Temu Data Lawsuit: The 'Data-Theft' Allegations

The Allegations

Temu, the fast-growing discount shopping app owned by China-based PDD Holdings, has been sued by several state attorneys general — Arkansas filed the first in 2024, with others following — and by consumers in class actions. The suits allege that the Temu app collects far more personal information than a shopping app needs, and some go further, describing it as behaving like “malware” or a “data-theft business” that can access things like a phone’s camera, location, contacts and messages, and that can allegedly evade users’ privacy settings. The complaints frame this as a violation of consumer-protection and privacy laws.

It is important to be precise: these are allegations. Temu has denied them, disputing the technical claims, and no court has found them proven.

The Status

The litigation is active and spread across multiple states and federal courts, with government enforcement suits and private class actions proceeding on different tracks. Because the cases hinge on contested technical questions about what the app actually does with data, they are early and unresolved — there has been no settlement or judgment establishing the claims. The suits sit within a broader wave of scrutiny of apps tied to overseas parent companies and of how much data mobile apps quietly gather.

In short: serious allegations, formally disputed, still being tested in court.

What Users Should Know

Regardless of how the cases resolve, you can limit any app’s data access on your phone: review and restrict its permissions (location, camera, contacts), deny access it does not need, and delete apps you no longer use. Be thoughtful about the information you enter into any shopping app, and prefer paying through methods that add a layer of protection. Good permission hygiene protects you no matter which app is involved.