Is Your Prayer App Secretly Tracking Your Cycle? Security Audit Triggers Sacred Trust Row

When news broke in 2020 that popular worship apps were selling user location data to third-party brokers, the global Muslim community experienced a collective wake-up call. In response, a new wave of Islamic tech startups emerged, promising clean interfaces, zero ad networks, and complete user privacy.

Chief among them was Pillars, an app that built its brand around an explicit promise: no ad networks, no data harvesting, and an App Store label reading "No Data Collected." In its internal documentation, the app framed this pledge as an amaanah—a sacred trust.

Read nextA Father's Sudden Death, Black Birds Circling, and the Desperate Search for Signs From the Afterlife

Now, a detailed technical audit conducted by a software engineer has revealed that the app’s background code may not match its front-facing promises.

Using a proxy server to inspect network traffic on an unlinked iOS device, the developer discovered that the app fired off 189 data transmissions within its first five minutes of default use. The target was PostHog, a third-party analytics platform.

The transmitted payloads were far from anonymous system pings. According to recorded logs, the app transmitted demographic details gathered during setup, including age, gender, and personal feelings regarding missed prayers. More critically, the app actively logged every completed prayer, late prayer, missed prayer, and toggle of "menstruation mode" under a persistent device identifier.

Even more troubling was the behavior of the app's privacy controls. When the auditor explicitly turned off analytics in the app's Privacy Centre, the phone continued transmitting missed prayers and cycle updates for another 44 seconds until the app was forcefully restarted.

"There is a server somewhere holding a running record of which prayers you kept, which ones you missed, and when you were menstruating," the auditor noted, while emphasizing that no GPS location data or advertising IDs were detected.

The findings have split the community into two distinct camps.

One commenter argued that any compromise on an amaanah demands immediate zero tolerance. "There are tons of apps now which are absolutely offline," one person said. "I would absolutely switch to something else if you want complete privacy."

Others took a more pragmatic view, arguing that developer sloppiness should not be confused with predatory corporate monetization. "It's crazy to see how easily things like that can be done without anyone noticing," another observer noted. "Let's hope it was sloppiness and not malice."

A third contributor pointed out that core features remain functional without enabling tracking. "Those are totally optional to log in the first place," someone else argued. "If you use the app to just get local timings and qibla direction, you should be good. But honesty is always appreciated."

Beyond the technical code, the controversy highlights a growing cultural fatigue with spiritual quantification. In an era where apps track streaks and grade daily piety, believers often find themselves carrying an overwhelming burden of digital guilt.

Islamic theology offers a profound counter-narrative to this modern anxiety. Perfection belongs to the Divine alone, and human imperfection is built into the human condition. A famous narration in Sahih Muslim reminds believers that human fallibility is the very backdrop for divine grace: "If you were to commit no sins, Allah would replace you with people who would commit sins and then seek forgiveness."

Whether dealing with flawed software code or personal stumbles in daily worship, the path forward relies on transparency, grace, and continuous effort rather than cold perfectionism.

Our show hosts dig deep into this technical audit, the ethics of Islamic software design, and the trap of spiritual perfectionism on this week's episode of the podcast.