Connected to Xiaomi?

[1337sup3rh4x0r]

Does the data collected from the band stay on the phone, or does this app upload it to xiaomi servers?

[CirKu17]

I recently wrote an article on MiFit App Data Collection.
tl;dr it sends data to xiaomi servers and other third party companies, all unencrypted.

[1337sup3rh4x0r]

Thank you for the article! This doesn't look good. Have you tried what happens if you block communication with these three sites? Is the app still usable? Should be, as I can also use it in flight mode, no?
Do you think it would be hard to suppress communication by modifying the app within this very project here?

[CirKu17]

Yes, it is. I run the app under the Cyanogen PrivacyGuard and I blocked the domains in the hosts file.
Maybe this can be removed within this project, but that's something the maintainer should consider.