Malaysia has prohibited civil servants from using the Israeli-linked navigation app Waze, citing concerns over the security of sensitive government information and personal data. The government’s directive, announced on October 21, also included a call by Prime Minister Anwar Ibrahim for all Malaysians to discontinue the app’s use and switch to locally developed alternatives.
In a statement from the Prime Minister’s Office, Anwar emphasized the need to protect national security and sovereignty from potential exploitation. He highlighted that Waze Mobile, the company behind the app, is incorporated in Israel and operates under Israeli law, raising concerns about data governance and privacy. Anwar specifically recommended TuJu, an app developed by the Malaysian Highway Authority, as a safer alternative for navigation services.
Malaysia has historically maintained strong support for the Palestinian cause and does not have diplomatic relations with Israel, factors that likely influenced the government’s decision. This move aligns with a broader global trend toward digital sovereignty, where governments seek to control citizen data and reduce reliance on foreign technology.
The ban follows recent revelations by researchers at the University of Toronto’s Citizen Lab and cybersecurity firm Conflict, which uncovered an Israeli advertising company, Discover-Tech, allegedly using online ads to track users and deliver spyware. The operation was linked to Candiru, an Israeli spyware developer implicated in attacks targeting at least 45 devices owned by Qatar-based broadcaster Al Jazeera between 2024 and 2025.
Security expert Munira Mustaffa from the Chasseur Group noted that such sophisticated surveillance operations have amplified concerns about Israeli-linked espionage activities. She pointed to similar efforts in Europe, where some countries are reducing dependence on American cloud services amid reports that Israel’s Unit 8200—its primary signals intelligence and cyberwarfare unit—utilized servers hosting data on Palestinians targeted for surveillance.
The growing unease over foreign digital surveillance has prompted other nations to adopt proprietary communication platforms. France, for instance, plans to phase out US video-conferencing tools like Zoom and Microsoft Teams in government agencies by 2027. Germany and India have also introduced homegrown messaging applications for public sector use. Security lapses related to apps with location-tracking capabilities have drawn scrutiny, exemplified by the fitness app Strava, whose publicly accessible GPS heatmaps inadvertently revealed military bases and troop movements globally.
Malaysia’s concerns are not unprecedented. In 2016, the Malaysian Armed Forces voiced worries about the augmented-reality game Pokemon Go, which employed GPS technology that could expose military installations. Restrictions were placed near sensitive sites to prevent potential intelligence leaks.
Cybersecurity analyst Farlina Said from the Institute of Strategic and International Studies Malaysia indicated that apprehensions about location data arise partly from uncertainty about where and how data is processed. This lack of transparency fosters distrust toward applications accessing sensitive information, particularly in the public sector.
Despite governmental endorsements of TuJu as a secure alternative, users have reported significant issues with the app, including frequent crashes, inaccurate data, missing features, and compatibility problems with in-car infotainment systems. Some have criticized the app for showing implausible speed readings, undermining confidence in its reliability.
As digital sovereignty debates intensify worldwide, Malaysia’s prohibition of Waze among civil servants reflects a cautious approach to protecting national security in the face of evolving technological risks.