Former exec at TikTok's parent company says Communist Party members had a 'god credential' that let them access Americans' data

• ByteDance's former head of engineering in the US is speaking out.
• Yintao Yu said Communist Party members accessed data on US users as well as protesters in Hong Kong.
• The access was possible due to a "superuser" or god credential, he alleged. ByteDance called the allegations "baseless."

HONG KONG (AP) — A former executive at ByteDance, the Chinese company which owns the popular short-video app TikTok, says in a legal filing that some members of the ruling Communist Party used data held by the company to identify and locate protesters in Hong Kong.

Yintao Yu, formerly head of engineering for ByteDance in the U.S., says those same people had access to U.S. user data, an accusation that the company denies.

Yu, who worked for the company in 2018, made the allegations in a recent filing for a wrongful dismissal case filed in May in the San Francisco Superior Court. In the documents submitted to the court he said ByteDance had a "superuser" credential — also known as a god credential — that enabled a special committee of Chinese Communist Party members stationed at the company to view all data collected by ByteDance including those of U.S. users.

The credential acted as a "backdoor to any barrier ByteDance had supposedly installed to protect data from the C.C.P's surveillance," the filing says.

Hong Kong is a semi-autonomous region in China with its own government. In recent years, following mass protests in 2014 and 2019, the former British colony has come under more far reaching control by Beijing.

Yu said he saw the god credential being used to keep tabs on Hong Kong protesters and civil rights activists by monitoring their locations and devices, their network information, SIM card identifications, IP addresses and communications.

ByteDance said in a statement that Yu's accusations were "baseless."

"It's curious that Mr. Yu has never raised these allegations in the five years since his employment for Flipagram was terminated in July 2018," the company said, referring to an app that ByteDance later shut down for business reasons. "His actions are clearly intended to garner media attention.

"We plan to vigorously oppose what we believe are baseless claims and allegations in this complaint," ByteDance said.

Charles Jung, Yu's lawyer and a partner at the law firm Nassiri & Jung, said Yu chose to raise the allegations because he was "disturbed to hear the recent Congressional testimony of TikTok's CEO" when Shou Zi Chew, a Singaporean, vehemently denied Chinese authorities had access to user data.

"Telling the truth openly in court is risky, but social change requires the courage to tell the truth," Jung said. "It's important to him that public policy be based on accurate information, so he's determined to tell his story."

TikTok is under intense scrutiny in the U.S. and worldwide over how it handles data and whether it poses a national security risk. Some American lawmakers have expressed concern that TikTok's ties to ByteDance means the data it holds is subject to Chinese law.

They also contend that the app, which has over 150 million monthly active users in the U.S. and more than a billion users worldwide, could be used to expand China's influence.

During the combative March House hearing, lawmakers from both parties grilled Chew over his company's alleged ties to Beijing, data security and harmful content on the app. Chew repeatedly denied TikTok shares user data or has any ties with Chinese authorities.

To allay such concerns, TikTok has said that it would work with Oracle to store all U.S. data within the country.

In an earlier court filing, Yu accused ByteDance of serving as a "propaganda tool" for the Chinese Communist Party by promoting nationalistic content and demoting content that does not serve the party's aims. He also said that ByteDance was responsive to the Communist Party's requests to share information.

Yu also accused ByteDance of scraping content from competitors and users to repost on its sites to exaggerate key engagement metrics. He says he was fired for sharing his concerns about "wrongful conduct" he saw with others in the company.

In mainland China, ByteDance operates Douyin, which is targeted at the domestic market. TikTok is its global app that is available in most other countries. It was also available in Hong Kong until TikTok pulled out of the market in 2020 following the imposition of a sweeping national security law.

Anyone who tries to open TikTok from within Hong Kong will see a message that reads "We regret to inform you that we have discontinued operating TikTok in Hong Kong."