Freecash climbed to the top of app charts this year.
Fast rise, odd promises
Freecash's ads have been everywhere on TikTok — short clips promising easy cash for scrolling or playing simple mobile games. Look, those clips worked: the app shot up the charts, at one point reaching the No. 2 spot in the U.S. App Store and sitting high on Google Play for months.
Yet the pitch and the product didn't line up. The app pays users to install and play games, but security researchers found it collected much more personal data than users expected.
Malwarebytes, a cybersecurity company, produced a report that lays out what it sees as a deeper purpose. The firm found that Freecash collected sensitive data — categories that include race, religion, sexual orientation, health and biometric details — and then used that pool to match players with game offers. This games promoted through the app ranged from mainstream releases to casual hits, including Monopoly Go and Disney Solitaire.
Basically, the app lured users with cash promises, pushed them to try or spend on games, and then passed that info to game developers looking for paying customers.
How the ads worked
The advertising that propelled Freecash relied heavily on platform-native formats, particularly short-form video and influencer-style clips on TikTok. Thing is, the creatives often suggested users could make money by doing almost nothing — the videos leaned on FOMO and fast-pay claims.
TikTok moved to remove some of the company's ads after an earlier investigation found the marketing misrepresented how easy it was to cash out. The platform said the ads violated its rules on financial misrepresentation. Freecash disputed that it ran those ads directly, and said third-party affiliates were behind some creatives.
Almedia, the Germany-based company that owns Freecash, pushed back on other accusations too. James Law, Almedia's PR manager, wrote in an email: "Our apps are fully compliant with the Apple App Store and Google Play Store policies, as demonstrated by the fact that they're live and regularly pass platform reviews." He added the company "do[es] not comment on internal product strategy regarding specific app listings."
Data collection and what it means
Malwarebytes described Freecash as functioning like a data broker. Rather than simply paying users small sums to play, the app appears to collect detailed, sensitive information to create profiles that are sold or shared with game publishers and advertisers.
Privacy experts have warned that reward apps often push users to give broad permissions—like location and contacts—which can reveal a lot about them. Freecash's case, researchers argue, illustrates how those permissions can be combined with behavioural signals to build categories that advertisers want: who spends, who plays certain genres, who converts from trial to paid.
That kind of profiling is particularly fraught when it touches on sensitive areas like health or sexual orientation. In jurisdictions with strict privacy rules, those categories get extra legal protection. But even where the law is lighter, the ethical question remains: do people who install a game to earn a small payout understand they're being profiled so intensively?
Platforms respond — slowly
Apple removed Freecash from its App Store after being contacted this week. Google Play kept the app listed as of Monday afternoon, though platform policies around deceptive ad claims and misuse of personal data give both companies levers to act.
Platforms say they use automated tools, human reviewers, and user reports to monitor apps. But the Freecash episode highlights a blind spot: sophisticated affiliate networks and performance marketers can push creative, high-performing ad campaigns that evade early detection and drive huge install volumes before platforms intervene.
Just because an app is live on a store doesn’t mean it keeps following the rules. Almedia pointed to routine platform reviews as proof of compliance. Critics counter that passing automated checks or periodic reviews isn't the same as behaving responsibly at scale.
Why ranking mattered
App-store charts still matter for discovery. High placement drives organic installs, which in turn can push an app even higher — a virtuous circle for legitimate products, and a dangerous amplification for ones using aggressive marketing tactics.
Freecash's climb shows how the combination of viral short-form ads and incentivised installs can distort visibility. Developers and marketers call it growth. Privacy specialists call it targeted amplification built on personal data and behavioural nudges.
Developers of the games that appear on the platform have a commercial incentive to buy users who'll spend. At the same time, users who think they're simply earning pocket money may find their behaviour tracked and monetised in ways they didn't expect.
Where this leaves users
For people who installed Freecash, deleting the app is the immediate, obvious step.
But deletion won't necessarily erase data already harvested and matched. Malwarebytes' report suggests user information had been aggregated and used to create profiles — and once data leaves a device, it's hard to get it back.
Regulators in some countries can pursue companies that gather sensitive categories of personal data without adequate legal basis. Enforcement is uneven globally, though, and it often lags behind the speed of digital marketing trends.
Still, the spotlight on Freecash might prompt swifter enforcement or closer scrutiny of affiliate-driven ad campaigns. Whether that happens depends on what platforms and regulators decide to prioritise.
What Almedia says
Almedia has consistently denied manipulating traffic or running deceptive campaigns. James Law's email framed the company's apps as meeting platform rules and regularly passing reviews. "We don't comment on internal product strategy regarding specific app listings," he added.
That defensive posture hasn't quieted concerns among researchers who say the pattern of advertising, the data collection practices and the app's behaviour merit deeper investigation.
The reality for now is mixed: Apple has removed the app from its store, TikTok has taken down some ads, and Google Play still listed the app as of Monday afternoon. Users and researchers waiting for a fuller accounting may have to be patient.
Related Articles
- Hackers Used Default Passwords to Hijack Crosswalk Speakers — Cities Scrambled
- The Screenmaxxers: People Who Spend Nearly Every Waking Hour on Their Phones
"Our apps are fully compliant with the Apple App Store and Google Play Store policies, as demonstrated by the fact that they're live and regularly pass platform reviews," James Law, Almedia PR manager, wrote in an email.
This article was created with AI assistance.
