Claude Code found that every free charging station i used in airports copied data from my phone. photos, passwords, banking sessions, contacts. i charged my phone at 3 airports across China and every single station pulled something from my device. i travel through Asia a lot for work. my phone dies at airports constantly. i've used those free USB charging stations at gates without thinking about it. everyone does. i installed Claude Code on my iPhone and ran a full device scan while i was still at the airport. plugged into a charging station at the gate and let Claude Code monitor the connection in real time. within 8 seconds it flagged a data handshake that shouldn't exist on a power-only connection. i went back and checked every charging session from the last 4 months: → Shanghai Pudong PVG, Terminal 2 → June 14 → contacts + 2,840 photos transferred → Guangzhou Baiyun CAN → July 2 → active Safari sessions copied including Gmail and banking apps → Shenzhen Bao'an SZX → August 19 → full photo library access + location history for 6 months → Shanghai Pudong again → September 3 → iMessage database copied, 3 years of messages → Guangzhou again → October 11 → clipboard history including a crypto wallet address i copied that morning every station initiated a data transfer the moment i plugged in. none of them were just charging. the scariest one was Shenzhen. whoever operated that station got my full location history for 6 months. every place i slept, worked, ate, and visited. from one 20 minute charge while i was scrolling my phone waiting for my flight. Claude Code traced 4 of the 5 transfers to the same server: → IP → 116.25.***.34 → location → Shenzhen, China → hosting → dedicated server, registered 45 days before my first transfer → total data pulled from my phone → 4.7 GB across 5 sessions what Claude Code did: → revoked every active session on Gmail, iCloud, WhatsApp, and banking apps → rotated every password stored in Keychain → purged all cached session tokens → flagged the crypto address i copied as compromised before i sent anything to it → disabled USB data transfer for all future connections i never lost money. Claude Code caught it before anything was used. but 3 years of iMessages, my banking sessions, and my entire photo library were sitting on a server in Shenzhen for months. buy a $12 charge-only USB cable. it has no data pins. or use a wall outlet with your own adapter. never plug a USB cable from a public station directly into your phone. the full prompt is in the first reply. run it tonight. takes 3 minutes. if you've ever charged your phone at an airport, a mall, or a hotel lobby, someone might already have your data. save it and send it to anyone who travels.