Google appears to be overlooking their explicit ban on this.
If your app handles personal and sensitive user data, then you must ... Not sell personal and sensitive user data.
The rule also applies to third-party code.
If you include third party code (for example, an SDK) in your app, you must ensure that the third party code used in your app, and that third party's practices with respect to user data from your app, are compliant with Google Play Developer Program policies... For example, you must ensure that your SDK providers do not sell personal and sensitive user data from your app.
World would be a much better place if Google and Apple enforced their chosen policies for apps, and Meta and Google enforced their chosen policies for ads, but then these companies would be very slightly poorer.
There's no good reason to use your phone for any more than the bare minimum. Remove as many apps as possible. Treat it like a landline by just keeping in on a desk or something when you're at home.
That's not the way I want to live. I want to enjoy technology and enjoy privacy, and since those aren't mutually exclusive, it's reasonable to expect both.
Exodus has a list of applications with known spyware libraries: https://reports.exodus-privacy.eu.org/en/reports/list/. The homepage has search and also lets you re-analyze applications if there's no report or it's out of date.
There will be false negatives for first-party spyware and sufficiently-obfuscated vendored libraries, but from my experience this is exceedingly rare.
A significant amount of the internet for normies today is app-first, where there may be no web version, or the web version lacks much of the core functionality of the service. Instagram led the way with this before Covid already, but the practice then spread widely.
The savvy crowd on HN hopefully already knows how to protect ourselves, but we can't really expect the mass public to do so. Especially when some younger people today are losing awareness of the very concept of the browser as they use dedicated apps for all their internet use.
browser based applications can still gain access to this data, using very similar workflows. E.g. a weather app rendered on a browser is still going to request your location, and can fingerprint that browser to build a user profile. I'm not sure your solution is a solution at all.
I regret that we've moved away from a world where you could easily tell your device throw a privacy-preserving bone to pesky apps. ("Sure, you've got location access, but it'll only show my house, you don't get to see where else I go.")
Instead our ownership and agency has been sacrificed on the altar of "but BigCo doesn't like it because users can lie."
Google appears to be overlooking their explicit ban on this.
The rule also applies to third-party code. https://support.google.com/googleplay/android-developer/answ...Isn't this abuse what we are supposed to be paying their 15% Play Store tax to stop?
World would be a much better place if Google and Apple enforced their chosen policies for apps, and Meta and Google enforced their chosen policies for ads, but then these companies would be very slightly poorer.
The tax is 30% and the purpose of a system is what it does
Come On, Obviously The Purpose Of A System Is Not What It Does
https://www.astralcodexten.com/p/come-on-obviously-the-purpo...
This just means you can't get money for the personal and sensitive user data. It's wild that companies think that's the problem.
Webloc is getting this data for free. And then reselling it, but it's outside the scope of Google then.
There's no good reason to use your phone for any more than the bare minimum. Remove as many apps as possible. Treat it like a landline by just keeping in on a desk or something when you're at home.
That's not the way I want to live. I want to enjoy technology and enjoy privacy, and since those aren't mutually exclusive, it's reasonable to expect both.
At least use the browser for every service you can that wants you to use an app. Bonus points if the adblocker is enabled.
> The tool collects vast quantities of location data from smartphones via commonly used weather, gaming, email and religious apps.
is there a list
Exodus has a list of applications with known spyware libraries: https://reports.exodus-privacy.eu.org/en/reports/list/. The homepage has search and also lets you re-analyze applications if there's no report or it's out of date.
There will be false negatives for first-party spyware and sufficiently-obfuscated vendored libraries, but from my experience this is exceedingly rare.
> https://reports.exodus-privacy.eu.org/en/reports/253268/
Solitaire
ah beans
Don't use apps. Use your browser and an ad blocker.
A significant amount of the internet for normies today is app-first, where there may be no web version, or the web version lacks much of the core functionality of the service. Instagram led the way with this before Covid already, but the practice then spread widely.
The savvy crowd on HN hopefully already knows how to protect ourselves, but we can't really expect the mass public to do so. Especially when some younger people today are losing awareness of the very concept of the browser as they use dedicated apps for all their internet use.
Sucks to suck.
If a service is sub-par in the browser I don't use it. Be ThE cHaNgE yOu WaNt To SeE. I hate that sentence but it kinda applies here.
browser based applications can still gain access to this data, using very similar workflows. E.g. a weather app rendered on a browser is still going to request your location, and can fingerprint that browser to build a user profile. I'm not sure your solution is a solution at all.
I have tried for years but it just doesn't make a difference if enough people in the world don't care loudly enough.
Banks are relying on Play Integrity protection as well as SMS-based 2FA, neither of which are both safe and private.
Unless you have friends, of course, and want to keep in touch. (Not a problem for me).
In Android apps need to request location permission. You can reject it and/or uninstall those which request it.
Most apps will only be able to request location while running in the foreground.
Weather apps are unusual for having a reason to request background location access and so you should treat them with particular suspicion.
> Weather apps are unusual for having a reason to request background location access
Not really. I can just set the location in settings.
I regret that we've moved away from a world where you could easily tell your device throw a privacy-preserving bone to pesky apps. ("Sure, you've got location access, but it'll only show my house, you don't get to see where else I go.")
Instead our ownership and agency has been sacrificed on the altar of "but BigCo doesn't like it because users can lie."
You kind of can, but it means rooting the phone after which you can't run banking apps etc.
Personally I am okay with my bank app doing this but I'm probably in a minority here.
Code your own apps, run your own things.
This is why network-wide dns ad-blocking is necessary.
Setup a personal ad-blocking vps/vpn to route traffic through when away from home: https://trailofbits.github.io/algo/
Are we back to trusting Ubuntu these days? Why can’t this support Debian, or…? (Yes I know see the FAQ)
I’d rather give my info directly to the party at this point
Shouldn’t have bullied tiktok into selling for US users
So I let a company know my location, and they turn the data over to the pigs.
Not good.