Sprint leans heavily on Carrier IQ, while AT&T limits use

U.S. Senator Al Franken

Though most U.S. operators use Carrier IQs handset monitoring software in some form, theyre not all using it to the same degree, according to the answers AT&T, Sprint, HTC and Samsung submitted to U.S. Senator Al Franken (D-Minn.) in response to his detailed questionnaire about their relationship to with the controversial company. Sprint, it turns out, is one of Carrier IQs biggest fans. It has embedded its IQ Agent into half of all the devices on its network, from smartphones to mobile data modems, and has been working with Carrier IQ since its inception in 2006, according to its responses released by Franken on Thursday (PDF).

Meanwhile, AT&Ts use of IQ Agent is far more limited. It resides in 900,000 of its devices and it only began ordering its handset vendors to embed the software handsets and modems in March. AT&T also confirmed that the software is in RIMs devices, despite that companys denials of any involvement with Carrier IQ. But in the case of all BlackBerry and many Android phones, IQ agent is present because customers downloaded it as part of AT&Ts Mark The Spot application, a network health reporting tool that all customers opt into.

In its letter to Franken (PDF), AT&T ! said it only collected anonymous generalized technical metrics on network, device and application performance and stability. Sprint, however, appears to delve a little deeper, tracking URLs visited and the location of specific devices in order to troubleshoot specific device problems. Sprint pointed out that this information is already ready available to Sprint through the network.

It also turns out we were right about the operators surreptitiously recruiting phones into virtual focus groups to analyze specific network or device problems. Both AT&T and Sprint admitted to using Carrier IQs analytics platform to set up different profiles on different devices. Those profiles could be used, for instance, to order a certain batch of phones to track call-drop problems in a particular neighborhood, or commanding a particular class of smartphones to test signaling patterns on a particular application. Sprint said that only 1.3 million of the 26 million IQ Agent-enabled devices are active at any given time, and within that pool it has multiple profile subgroups, each testing a different problem. Both operators, however, said that they used that data only for network diagnostic purpose, and not to do market research on their customers.

HTC and Samsungs answers pretty much were long streams of references to their operator customers. Samsung said it started embedding IQ Agent in 2007 at the behest of U.S. operators and has since shipped 25 million phones to those operators with the Carrier IQ software installed. In its letter (PDF ), Samsung also outed customer Leap Wireless in the process, saying the regional operator ordered it to install IQ Agent on four of its phones sold under the Cricket brand.

HTCs letter (PDF) said it was investigating recent reports that the keystroke logging software that Carrier IQ whistleblower Trevor Eckhart first exposed was actually a factory debug program, and not Carrier IQs application. Franken also sent questionnaires to T-Mobile and Motorola, which both have until Tuesday to respond.

Franken in a statements said while he appreciated the detailed responses he didnt think they fully absolved the carriers, handset makers and Carrier IQ. Franken said he was particularly concerned about Carrier IQs recent revelation that it had inadvertently captured SMS messages in its report data sending their contents back to its servers. An excerpt from Frankens statement:

People have a fundamental right to control their private information. After reading the companies responses, Im still concerned that this right is not being respected. The average user of any device equipped with Carrier IQ software has no way of knowing that this software is running, what information it is getting, and who it is giving it toand thats a problem. It appears that Carrier IQ has been receiving the contents of a number of text messageseven though they had told the public that they did not. Im also bothered by the softwares ability to capture the contents of our online searcheseven when users wish to encrypt them. So there are still many questions ! to be an swered here and things that need to be fixed.

Sprint said the Carrier IQ software is installed on phones and modems made by Audition, Franklin, HTC, Huawei, Kyocera, LG, Motorola, Novatel, Palmone, Samsung, Sanyo and Sierra Wireless. AT&T said the embedded version of CIQ is installed in the Pantech Pursuit II, Breeze 3, P5000, and Pocket; the Sierra Wireless Shockwave; LG Thrill; ZTE Avail and Z331; the Sony Ericsson Experian Play; and Motorola Atrix and Bravo.

Related research and analysis from GigaOM Pro:
Subscriber content. Sign up for a free trial.