Allegations that Indian Prime Minister Narendra Modi’s official mobile application was sending personal user data to a third party without their consent caused a furore on social media in India and drew criticism from the leader of the main opposition party on 25 March.

File image of Prime Minister Narendra Modi. PTI

Modi's ruling Bharatiya Janata Party denied here the allegations and said the data was being used only for analytics to offer all users the "most contextual content".

A security researcher, who has previously highlighted some vulnerabilities in India's national identity card project and who tweets under the pseudonym Elliot Alderson, posted here a series of tweets on 24 March stating the app was sending personal user data to a third-party domain that was traced to an American company.

Contrary to Rahul’s lies, fact is that data is being used for only analytics using third party service, similar to Google Analytics. Analytics on the user data is done for offering users the most contextual content.

— BJP (@BJP4India) March 25, 2018

The tweets, which come at a time of heightened sensitivity around the alleged misuse of personal data amid the unfolding Facebook-Cambridge Analytica controversy here, triggered a stir in India on social media. "Hi! My name is Narendra Modi. I am India's Prime Minister. When you sign up for my official App, I give all your data to my friends in American companies," wrote here opposition Congress Party Chief Rahul Gandhi in a Twitter message on 25 March.

Hi! My name is Narendra Modi. I am India's Prime Minister. When you sign up for my official App, I give all your data to my friends in American companies. Ps. Thanks mainstream media, you're doing a great job of burying this critical story, as always.https://t.co/IZYzkuH1ZH — Rahul Gandhi (@RahulGandhi) March 25, 2018

The BJP quickly responded on Twitter, saying Gandhi was trying to divert attention. The BJP has accused the Congress of engaging Cambridge Analytica in India, a charge the opposition party has denied.

Alderson, who initially pointed out that the Narendra Modi app was sharing data with a third party without the consent of users, earlier on 25 March posted a new tweet saying the app had updated its privacy policy after his previous tweets.

When you create a profile in the official @narendramodi #Android app, all your device info (OS, network type, Carrier …) and personal data (email, photo, gender, name, …) are send without your consent to a third-party domain called https://t.co/N3zA3QeNZO. pic.twitter.com/Vey3OP6hcf

— Elliot Alderson (@fs0c131y) March 23, 2018

Reuters could not independently verify Alderson’s claim.

Modi has not commented on the issue.

BJP said the app, which has seen about 5 million downloads on the Google Android Play Store, allows users access even in a guest mode that does not require them to grant any permissions.

“The permissions required are all ... cause-specific,” the BJP tweeted.