A bipartisan group of U.S. senators is demanding urgent action from Apple and Google, calling on the tech giants to remove virtual private network (VPN) apps linked to the Chinese military from their app stores. Lawmakers say these apps, quietly tied to sanctioned Chinese cybersecurity firm Qihoo 360, put millions of Americans at risk by allowing the Chinese government to secretly harvest personal data.
Senators Sound the Alarm
In a letter sent July 24, Senators Eric Schmitt (R-Mo.) and Elizabeth Warren (D-Mass.), along with five other senators from both parties, urged Apple CEO Tim Cook and Google CEO Sundar Pichai to explain why their platforms continue to distribute Chinese-owned VPNs. “It is unacceptable that your companies have allowed platforms with known links to the PLA [People’s Liberation Army] to continue operating unimpeded across our cyberspace,” the senators wrote.
They accused Apple and Google of “profiting from these Chinese-owned apps” through in-app purchases and subscriptions, even as these platforms potentially expose U.S. users to Chinese surveillance. The lawmakers also questioned whether the companies had violated U.S. sanctions and demanded answers about how many times these apps have been downloaded and what verification measures are in place.
How Chinese VPNs Harvest Your Data
VPNs are tools that encrypt internet traffic and allow users to browse anonymously. But experts warn that Chinese-owned VPNs do the opposite. Under China’s National Intelligence Law of 2017 and Data Security Law of 2021, companies must provide data to government agencies upon request—without a warrant.
“Using a Chinese-owned VPN would be tantamount to handing over one’s browsing history to Beijing,” said Justin Sherman of the Atlantic Council. Because VPNs can see all the data flowing through a user’s internet connection—including passwords, work documents, and private communications—they offer a rich trove for government surveillance.
Katie Paul, director of the Tech Transparency Project (TTP), emphasized the severity: “Unlike a social media app, VPN apps route all of a user’s activity online—essentially everything a user visits when using the VPN.”
How Many VPNs Are Dangerous?
According to reports by the TTP, there are at least 20 Chinese-owned VPNs across the Apple App Store and Google Play Store, many of which are still available despite repeated warnings. Thirteen of these remain on Apple’s platform, while eleven are on Google’s. Most users have no idea these apps are Chinese-owned, as they are masked by shell companies in places like Singapore and the Cayman Islands.
Major VPNs Tied to Qihoo 360
The most concerning apps are those linked to Qihoo 360, which was sanctioned by the U.S. Commerce Department in 2020 for ties to the Chinese military. These include:
- Turbo VPN (Available on both Apple and Google stores)
- VPN Proxy Master
- Snap VPN
- Signal Secure VPN
- Thunder VPN (Removed by Apple after pressure)
Qihoo 360 was found to own companies like Lemon Seed, Lemon Clove, Autumn Breeze, and Innovative Connecting—all listed as developers for these apps. While some claim to be independent, corporate records contradict their statements. For example, Autumn Breeze lists a Chinese national connected to Qihoo 360 as its director.
Where Are These VPNs Offered?
These apps are widespread, appearing prominently in U.S. app stores and ranked among the top 100 free VPNs. Some examples include:
- X-VPN, with over $10 million in U.S. revenue
- VPN Proxy Master, with over $5 million
- Turbo VPN, which advertises bypassing TikTok bans
- vpnify and Ostrich VPN, also widely downloaded
Many of these apps have tens of millions of downloads, glossy reviews, and strong rankings. Yet, none disclose their Chinese ownership, leaving users in the dark about potential national security risks.
Tech Giants Under Scrutiny
Apple and Google have claimed to take user privacy seriously, yet researchers say they have failed to act decisively. Apple, in particular, has removed hundreds of apps from its China App Store to satisfy Chinese authorities but continues to allow dangerous Chinese apps for U.S. consumers.
Peter Micek, general counsel at Access Now, noted that TTP had done “the homework and due diligence that Apple and Google should have done.” He warned that allowing these apps may violate sanctions and create serious legal and reputational risks for the tech companies.
What Can You Do?
If you use any of the following apps, experts recommend deleting them immediately:
- Turbo VPN
- VPN Proxy Master
- Snap VPN
- Signal Secure VPN
- X-VPN
- Ostrich VPN
- vpnify
- Speedy Quark VPN
- HulaVPN
- WireVPN
- Now VPN
- AppVPN
Also, consider submitting a data removal request and switching to a reputable, independently audited VPN service. PrivadoVPN and Proton VPN are among the few free options that enforce no-log policies and strong encryption.
The continued availability of Chinese-owned VPNs raises questions about tech accountability and national security. Lawmakers say these apps should be removed immediately to protect American users. Until then, millions remain vulnerable to foreign surveillance—right from their phones.