-enterprise-blogs.security.com}} Google, whose Play Store is the Android counterpart of the iOS App Store, did not comment on whether it would expect Android app developers to remove session-replay functionality.{{cite web|quote=Glassbox can also be used by Android app developers, but Google has not commented on whether it would also ban the screen recording code.|url=https://securitytoday.com/articles/2019/02/11/apple-tells-app-developers-to-disclose-or-remove-screen-recording-code.aspx|first=Jessica |last=Davis |title=Apple Tells App Developers to Disclose or Remove Screen Recording Code |website=Security Today |date=2019-02-11 |access-date=2020-12-11}}{{cite web|quote=The third-party analytics tool in question is provided by Glassbox and is also present in Android apps. Google is yet to comment, although its own rules are similar to Apple's: "Apps must not hide or cloak tracking behaviour or attempt to mislead users about such functionality," they contain.|url=https://www.pocket-lint.com/apps/news/apple/147031-apple-will-remove-screen-recording-apps-if-they-don-t-own-up |title=Apple will remove screen recording apps if they don't own up | website=Pocket Lint | access-date=2020-12-11 |date=2019-02-08 |first=Rik |last=Henderson}}

Anti-malware company Avast observed that using session-replay analytics "without even mentioning it is not right, and probably illegal in some countries."{{cite web|url=https://blog.avast.com/iphone-apps-record-users-screens|title=iPhone apps record your taps|date=2019-02-07|author=Avast Security News Team|archive-url=https://web.archive.org/web/20201026191933/https://blog.avast.com/iphone-apps-record-users-screens|archive-date=2020-10-26}} Computer science professor Thomas Keenan, author of the book Technocreep, suggested that people who do not want a company to record their data like this should delete the app concerned.{{Cite web|url=https://globalnews.ca/news/4934004/air-canada-app-records-mobile-screen/|title=Air Canada app records your personal information — and you may have no clue|website=Global News}} IT Pro reported that Glassbox retains session, demographic, and location data for up to 24 months, categorizing it by age, gender, and interests, and may combine it with other information obtained from other companies.{{Cite web|url=https://www.itpro.co.uk/security/32946/widely-used-ios-apps-recording-screens-without-user-permission|title=Widely-used iOS apps recording screens without user permission|website=IT PRO|date=8 February 2019 }}

References