Research investigation shows 'bossware' is spying on workers and sharing their data

Phys · May 29, 2026 · 796 words · By Vanderbilt University

Worker Privacy Corporate Surveillance Regulatory Policy

headphones Listen to the eFinder podcast briefing

Ready to play

Daily briefing

What to know about Worker Privacy

A research investigation by several academic institutions found that nine common workplace monitoring platforms share worker data and online activity with third-party data brokers and tech companies. The report suggests that current privacy protections are insufficient and calls for policymakers to implement stricter regulations on data collection and sharing.

Propaganda risk 30%

Claims checked 9

Techniques found 2

Topics 3

Coverage spectrum

Coverage gap: Low Left coverage

Left0%

Center67%

Right33%

3 sources compared across this story cluster. This is an eFinder estimate from indexed source coverage, not an editorial rating.

What happened

Research investigation shows 'bossware' is spying on workers and sharing their data Sadie Harley Scientific Editor Andrew Zinin Lead Editor A new investigation finds that workplace monitoring platforms are systematically sharing personal data about workers…

Why it matters

The researchers examined nine widely used workplace monitoring platforms—Apploye, Deputy, Desklog, Hubstaff, Monitask, Buddy Punch, Time Doctor 2, Vericlock, and When I Work, tracking how each app collects and shares worker data in practice.

Common ground

The report was authored by researchers at the Khoury College of Computer and Information Sciences at Northeastern University; the Vanderbilt Policy Accelerator at Vanderbilt University; the Center for Consumer Law and Economic Justice at UC Berkeley Law…

Perspective signals

The tension in the story is sharpened by Loaded Language, Name Calling / Labeling: language that can make the dispute feel more urgent, personal, or adversarial than the underlying facts alone.

Follow-up questions

What new context would change how readers understand this Worker Privacy story?
What evidence would most clearly confirm or weaken the claim that The researchers recorded 121 unique instances of worker data being shared with companies including Facebook, Google, Microsoft, and AppLovin?
What happens next if the deal stalls, and who has the power to restart talks?

open_in_new Read the original article: https://phys.org/news/2026-05-bossware-spying-workers.html

analyticsAnalysis

30%

Propaganda Score

confidence: 95%

Minor concerns. Some persuasive language detected, but largely factual.

psychologyPropaganda Techniques Detected

eFinder identified 2 propaganda techniques in this article. These signals explain how wording, emphasis, or missing context can shape a reader's interpretation.

warning

Loaded Language 90% confidence

Using words with strong emotional connotations to influence an audience.

Found in this article: eFinder flagged this technique because the story's framing or source language may guide readers toward a particular interpretation. Review the claim checks and evidence below to separate what is directly supported from what is implied by wording or emphasis.

Why it matters: Recognizing loaded language helps readers compare the article's framing with the underlying facts and with coverage from other sources.

warning

Name Calling / Labeling 80% confidence

Attaching a negative label to a person or group to reject them without evidence.

Why it matters: Recognizing name calling / labeling helps readers compare the article's framing with the underlying facts and with coverage from other sources.

fact_checkClaims Checked

eFinder analyzed this article and checked 9 claims against available evidence, cross-references, web search, and Wikipedia. Here is what the fact-checking layer found.

check_circle Corroborated 4

info Single Source 3

help Insufficient Evidence 1

verified Verified 1

info

Claim 1: “The researchers recorded 121 unique instances of worker data being shared with companies including Facebook, Google, Microsoft, and AppLovin”

SINGLE SOURCE

The specific number '121 unique instances' and the list of companies (Facebook, Google, Microsoft, AppLovin) are mentioned in one detailed report, but not corroborated by other independent sources in the provided evidence.

menu_book

wikipedia NEUTRAL — The Lazarus Group (also known as the Guardians of Peace or Whois Team) is a state-sponsored hacker group made up of unknown members, alleged to be run by the government of North Korea. While not much …
https://en.wikipedia.org/wiki/Lazarus_Group

menu_book

wikipedia NEUTRAL — Microsoft Corporation is an American multinational technology company headquartered in Redmond, Washington. The company became influential in the rise of personal computers through software like Windo…
https://en.wikipedia.org/wiki/Microsoft

menu_book

wikipedia NEUTRAL — The Pirate Bay, commonly abbreviated as TPB, is a free searchable online index of movies, music, video games, pornography and software. Founded in 2003 by Swedish think tank Piratbyrån, The Pirate Bay…
https://en.wikipedia.org/wiki/The_Pirate_Bay

+ 3 more evidence sources

help

Claim 2: “three of nine apps can be set to require giving access to motion sensor data (via accelerometer or gyroscope) to clock in.”

INSUFFICIENT EVIDENCE

No evidence was found in the provided search results to support or refute the claim regarding motion sensor data requirements for clocking in.

verified

Claim 3: “The report was authored by researchers at the Khoury College of Computer and Information Sciences at Northeastern University; the Vanderbilt Policy Accelerator at Vanderbilt University; the Center for Consumer Law and Economic Justice at UC Berkeley Law School; and the Center for Law and the Economy at Columbia Law School.”

VERIFIED

A web search result from the Vanderbilt Policy Accelerator explicitly lists the collaborating institutions: Northeastern University's Khoury College of Computer Science, Columbia Law School's Center for Law and the Economy, the Vanderbilt Policy Accelerator, and UC Berkeley.

menu_book

wikipedia NEUTRAL — This article contains a partial listing of leaders of American universities and colleges, who are usually given the title president or chancellor.
https://en.wikipedia.org/wiki/List_of_leaders_of_universitie…

menu_book

wikipedia NEUTRAL — A Northeastern elite accent is any of the related American English accents used by members of the wealthy Northeastern elite born in the 19th century and early 20th century, which share significant fe…
https://en.wikipedia.org/wiki/Northeastern_elite_accent

menu_book

wikipedia NEUTRAL — Southern Ivy is a term used to describe a university in the Southern United States that is comparable to a university in the Ivy League, usually from the perspective of having a similar level of acade…
https://en.wikipedia.org/wiki/Southern_Ivy

+ 3 more evidence sources

info

Claim 4: “The nine workplace monitoring platforms in the sample shared information about workers' online activities (such as IP address, device information, web pages visited, unique identifiers, etc.) to a total of 145 unique third-party domains”

SINGLE SOURCE

While one source mentions sharing data with third-party domains, the specific number '145 unique third-party domains' is not corroborated by other independent sources in the provided evidence. Other results mention ranges (14 to 54) or general sharing.

menu_book

wikipedia NEUTRAL — 145 may refer to: 145 (number), the natural number following 144 and preceding 146 AD 145, a year in the 2nd century AD 145 BC, a year in the 2nd century BC 145 (dinghy), a two-person intermediate sa…
https://en.wikipedia.org/wiki/145

menu_book

wikipedia NEUTRAL — The Embraer ERJ family (for Embraer Regional Jet) are regional jets designed and produced by the Brazilian aerospace company Embraer. The family includes the ERJ 135 (37 passengers), ERJ 140 (44 passe…
https://en.wikipedia.org/wiki/Embraer_ERJ_family

menu_book

wikipedia NEUTRAL — Scott Wiener (born May 11, 1970) is an American politician who has served as a member of the California State Senate from the 11th district since 2016. A member of the Democratic Party, his district e…
https://en.wikipedia.org/wiki/Scott_Wiener

+ 3 more evidence sources

check_circle

Claim 5: “All (nine of nine) workplace monitoring platforms directly shared identifying worker data including first name, last name, email, and company to third parties.”

CORROBORATED

Multiple sources confirm that all nine examined platforms shared identifying worker data (first name, last name, email, and company) with third parties.

travel_explore

web search NEUTRAL — May 27, 2026 ... All (9 of 9) workplace monitoring platforms directly shared identifying worker data including first name, last name, email, and company to third ...
https://law.vanderbilt.edu/research-shows-bossware-spying-on…

travel_explore

web search NEUTRAL — May 22, 2026 ... For this study, researchers examined nine widely used workplace monitoring platforms used by big name companies, including Ace Hardware, Ben ...
https://techxplore.com/news/2026-05-workers-party-companies-…

travel_explore

web search NEUTRAL — All (9 of 9) workplace monitoring platforms directly shared identifying worker data such as first name, last name, email, and company to third parties in one ...
https://workplacemonitoring.khoury.northeastern.edu/

check_circle

Claim 6: “One third of the workplace monitoring platforms in the sample have features that track workers' precise location at any time—even when the app is in the background or potentially when the worker is clocked out.”

CORROBORATED

Two independent sources confirm that one third (or one in three) of the platforms studied can track precise location, including background tracking.

travel_explore

web search NEUTRAL — One third of the workplace monitoring platforms in the sample have features to track workers' precise location at any time – even when the app is in the ...
https://workplacemonitoring.khoury.northeastern.edu/

travel_explore

web search NEUTRAL — The review provides a detailed understanding of the tensions, contradictions, and challenges related to existing theorisations of workplace surveillance.
https://www.sciencedirect.com/science/article/pii/S014829632…

travel_explore

web search NEUTRAL — May 21, 2026 · One in three platforms studied can track workers' precise location at any time—including when the app is in the background or the worker is off ...
https://vanderbiltpolicyaccelerator.substack.com/p/bossware-…

check_circle

Claim 7: “workplace monitoring platforms are systematically sharing personal data about workers and online activity with hundreds of outside data brokers and big tech companies”

CORROBORATED

Multiple independent web search results confirm that workplace monitoring platforms are systematically sharing personal data and online activity with third-party brokers and tech companies.

travel_explore

web search NEUTRAL — May 27, 2026 ... A new investigation finds that workplace monitoring platforms are systematically sharing personal data about workers and online activity ...
https://law.vanderbilt.edu/research-shows-bossware-spying-on…

travel_explore

web search NEUTRAL — May 21, 2026 ... A new study on workplace monitoring tools found that all nine examined shared worker data with third parties.
https://www.theverge.com/policy/935299/bossware-employer-sur…

travel_explore

web search NEUTRAL — Workplace monitoring platforms shared worker email data with up to 6 third parties, including Microsoft, Facebook, Intercom, ProfitWell, Segment.io, and ...
https://workplacemonitoring.khoury.northeastern.edu/

check_circle

Claim 8: “The researchers examined nine widely used workplace monitoring platforms—Apploye, Deputy, Desklog, Hubstaff, Monitask, Buddy Punch, Time Doctor 2, Vericlock, and When I Work”

CORROBORATED

Two separate web search results explicitly list the nine platforms examined: Apploye, Deputy, Desklog, Hubstaff, Monitask, Buddy Punch, Time Doctor 2, Vericlock, and When I Work.

travel_explore

web search NEUTRAL — The researchers examined nine widely used workplace monitoring platforms—Apploye, Deputy, Desklog, Hubstaff, Monitask, Buddy Punch, Time Doctor 2, Vericlock, and When I Work, tracking how each app col…
https://phys.org/news/2026-05-bossware-spying-workers.html

travel_explore

web search NEUTRAL — The study examined nine employee tracking platforms and found that all of them shared worker-related information with outside companies.The report reviewed apps including Apploye, Desklog, Hubstaff, M…
https://www.digit.in/news/general/google-and-meta-allegedly-…

travel_explore

web search NEUTRAL — Time Doctor is well-suited for performance monitoring and distraction management. Hubstaff helps manage attendance and shifts, while Kickidler supports real-time screen monitoring for quality assuranc…
https://desklog.io/blog/best-employee-monitoring-software/

info

Claim 9: “The research team included technologists, scholars, and former law enforcement officials from the Federal Trade Commission and the Consumer Financial Protection Bureau.”

SINGLE SOURCE

While search results mention former officials from the FTC and CFPB in other contexts, no evidence provided explicitly links these specific individuals to the research team for this specific report.

travel_explore

web search NEUTRAL — Feb 19, 2025 · Former top officials from the Consumer Financial Protection Bureau (CFPB) are available for media interviews to discuss why it's urgent for the agency to be ...
https://protectborrowers.org/media-availability-as-cfpb-shut…

travel_explore

web search NEUTRAL — May 28, 2024 · The staff of the Federal Trade Commission has provided its annual report to the Consumer Financial Protection Bureau on its enforcement and related activities ...
https://www.ftc.gov/news-events/news/press-releases/2024/05/…

travel_explore

web search NEUTRAL — Nov 16, 2017 · James Cooper, Timothy Muris, and Todd Zywicki examine and make recommendations to help improve consumer protection efforts at both the Federal ...
https://rtp.fedsoc.org/paper/consumer-protection-ftc-cfpb/

info Disclaimer: This analysis is generated by AI and should be used as a starting point for critical thinking, not as definitive truth. Claims are verified against publicly available sources. Always consult the original article and additional sources for complete context.