[temporary0331]

I used to work for a startup that did very similar kind of thing. We paid people to install our app and our root cert. We had our own VPN server through which all traffic of the panelists (people who participate in a panel) went and we were able to decrypt all traffic that used the PKI that the operating system provided. Some apps used some other kind of encryption (banking apps eg.) so that could not be decrypted. Then we also collected additional data, for example we took screenshots of whatever was currently on the screen and tried to map those to applications for which we recorded screenshots. This was done to know what app the user was running at what time.

I didn't work with the data collection, so my info is a bit limited. Facebook was our customer even though they had already bought Onavo.

I can answer some questions if you have any.

The company did go bankrupt and the technology was sold.