We set up a MITM proxy and captured the decrypted HTTPS traffic from the official White House iOS app. On a single browsing session it contacts multiple Elfsight domains, sends your device fingerprint to OneSignal, and loads Google DoubleClick ad tracking. The privacy manifest says it collects nothing.
It’s almost too on message, isn’t it? If I read it in a comic book, I’d say it was overly predictable. Weaponized ignorance.
There’s a lot of that surrounding IT, unfortunately.