Skip to content
Naked Security Naked Security

Woman sues employer for firing her after she disabled 24×7 monitoring app

Having her location monitored was OK while she was clocked in, she said. But she uninstalled it when she found it was spying even when she had quit the app.

Woman using phone. Image courtesy of Shutterstock

Myrna Arias, a former sales executive for the money transfer service Intermex, said she had no problem with having her location monitored by a GPS-powered app on her company-issued iPhone.

At least, she didn’t have any issue with her location being monitored while she was on the clock.

But being monitored 24×7, whether she was working or not? Well, that made her feel like a felon strapped into an ankle bracelet.

So after investigating the app – a job management app called Xora – she uninstalled it.

It was an act that she claims led to her being fired. Now she’s suing her former employer, Intermex, for upwards of $500,000 (£319,070).

Headquartered in Miami, Florida, Intermex processes money transfers between the US and Latin America. According to its site, it has 30,000 locations worldwide and offers services in 45 states and 16 Latin American countries.

Arias has claimed in a lawsuit filed in California state superior court that her boss at Intermex, regional vice president of sales John Stubits, fired her shortly after she uninstalled Xora: an app that Intermex required its employees to use starting in April 2014.

From her lawsuit, which was filed in Kern County Superior Court on 5 May and subsequently spotted by Ars Technica:

After researching the app and speaking with a trainer from Xora, Plaintiff and her co-workers asked whether Intermex would be monitoring their movements while off duty. Stubits admitted that employees would be monitored while off duty and bragged that he knew how fast she was driving at specific moments ever since she installed the app on her phone. Plaintiff expressed that she had no problem with the app's GPS function during work hours, but she objected to the monitoring of her location during non-work hours and complained to Stubits that this was an invasion of her privacy. She likened the app to a prisoner's ankle bracelet and informed Stubits that his actions were illegal. Stubits replied that she should tolerate the illegal intrusion because Intermex was paying plaintiff more than [her former employer, NetSpend].

According to the suit, Arias continued to work for NetSpend during her first 3 months of employment, so as to stay on the company’s medical insurance plan during the gap months in which her coverage under Intermex’s insurance hadn’t yet kicked in.

Arias said Stubits agreed to having Arias work for both NetSpend and Intermex during those 3 months because she was suffering from a severe vitamin B-12 deficiency and didn’t want to lose access to her medical treatment.

But according to the suit, Intermex was so angry at Arias’s objections to the monitoring app that it called up NetSpend to smear her reputation.

Arias says in the complaint that Robert Lisy, Intermex’s president and CEO, “telephoned John Nelson, vice president of NetSpend, and informed Nelson that [Arias] had been disloyal to NetSpend and was employed by Intermex. As a result of Lisy’s intentional and malicious interference with plaintiff’s contract with NetSpend, NetSpend fired plaintiff promptly. NetSpend specifically cited Lisy’s phone call as the reason for the decision to terminate plaintiff.”

Arias’s attorney, Gail Glick, told Courthouse News that having two black marks against her and a gap in her work history has made it tough for Arias to find a new job.

As far as the software goes, its maker’s description certainly doesn’t make it sound like the product is a perpetual motion machine, impossible to turn off.

ClickSoftware says on its site that Xora StreetSmart “is easily downloaded to your mobile worker’s phone or tablet”, and when employees start their day, “they simply launch the application on their mobile devices.”

But according to Glick, clocking out didn’t stop the GPS function, which just kept eavesdropping away.

From an email she sent to Ars Technica:

The app had a "clock in/out" feature which did not stop GPS monitoring, that function remained on. This is the problem about which Ms. Arias complained. Management never made mention of mileage. They would tell her co-workers and her of their driving speed, roads taken, and time spent at customer locations. Her manager made it clear that he was using the program to continuously monitor her, during company as well as personal time.

The complaint says that Stubits also told Arias she had to keep her phone on “24/7” to assist clients, and that she was “scolded” when she uninstalled the app to protect her privacy.

Arias is seeking an injunction and general, special and punitive damages for invasion of privacy, retaliation, labor code violations, intentional interference with contract, wrongful termination and unfair business practices.

The legal issue here isn’t an employer’s right to legally monitor employees at work if there’s a legitimate business reason to do so.

But Glick said that it’s a “complete violation of California and federal laws against invasion of privacy” if an employee has no means of stopping the monitoring.

If you’re working for a business that currently monitors or is considering monitoring employees, it’s vital to know what type of monitoring is permissible under the law.

The legal site Nolo.com would seem to back up Glick’s contention that what Intermex did was quite possibly illegal.

The site says that for public employers, both monitoring or merely inquiring about employees’ off-the-job life is largely off-limit.

As far as private sector companies go, some state constitutions, including California’s, prohibit employers from taking any job-related action against a worker based on whatever (legal) activity they do when they’re not working.

That’s not the same as forbidding monitoring of off-duty workers, though.

If the case is proven, it will be interesting to see whether state and federal privacy laws will come down on the right to off-hours privacy for Arias, her colleagues and other spied-on employees at other companies.

Image of phone courtesy of Shutterstock.

0 Comments

Sounds like that invasion of privacy and deleting the app off her phone is small time compared to the retaliation and other charges. As for the app itself; if it’s in the company literature, I’d say there’s a chance that the continuous monitoring may hold up. At least, if the suit wasn’t being filed in California which seems to be against the continuous monitoring.

I think I found the problem; her deal to work with both companies was apparently with the Regional VP of sales. While the phone call that got her fired from the first place of business was from the CEO. Something tells me her situation didn’t sit well on all levels or was even documented; just affirmed with a handshake and a smile. If she is being a victim, hope she has something in writing with a name signed on it.

As for using a phone at work; whether it’s bring your own device (with business specific apps) or issued to you, always read the literature and know what your signing.

Reply

Possible typo in the paragraph after the first excerpt “…coverage under Terminex’s”. Did you mean Intermex’s? Unless she worked for the exterminators too…

Reply

(1st para after the 1st excerpt from Arias’ lawsuit. Should “Terminex” be Intermex?)

Reply

Yes, thanks for pointing it out. We’ve fixed it.

Reply

I don’t think so – wouldn’t the employer consider this to be equivalent to turning the spyware, er, “application” off if they didn’t get any signal from it?

Reply

It’s a company phone. Turn it off when you finish work-Don’t use it at home – Problem solved. Simples.

Reply

It says right in the article, if you read it, that she was required to have it on 24/7 to assist customers.

Reply

Company Phone = company does what they want with it. Have a separate personal phone if you dont want them tracking every move you make. turn it off when you leave work, or leave the phone at work. Complains company tracks her during her off hours time, but yet she sure wanted to use her company phone during off hour times? Sounds fair right?

Reply

Employee was required to have the company phone on 24/7.

“The complaint says that Stubits also told Arias she had to keep her phone on “24/7” to assist clients, and that she was “scolded” when she uninstalled the app to protect her privacy.”

Reply

@JoW
Quote from Article “The complaint says that Stubits also told Arias she had to keep her phone on “24/7″ to assist clients”, she was not given the option of turning off the company phone.

Reply

It doesn’t say whether she was expected to keep location services enabled. Presumably she could have turned them off in the iOS interface…

Reply

Looks like you missed the line that said – “The complaint says that Stubits also told Arias she had to keep her phone on “24/7” to assist clients, “

Reply

They did not permit the employee to turn off the phone while not working:
“The complaint says that Stubits also told Arias she had to keep her phone on “24/7” to assist clients, and that she was “scolded” when she uninstalled the app to protect her privacy.”

Reply

Install a firewall, block the APP when leaving work, unblock the APP when starting work. Nobody can complain that you were increasing security! There is no need to uninstall it – just tame it.

Reply

As others have mentioned, if it’s a company phone, she can just turn it off while not working or leave the device at work unless the company required her to be on call at all times.

Although, I think a lot of companies are tracking devices through their mdm software in case a device is lost or stolen and they probably do this for byod devices as well so this could case could be a big deal.

Reply

I can’t turn off my smartphone without removing its battery; if I tried to remove the battery, I might break the phone and, in so doing, perhaps void its warranty. As such, I can only put my 24/7 tracking device to sleep.

Is there a smartphone that users can turn off – I mean really turn off, not just put to sleep – without removing the battery?

Reply

If you were to do a Power Off on the iPhone (hold the power button for a few seconds until the “power off” slider appears, and then slide it) you would stop the tracking app alluded to in the lawsuit. (Given how long my Android and iPhone batteries last when they are turned off, I’m calling “turned off” really turned off.)

Aeroplane mode would have done the trick for her, too, but it would have effectively turned the phone off as far as receiving calls are concerned – seems that wasn’t allowed.

Reply

Not necessarily. The NSA can install malware disguised as an update on most G3 and G4 systems right from a cell tower. It will cause your phone to mimic a legitimate shutdown when you press the power button but in reality your phone stays on in blackout mode. Your phone’s camera, microphone and GPS remain active.
The Blackphone will at least alert you that your G4 security has been forcibly downgraded to G3 standards.

Reply

I think we can count the NSA out of this particular case, and accept my suggestion that turning her phone off, so far as she was able to do so, would have stopped _this app’s tracking_, and so would turning on aeroplane mode. At the same time, either of those would have prevented the phone receiving calls as the company seemed to require.

Reply

Once off the clock, the company was monitoring her illegally. Even law enforcement has to obtain a court order to do that. I think this company is in serious trouble if she files a criminal complaint.

Reply

It’s interesting to wonder (as a non-lawyer) what the expectation of “being contactable out of office hours to help customers” does to the definition of “off the clock” in this case.

Usually, official after-hours duty is dealt with contractually…I’d imagine in many jurisdictions it affects things like health and safety rules (as you are effectively “on the clock”), working week limits, insurance, liability and even taxation.

She doesn’t seem to be contesting the aspect of employment that expected after-hours working, so you could say the case is about being tracked via a company device *at all* when doing company work, not merely about being tracked after hours.

Reply

I’m a millennial, but I’ve never had an employer track me like that, I do know, as Paul mentioned above, she could have disabled location services for that device while off the clock. However the granular location control for this app isn’t there as it’s totally web based.

If she really did do extensive research, she would have found a solution to her problem was to disable location services when not working. If you can’t get by without using your map app, learn how to read a “gasp” paper map or print off directions before leaving somewhere. Getting lost is a novel idea in our technological age, but it’s the best way to learn directions. Find your way without your phone.

My money is on her not doing much actual research, but she whatever advice she received misrepresented her problem. Just type into your favourite browser “Disable locations services iOS” and expand from there. She did what she thought was right, but it wasn’t the right way to go about it.

Reply

If Myrna looses this will open the door for all insurance agencies. They will require that all vehicles with GPS have a tracking system before you can get insurance and this is only the beginning of what they will be allowed to do.

Reply

Not sure there’s really a connection there. Automotive insurance is a deal between you and the insurer – they can, and already do, get you to authorise tracking: get tracked, enjoy lower premiums. Some drivers love the idea, though the tracking dongles may leave a lot to be desired from a security persepctive:

https://nakedsecurity.sophos.com/2015/01/20/cheaper-car-insurance-dongle-could-lead-to-a-privacy-wreck/

Reply

From the most basic of legal points, if the company had offered the phone – and it remained company property they can legally put whatever they want on it. You are not obligated to use it outside of work. You are not obligated to treat it like it is YOUR device. I see both points of view equally for the company and for her. To be tracked everywhere you go, serious privacy violation. So it’d be one thing if they made her put the app on her phone then fired her for uninstalling it, it’s another to lend property to an employee under the contracting details that it be returned after employment termination.

So in my view, the company property was their property and she modified it in a way that they did not allow.

Reply

If a company requires a phone to be on 24/7, they need to pony-up for paying an individual 24/7. Company rules can not violate labor law.

Reply

The company gave her a free phone and required her to have tracking software on it. No problem.

The company required she have the company-issued phone with her at all times to support her clients after hours, but apparently paid her very well (or at least more than her first employer) for this requirement. She agreed to it. No problem.

As I understand it, after becoming employed she decided she no longer wanted to be tracked “during non-work hours”. However, per her employment contract she never really had any non-work hours since she must always be available to support her customers. She agreed to always be on call and, by extension, always have the tracker-enabled phone with her and powered on. Big problem.

As an aside, she decided to double-dip and work for 2 companies at the same time. Ethically that tells me what kind of employee she was and probably why she objected to being tracked. She seemed perfectly willing to lie to her first employer (we can safely assume NetSpend did not know about her double-dipping since they fired her when they found out) and wanted to remove any chance her second could catch her in another lie.

Reply

Leave a Reply

Your email address will not be published. Required fields are marked *

Subscribe to get the latest updates in your inbox.
Which categories are you interested in?
You’re now subscribed!