Blu took a substantial hit last month when security firm Kryptowire discovered a pre-installed service on several of the company’s phones was sending users’ data to a server in China . The offending service was part of the OTA update module provided by third-party company Adups.
Article Link: http://www.androidpolice.com/2016/12/02/blu-promises-completely-remove-update-software-stole-user-data/