Alpha Cyber
NewsTLP:CLEAR

Facebook’s VPN Deception: How VPN Compromised Millions in the Name of Privacy

In an era where privacy is increasingly under threat, the line between protection and surveillance is growing dangerously thin.

Alpha Cyber Research2 min readupdated 9 Aug 2025
Mark Zuck Pixels

Facebook’s VPN Scandal: How the Onavo Acquisition Spied on Millions

In an era where privacy is increasingly under threat, the line between protection and surveillance is growing dangerously thin. One of the clearest examples of this is Facebook’s acquisition of Onavo, a VPN service that, instead of protecting users, was used as a mass surveillance tool, harvesting sensitive data under the guise of security.

What Happened?

In 2013, Facebook acquired Onavo, an Israeli developed mobile VPN app, and rebranded it as “Onavo Protect.” While marketed as a free privacy tool designed to help users secure their internet activity, Onavo was doing the exact opposite.

Behind the Scenes:

Onavo routed all mobile traffic through Facebook owned servers.
It logged app usage patterns, web activity, and network behavior in detail.
This data gave Facebook competitive intelligence, which reportedly influenced major business decisions, including the acquisition of WhatsApp and the replication of Snapchat features.
Millions of users, many underage, were unaware their browsing and app data was being monetized.

By 2018, Apple forced Onavo off its App Store for violating privacy policies, and in 2019, Facebook shut it down amid backlash. However, the damage had already been done.

Why This Matters

If a global tech company can repurpose privacy tools into surveillance systems, the risk to businesses and individuals is far greater than most realize.

This case is a cautionary tale about:

Trusting third party tools without independent verification
The importance of network traffic monitoring
How consumer facing app scan be exploited to gather enterprise intelligence

How We Help You Stay Safe

At Alpha Cyber, we specialize in helping organizations identify, assess, and mitigate hidden threats, including those embedded in thirdparty applications and shadow IT.

Our services include:

  • Application & Endpoint Security Audits
  • Data Privacy & Compliance Consulting
  • Employee Awareness Training

Don’t Let “Free” Tools Cost You Your Data

The Onavo case shows that free isn’t always safe, and even wellknown platforms can compromise user privacy for profit.

Let us help you verify the tools your organization and users trust.
Protect your data. Protect your reputation.

Book a security consultation today

Keep reading

Related research

Your Phone is a Narc
News

Your Phone is a Narc: The Systematic Betrayal of Civilian Privacy

Deep Dive // Surveillance Capitalism PUBLISHED: MAY 2026 Your Phone Is a Narc: The Built-In Infrastructure Betraying Civilian Privacy How everyday smartphones are weaponized against civilians without a single line of malware, turning features into informants.

3 min read

Contact

Talk to someone who has seen this before.

You speak directly to the people doing the work, wherever in the world you operate.

Or email [email protected]