ByteDance’s Trae IDE Exposed for Transmitting User Data Despite Opt-Outs
UPDATE: ByteDance’s Trae IDE is under fire for transmitting user data even when users opt out. A new analysis reveals alarming discrepancies between the tool’s privacy claims and its actual data handling practices, igniting urgent concerns among developers worldwide.
An independent review posted on GitHub by an anonymous developer, known as segmentationf4u1t, has uncovered that Trae IDE—based on Microsoft’s Visual Studio Code—continues to send telemetry data to ByteDance servers despite users disabling data collection settings. This troubling discovery highlights a significant breach of trust, as user control seems merely superficial.
The research scrutinizes Trae IDE versions PRE-2.0.2 and 2.0.2, revealing that even with telemetry settings turned off, the IDE persists in transmitting sensitive information, including coding session details and system configurations. This situation raises alarms for industry professionals in sectors like finance and healthcare, where data privacy is critical.
The GitHub analysis demonstrates how standard network monitoring tools captured encrypted data flowing from the IDE, effectively bypassing user preferences. Developers have turned to alternative forums such as Discord and X (formerly Twitter) for open discussions, as official channels reportedly censor community feedback.
Further compounding these issues, earlier reports from Cybernews have voiced similar concerns regarding excessive data harvesting practices within Trae. The telemetry seems hardcoded, continuing unabated even after user settings are adjusted, indicating a severe compromise of user agency.
Beyond privacy violations, the analysis criticizes Trae’s performance, branding it a “resource hog” that significantly impacts system efficiency, even in idle states. Ongoing background connections suggest potential surveillance capabilities, corroborated by a separate investigation from Neowin, which described the IDE as spying on users.
Amid geopolitical tensions surrounding data security, the origins of Trae IDE from ByteDance—parent company of TikTok—add another layer of concern for developers and enterprises. The GitHub report calls for broader replication of these findings, urging developers to independently verify the IDE’s behavior.
In the developer community, discussions are heating up. On platforms like Hacker News, users are dissecting telemetry payloads and questioning the effectiveness of the IDE’s restart mechanisms. A GitHub issue filed in February under Trae-AI/Trae has yet to receive a response, demanding explicit user consent during onboarding—a request that has exacerbated distrust.
Recent coverage from The Register has amplified these concerns, detailing ongoing file transmissions and highlighting the urgency for enterprise users to reconsider their tool choices, potentially favoring open-source alternatives with transparent privacy controls.
The tech industry is now looking closely at Trae’s situation as it underscores the critical balance between innovation and ethical responsibilities in AI-driven tools. While ByteDance has not responded to these allegations, the mounting evidence from independent researchers signals an urgent need for regulatory scrutiny.
Developers are encouraged to monitor their setups with tools like OpenTelemetry for greater visibility into application behaviors. This controversy serves as a stark reminder of the importance of due diligence in an age where code editors serve as gateways to vast and sensitive data troves.
As the GitHub analysis concludes, empowering users through transparent practices is not just advisable—it is essential for maintaining trust in the tools that drive modern software development. Share this urgent news to ensure your peers are informed about the implications of using Trae IDE.
