A study by Purdue University, West Point, and Florida International University found that over 12.5% of mobile apps marketed to US military personnel contain code from foreign entities, including Chinese and Russian companies.

The research analyzed over 220 apps, revealing that 64% include third-party SDKs for analytics and advertising, with 7% containing code from nations designated as adversaries by the Pentagon.Notable examples include Huawei's HMS Core in 12 apps and Russian ad services from Yandex.Researchers warn that such code could enable adversaries to track troop locations, expose unit movements, and compromise sensitive military sites.The Pentagon has acknowledged threats from data brokers exploiting location information to target personnel in active war zones.Despite concerns, most users lack transparency about data practices, and institutional guidance on app usage is often inadequate.

The study highlights the need for better privacy controls, including in-phone warnings for foreign code and stricter regulations on military-marketed apps.