Google Maps and it's permissions. - General Questions and Answers

I recently downloaded LBE Privacy Guard. It is a nice app that let's the user control what permissions your apps have. One of the features it has is that it can keep a log of the apps. I noticed in this log that google maps is accessing my location a few times an hour. I'm not sure what I should make of this. Is this something I should be concerned about? What do you guys think?
Sent from my Frozen1.2 Genocided2 Epic4G

I wouldn't be concerned with it. Google's servers keep in contact with your phone for multiple reasons. Overall it is very non invasive and millions of ppl use it.
If I've helped you, please hit the THANKS BUTTON

Tasker is what kept maps looking up my location. I have a task set for when I'm at work. It kept looking to make sure I was there. I took that location out of the task and 'poof' maps didn't show up on that log any more.
Sent from my Frozen1.2 Genocided2 Epic4G

Related

found app that keeps location private from google

found an app called Location Cache Map in market and it seems from what it says that it prevents maps and other apps from setting location data on phone and clears map cache while still allowing full use of GPS functions. i tried it and it worked, though it takes an extra couple seconds to lock on.
seems to work. you can see your stored location data with it even if you dont want to block location cache. interested in hearing from others on if this seems to really be working.
Any aftermarket Rom do this.
Sent from my LG-P999 using XDA Premium App
sure if ya delete maps or something. mine always still saved location data on my phone. this lets you use the functions without phone saving cache data. ive never seen this function on any rom ive used. but if so id like to know how and save some time.
Has anyone else tried this?
Google has always kept this type of information---even before android. It's in their terms and conditions. Honestly, anyone who doesn't want to give Google access to this information, shouldn't use their phone.
aczarney said:
Google has always kept this type of information---even before android. It's in their terms and conditions. Honestly, anyone who doesn't want to give Google access to this information, shouldn't use their phone.
Click to expand...
Click to collapse
You should, at minimum, have the choice to turn it off and delete the data that is stored on your phone readily.
Let's get real, corporations have too much freedom when it comes to using us as pawns. It should be an option to opt out period. I use google stuff cause I like the way it works, they don't need my location for that.
Sent from my HTC Vision using XDA App
Google's been collecting information rather openly for years. I just don't get why people are surprised they are collecting it with their phones too. It was never really a secret. There's no option to turn it off simply because that's the terms and conditions for use of the phone--that Google is entitled to access to your location as well as other information regarding how you use your phone. It honestly is like they're watching your every move. If you don't want access given to Google for this information, don't use the phone. That's literally your only option, and legally, Google is completely backed up on that. Now apple, that's a different story. But Google has been doing these things ever since Google as a company was created, its actually part of what has allowed them to grow. To know how their services are used and how their users function more or less.
I could really care less. Ask yourself. What is Google going to do with your information besides direct ads based on you interest. As long as Google execs aren't going to come track me down, I could really care less what data they collect. If your worried about people collecting your data then don't ever buy anything off the internet or for that matter, don't ever use a credit card to make purchases.
read this. its a rant but its how it REALLY is.
Grammer and spelling errors warning!!!
its doesnt matter what they are going to do with it. i have a right to privacy. the more you look into your specfic settings for your google and gmail account, the more you'll see that a lot of what they ask for they don't tell you. they allow you to turn it off.... if you even know how to where to find it, or if you even know they are collecting it.
they keep much more than just location and basic data for ads. im not going to get into all of it because theres too much. go look for yourself.
basically these days to have a phone thats fun (smartphone) you are forced to choose iOS or Android. Both are bull**** when it comes to privacy. THATS WHY THEY ARE DEFENDING THERE ASSES IN COURT!!! Just the fact that it has gotten to the point of major national news shows that it isn't just nothing. $500 million lawsuits aren't to be taken lightly.
And it's not just my privacy. Many MANY apps and services including googles require access to many things that the app has absolutely no reason to have. theres a dev in the market called FREE WING go download his persmissions apps named after specific permissions example: READ_PHONE_STATE, it shows you some of what that permission pulls from your phone such as your name, device ID, phone number, contacts, and more. SMS permission had not just the ability to "tell if i get a text" but has, and records, everything that was said, who sent it, and their numbers. or go get an app called "Denied permissions" it will show you how many each app has and break them down and explain a little of how they work. then use it to look at Google Docs app permissions. it shouldn't have the ability to change,delete, modify my account passwords, and that's just one of its BS permissions.
any facebook app that uses facebook to as an alternative log in gives that app by DEFAULT the ability to read my contacts, status, my FRIENDS status and apps they are using, where they also go, their photos, mine, and more (go to the apps privacy settings on facebook to find this stuff). my friends apps one THEIR phone have access to MY personal information, just because we are associated in facebook. NOT COOL! Facebook just told its game devs a couple days ago that they had like a week or something to change their games to prevent 3rd party apps that are associated with their games from accessing or keeping their patrons information while they play their games.
basically it comes down to my information can be accessed by places i didn't give the OK to or even have heard of. google shares information with apps. try reading the privacy polices for apps sometime (go read AppPack's - Highlight app and T-mobile Mall's app privacy policies). its like the fine print that no one ever reads in contracts or car advertisements. its there but no one takes the time.
google used to be a damn search engine. now they own android, google, Google Chrome OS (just came out), admob, and more. im ok with ads. and them having info i know i asked them to hold on to. I can't imagine what dirt someone could find on someone running for president in 10 years. dirty pics from when someone texted them when they were 25, 18, 16. or their online diary they kept for some reason. things they said on a forum, damn i couldn't imagine my old myspace stuff. some of that could get me in to trouble. i was a party animal at the time. ya see where i'm going? wouldn't have posted that stuff 10 years ago if i had known what i know now.
theres enough info of ours unintentionally online and accessible. go google yourself. they don't need my location to boot
don't believe any of this then take some time to read what you are saying ok to. some privacy policies are like when in those cartoons (devil and daniel mouse) the devil asks you to sign a contract in your own blood, but you forgot their was stuff written on the back page.
But you don't have a right to privacy.....you agreed to the terms and conditions of Google's use when you began using your phone. You signed those rights to privacy away when you signed that Google account into your phone (which, in fact is where the agreement to the terms and conditions lie). You installed Google docs and said "yeah, its okay if this app has access to these things." You update your Google apps every release of a new version. Apple is having issues with this yes, but that's because it was never previously a part of their terms, and they were doing it without customers knowledge. Google is not having issues, will not have issues, and presented all that information to you upfront when you signed up for your Google account, well within your buyer's remorse. Likewise, they do have an option to opt out of "Location services" during most device's initial setup procedures. I bet if anyone sued Google, they wouldn't even prepare a case. They'd refer the judge to the terms of your Google account or those permissions you were okay with.
Bottom line, Yes you have your right to privacy. But you can't give away those rights away to Google or Facebook or whoever then complain about it. Those terms and conditions aren't just there for show, they create them for these specific reasons. It'd be like If I gave you my social security number, checking account number, and address and then was shocked when my identity was stolen and went to file a police report. Working for T-Mobile, I hear these types of arguments on a daily basis, but let me just say it hasn't once changed a thing. Once you agree to them, you can't change your mind until the terms are changed and presented to you again.
I've said it before and I'll say it again. If you like privacy, DO NOT USE A SMARTPHONE. You see, I use a smartphone because I could give two ****s less what Google has access to in my phone. There are only 9 numbers I don't want anyone having access to and lets be honest. I highly doubt Google is stealing our SS #'s.
A link to google and it's work it does for the NSA and CIA. They are more than a company pushing Internet mobile ads. Do not do anything with your phone that you do not want recorded and handed over to the government.
http://www.pcworld.com/article/188581/the_googlensa_alliance_questions_and_answers.html
Remember what google and others did to to people yearning for freedom in China.
http://www.nytimes.com/2006/02/15/technology/15cnd-internet.html

Speed improvements

Hey! tl;dr? Click here to go directly to the fast improvements post and disable some unwanted services.
Still want more fun disabling services? Read the second post.
Hi all,
I improved the speed of my G2 recently and felt that the community might appreciate this as well. It's probably not the "best guide" for everybody, but this is what I've done and it's worked nicely for me so far.
I recently got irritated at my phone being occasionally sluggish. So, when it was sluggish one time, I went to Manage applications->Running Applications, and saw that Facebook decided it wanted to start itself up in the background.
Now, I'm as big a fan as the next guy for having multi-tasking, but randomly starting an app in the background without my consent is not what I consider to be useful or resource-friendly. I decided to "freeze" the app using SD Maid (you can do this with Titanium Backup as well). Facebook is now in a frozen state so it will not launch itself at all. Ha!
What do I do about having no Facebook now? Well, there happens to be a great app on the Market called Fast for Facebook. This is quite an improvement over the sluggish and buggy Facebook app. I installed that and am having a blast with it so far.
I wanted to check for other apps that were dawdling in the background. So I looked again in Running Applications and found that Maps decided it wants to be running too. I went to the settings for the Maps application, and turned off Location reporting. Why would I want an app sucking my resources dry to alert the world where I am? I'm not that much of a socialite or stalker prey. I also turned off Automatic check-ins.
Previously, I'd gone through a few other apps and turned off automatic sync. Things like DropSync (to sync Dropbox), Tumblr, Google+, and Twitter are not necessary for me to have reviving themselves in the background. I should be the authoritarian ruler of all of the apps over my phone- no freedom here to run around as you please.
I set up a couple apps to run at odd hours of the night. I only need to have photos and documents synced probably once a day, so I set up Tasker to do it automatically while the phone is charging and connected to Wifi at around 4am. I've set up Titanium Backup to do backups something like every Tuesday night, Friday night, and Sunday night, each at like 4am as well; and upload those backups to Box. I want to use my phone fast when I use it during the day, and at night time it can take its time with these lesser-priority tasks while I'm asleep.
Email/Gmail and Messages still have notifications and syncing, as well as the occasional Pulse RSS feed notification. All else seems to be shutting up though, which is good. What I would really like to do is have Market update its apps automatically at like 4am, so it won't spend resources checking for updates in the background. I can't find how to do that though.
One app that really gets under my skin is Amazon Appstore. This guy runs in the background too- I've turned off its notifications but I'm pretty sure it'll still sit there sapping my resources. This one's a toughie because I want to uninstall or freeze it, but I want to still be able to get good free apps from it once a day. There have been some really good apps and some really bad ones, but the good ones are worth it to me.
I might add in more things to disable. It's been faster so far, so I'll see how it goes over a couple days. One last thing I did was install SetCPU. I use that now instead of CyanogenMod 7's built-in CPU stuff. I don't know if it's a placebo or not, but I seemed to notice a boost in performance from it (not instantly, but in general I see less lag).
Hope this helps someone, best of luck with all of your phones.
-Proxin
use watchdog to spy on what apps are actually running and using cpu in the background, lots of apps can be open in the background and not using anything cpuwise
demkantor said:
use watchdog to spy on what apps are actually running and using cpu in the background, lots of apps can be open in the background and not using anything cpuwise
Click to expand...
Click to collapse
Watchdog is a great idea too, I forgot to mention that.
If anyone else has recommendations they are all welcome!
Proxin said:
Watchdog is a great idea too, I forgot to mention that.
If anyone else has recommendations they are all welcome!
Click to expand...
Click to collapse
For speed improvements, i usually use titanum backup to remove alot of useless apps i dont use (which frees up alot of ram). then i supercharge my phone and set it to agressive. And i also change up the build prop.
I need to post my additions.
I realized that by disabling Facebook, I lost my contacts that I had from there. That's no good. So I re-enabled it.
Now, Facebook has a few select services it likes to let run in the background. One specific one is MediaUploadService. This runs even when you are Not uploading anything, which is ridiculous because it hogs your resources.
However, if you disable this service completely, you won't be able to upload any photos to Facebook from your phone.
SO, I set up a script to disable all of Facebook's services like this at once, and I use the app called Llama to execute this script every time Facebook exits. I set it up to call my enable script once Facebook is started, then 5 minutes after Facebook closes it disables all of the Facebook services.
Here is what I used...
Enable Facebook services:
Code:
su -c 'pm enable com.facebook.katana/com.facebook.katana.service.MediaUploadService; pm enable com.facebook.katana/com.facebook.katana.service.FacebookService; pm enable com.facebook.katana/com.facebook.katana.service.BackgroundDetectionService; pm enable com.facebook.katana/com.facebook.orca.push.mqtt.MqttPushService; '
Disable Facebook services:
Code:
su -c 'pm disable com.facebook.katana/com.facebook.katana.service.MediaUploadService; pm disable com.facebook.katana/com.facebook.katana.service.FacebookService; pm disable com.facebook.katana/com.facebook.katana.service.BackgroundDetectionService; pm disable com.facebook.katana/com.facebook.orca.push.mqtt.MqttPushService; '
With this new ability to disable services, I took a look at Amazon AppStore's annoying service, and disabled it using this script with Llama like I did with Facebook:
Amazon Service Disable script
Code:
su -c 'pm disable com.amazon.venezia/com.amazon.venezia.service.UpdateService'
Proxin- note: old code said:
Next, I noticed SwypeConnect was keeping itself active, so I disabled it too (Swype never gets updates anyway, so I didn't see anything bad with doing this):
Code:
pm disable com.swype.android.inputmethod/com.swype.android.connect.ConnectClient
Click to expand...
Click to collapse
There's an app on the Market called StartupManager, I used that to kill off extra startup services that were not necessary. Things like Youtube, MyTracks and Maps were starting up. My view is, why do these things start when I don't start them myself? I stopped the services and have seen some pretty good responsiveness so far.
Go to the market and search for an app called gemini manager. It needs root but you can disable autostart for all apps with it.
Also get LBE privacy guard- it will block apps from using gps/data which can also increase battery life
redspeed said:
Go to the market and search for an app called gemini manager. It needs root but you can disable autostart for all apps with it.
Also get LBE privacy guard- it will block apps from using gps/data which can also increase battery life
Click to expand...
Click to collapse
Great, I'll look into those too- thanks
@proxin:
Amazing post! how do you find the path for each of those components inside a package?
I use the same method with Tasker (instead of llama). Perform a task (run shell command) on the exit of a App profile
Also, the .Mqtt. should be all lowercase (figured out after that service would not disable), like this:
com.facebook.katana/com.facebook.orca.push.mqtt.MqttPushService
file2mail said:
@proxin:
Amazing post! how do you find the path for each of those components inside a package?
I use the same method with Tasker (instead of llama). Perform a task (run shell command) on the exit of a App profile
Also, the .Mqtt. should be all lowercase (figured out after that service would not disable), like this:
com.facebook.katana/com.facebook.orca.push.mqtt.MqttPushService
Click to expand...
Click to collapse
Thank you, hope it has helped! I found them by looking up their Running service name on Google, and seeing people's logcat errors on there elaborated them for me. So I'd try a search for "com.facebook.katana*MqttPushService" and Google would direct me to the proper one.
You're spot-on with the Mqtt needing to be lowercase, I found the same issue on mine and got pissed off when I saw that the Mqtt service was still running forgot to change the post to reflect it though. Thanks for the notice
Seems like the best method for using your phone properly is to do like we're doing, otherwise applications with poor choice in how they handle resources, will clutter up the phone.
Btw, I tried Gemini App Manager and it works well for disabling autostart in apps. LBE Privacy Guard is intense in how much it locks down your phone, but that's locked down it's even a bit too much for me haha. It's a great app and will work for many people though.
I've noticed maps running in the background many times. I didnt know you're able to switch this off, thanks for the info!
Killer1desireZ said:
I've noticed maps running in the background many times. I didnt know you're able to switch this off, thanks for the info!
Click to expand...
Click to collapse
No problem, I don't recommend killing off the Maps service though as it's probably needed for some location service (in my case I need the cell tower location service for some Llama profiles)
That's just my case though. Before you disable the service, maybe see if you can turn off automatic location reporting in Latitude? Go into Latitude settings->Location Settings and change Location reporting and Automatic check-ins to be Off.
Hope this helps. It shouldn't disable the entire Maps service but maybe it will reduce the amount of check-ins that Maps does without your consent.
Perhaps one of the biggest performance hits in an Mid Spec Android phone is how many App's it's carrying.
It is generally a good idea to keep the App count low. A general rule of thumb is to have no more than 40~ user apps on your Device. Since you have less apps installed (some of which could be idling or actively operating in the backround), you'll have more free RAM/space in the internal storage which in turn will mean more speed/battery efficiency.
Hope this can be of help
crestofawave said:
Perhaps one of the biggest performance hits in an Mid Spec Android phone is how many App's it's carrying.
It is generally a good idea to keep the App count low. A general rule of thumb is to have no more than 40~ user apps on your Device. Since you have less apps installed (some of which could be idling or actively operating in the backround), you'll have more free RAM/space in the internal storage which in turn will mean more speed/battery efficiency.
Hope this can be of help
Click to expand...
Click to collapse
I've heard this said too, but I've never seen evidence that the more apps you have installed = the more apps are actively running. It's definitely a good idea to have less installed, but I don't think they'll run in the background unless they have autostarting capabilities like you can monitor with Gemini App Manager.
This is just me without even a Bachelor's degree speculating and relaying my experience though, so don't take my word for it
I notice a definite lag once I go above a certain amount of apps. I uninstall 10 or so and its a rocket! But then again I have waaaay more then 40 probably like 100 or something
Maps doesn't have that option for me. Anyways uninstalled 20 apps
New fun things to try...
I enjoy GO Launcher Ex just as much as the next guy who uses it as the default Home application, but I don't enjoy it making multiple services of itself that do, literally nothing. What I noticed specifically was a service called GOMusic, taking up about 4MB of RAM which could be used for other, more useful things.
What I did to fix it was:
Code:
pm disable com.gau.go.launcherex/com.jiubang.ggheart.apps.desks.appfunc.mediamanagement.musicplay.MusicPlaybackService
My Google Music widget still works fine, so apparently the GOMusic thing was just a waste of RAM (unless someone can explain a good reason to leave it be?)
One more addition I did was that, I keep seeing SwypeConnect as a service and I don't like it. It shouldn't need to constantly connect, for me to simply use Swype whenever I do.
I tried two things, pretty sure the second fixed this:
Code:
pm disable com.nuance.swype.input/com.nuance.swype.input.SwypeConnect
pm disable com.naunce.swype.input/com.nuance.swype.connect.ConnectClient
And next, I saw that Google Voice had a Widget service that liked to hang out and sap my resources. This would be useful but I don't have a widget set, so I disabled it:
Code:
pm disable com.google.android.apps.googlevoice/.widget.WidgetService
That worked for me. I can still send and receive messages with Google Voice, so I still have the same functionality I need without having an extra service in my list.
Note that, as usual, these are easily reversible by using using "enable" instead of disable in that code block.
Hopefully this will help someone else as well.
New experimental service disabled; I had noticed multiple Maps services running whenever they pleased. I can do with a NetworkLocation service from Maps, because I use Llama for location profiles and all, but not a Prefetcher service for it.
Here is what I used to disable the Prefetcher service...
Code:
pm disable com.google.android.apps.maps/com.google.googlenav.prefetch.android.PrefetcherService
I haven't seen any negative effects from this so far, but I will update this if I do.
@Proxin
Hi there,
I'm realy like your entries here, but i cant get through with the scripts killing facebook services. Can you be more specifc pls how to set those scripts you mentioned in Llama?
i've just tried to do things you say with facebook background services and for maps' prefetcher, but it says Segmentation Fault, as far as i know , segfaults are not normal linux program response, right? without super user privileges it just says 'Killed' [i tried both because 'pm set-install-location' worked for me only without super user]
EDIT:
ok, i'm noob, i just had to export LD_LIBRARY_PATH, now pm doesn't segfault for me as superuser
hi can any ody guide me how to use those su commands with llama?? thanks

life without gapps aka google apps

Moderators PLEASE READ THIS THREAD BEFORE DELETING IT LIKE YOU DID THE LAST ONE
I did a couple of different searches on this board, looking for an alternative to gapps aka google apps. What viable alternatives to the google play store are there? google hangouts and google mail? I came across a thread discussion nogapps and the blank store that comes with it, but i'm not overly convinced that it lacks google's data mining processes.
I am not asking for sites that provide "pirated software" as I already know where to get that. I am asking for a "store" where I can search various phrases, and get a good return without those apps being relinked to google play store.
Have you tried the Amazon App Store? (Yes, they have Android apps)
Am I correct in assuming you are looking for a market that is completely separate from Google's servers? If privacy is your concern, you should know that all services that are provided for "free" employ some sort of data mining, because that is how they can afford to keep those services running. Since Google Play is the largest repository for Android apps, you would be hard pressed to find another service that hosts all of the same .apks, as that would seem redundant.
There simply is no viable alternative to the Play Store.
You can get alternatives, but they won't be nearly as good.
As for the rest of the gapps there are plenty of alternatives that are just fine or better.
Why are you so against gapps though? Washington doesn't care what apps you use.
Sent from my GT-I9000 using xda premium
Even if the app doesn't mine your data, your ISP still does ...
plenty
well there are plenty stores available on internet. if you are on android 4.1 and rooted then you can install NOKIA app store. well its tricky to use, you can find a apk on xda. when you install it just install aptitode market from there, though aptitode can be installed alone too. you can find almost all apps. but still google holds android that will mean they will have the maximum apps and secure and most updated apps. even developers always put latest updated apps on play store first. well i used wildfire which has no gpu so cpu has to do work for most of operations which makes slow and to overcome the low space on that phone i sometime skip the gapps. it depends if you want surveillance free android then go for other market apps.:silly:..google even know when you are walking. i read this on xda somewhere.:laugh:
choice is yours.
100s of stores are available nowadays...
Gmail alternate is aosp email
Maps run without email account...
What else u need?
doctor_droid said:
What else u need?
Click to expand...
Click to collapse
A way to synchronize (not backup/restore) my contacts and calendars on the Internet (Mega, Dropbox, whatever...) to be shared among other devices. This is bare minimum.
Then, if I could also synchronize (again, not backup/restore)some system stuff like WiFi passwords, call logs, SMS/MMS, instant messaging stuff and some application settings, this would be an extra great feature.
Can you do it without GApps? If you know how to, please share!
I don't know if this idea will benefit the app devs. Getting rid of the play store is like taking away one of their BIGGEST market place. What do you think?
People wouldnt feel the need to seek alternatives if Google wasnt so hardcore with it
Like dam, is it really even reasonable to keep location tracking in the background 24/7 and 15 different types of loggers at once? You'd think those morons would understand how large of a percentage of their would-be-users would actually use more of their services if they didnt chose to make it an all or nothing affair. I literally use only the playstore, and because of whats needed for that I go ahead and utilize the sync. I would definitely be open to gmail, g+, etc. if they werent so retarted with it. Rant over.
carlfinity said:
don't know if this idea will benefit the app devs. Getting rid of the play store is like taking away one of their BIGGEST market place. What do you think?
Click to expand...
Click to collapse
I think more about my privacy than the app business.
I wish in could use something like CM with some synchronizing mechanism.
Unluckily for me I have a non-dumb-phone, a netbook and a desktop PC.
I use all three for work and would need some synchonization mechanism for calls, SMS and other stuff.
Do you have a suggestion in this direction?
I have read the opening post. So please remember that.
However, this kind of question will always lead to warez sites.... As it already has. And will continue to. And another thread asking same thing will lead to warez app responses yet again.
Google play store and Amazon are really the only ones that are legit and most other sites offer cracked versions of paid apps.
Obviously a website dedicated to Development and developers will not approve of most of the recommendations here, which I have deleted.
Please don't open another one of these threads. There's been enough answers provided already. So this thread is closed.
Thanks for understanding,
Darth
Forum Moderator

(Potential) Malware found on Elephone S3 right out of box?

Hi guys
I recently purchased a Elephone S3 from Everbuying.com. I heard people talking about how notorious these Chinese phones are having malware installed on them, so I decided to give the malware check a go and use about 10+ popular Malware detection apps (Avast, Kaspersky, Avira, Trojan Killer, you name it) currently available on Play Store.
Out of all those, excluding warnings that doesn't really matter in this regards (Malware specific), the below two apps gave me those respective warning results.
I have done some research, but i don't think I found any relevant info in this regards. So, for all the guru out there, the question is obvious, should I be worried about these "non-deletable" apps (if not rooted)? If they ARE malicious, can I be worried free by turning off ALL permissions for the apps and in some case, disable the app (I can disable the Beauty Center, not ELE Launcher).
Thanks to you all for any input!
Malwarebytes Anti-Malware
App - Beauty Center
Message - Android/PUP.Riskware.Cooee.a
App - ELE Launcher
Message - Android/PUP.Riskware.Cooee.H
Stubborn Trojan Killer
App - Beauty Center
Message - General Trojan
App - ELE Launcher
Message - General Trojan
bagachin said:
Hi guys
I recently purchased a Elephone S3 from Everbuying.com. I heard people talking about how notorious these Chinese phones are having malware installed on them, so I decided to give the malware check a go and use about 10+ popular Malware detection apps (Avast, Kaspersky, Avira, Trojan Killer, you name it) currently available on Play Store.
Out of all those, excluding warnings that doesn't really matter in this regards (Malware specific), the below two apps gave me those respective warning results.
I have done some research, but i don't think I found any relevant info in this regards. So, for all the guru out there, the question is obvious, should I be worried about these "non-deletable" apps (if not rooted)? If they ARE malicious, can I be worried free by turning off ALL permissions for the apps and in some case, disable the app (I can disable the Beauty Center, not ELE Launcher).
Thanks to you all for any input!
Malwarebytes Anti-Malware
App - Beauty Center
Message - Android/PUP.Riskware.Cooee.a
App - ELE Launcher
Message - Android/PUP.Riskware.Cooee.H
Stubborn Trojan Killer
App - Beauty Center
Message - General Trojan
App - ELE Launcher
Message - General Trojan
Click to expand...
Click to collapse
go ahead and disable Beauty Center, as far as ELE Launcher, that seems legit. But if you don't like it, just replace it with something like Nova Launcher.
mattzeller said:
go ahead and disable Beauty Center, as far as ELE Launcher, that seems legit. But if you don't like it, just replace it with something like Nova Launcher.
Click to expand...
Click to collapse
Hi mattzeller, thanks heaps for the info! This might not be a good question, but just for my information, generally speaking, is there a way to distinguish between a real harmful malware (actively stealing personal info) and an app that has more access and integration to the phone's OS than others by looking at the information provided? In other words, is there any obvious give away sign?
Thanks again for the help!
bagachin said:
Hi mattzeller, thanks heaps for the info! This might not be a good question, but just for my information, generally speaking, is there a way to distinguish between a real harmful malware (actively stealing personal info) and an app that has more access and integration to the phone's OS than others by looking at the information provided? In other words, is there any obvious give away sign?
Thanks again for the help!
Click to expand...
Click to collapse
Well look at reviews of the app, see if it is installing other apps without your consent, or constantly nagging you to download other apps. Generally 99.99% of apps on Google play are safe. Occasionally some crapware gets on there, but if you take a look at its rating and reviews (not just the highlights) you should be good.
Sent from my SCH-R220
bagachin said:
Hi mattzeller, thanks heaps for the info! This might not be a good question, but just for my information, generally speaking, is there a way to distinguish between a real harmful malware (actively stealing personal info) and an app that has more access and integration to the phone's OS than others by looking at the information provided? In other words, is there any obvious give away sign?
Thanks again for the help!
Click to expand...
Click to collapse
Always check the apps permissions. I absolutely refuse to install an app that has permissions that it shouldn't be using. However, if the app you're about to download needs permissions related to the app features, that's OK with me.
I see so many Play Store apps that are just total spyware in my book. Flashlight apps are a good example of this. There is zero reasons a flashlight app needs to read my contacts or a data connection. Just be mindful of reviews and permissions and you'll be OK.
KernelCorn said:
Always check the apps permissions. I absolutely refuse to install an app that has permissions that it shouldn't be using. However, if the app you're about to download needs permissions related to the app features, that's OK with me.
I see so many Play Store apps that are just total spyware in my book. Flashlight apps are a good example of this. There is zero reasons a flashlight app needs to read my contacts or a data connection. Just be mindful of reviews and permissions and you'll be OK.
Click to expand...
Click to collapse
I don't worry about apps with excessive permissions, I just revoke the permissions I don't like.
Sent from my SCH-R220
mattzeller said:
I don't worry about apps with excessive permissions, I just revoke the permissions I don't like.
Click to expand...
Click to collapse
That's the best way to do it.
I do the same thing, but I see lots of people posting here that aren't too tech savvy. For them be mindful of what you download.
mattzeller said:
Well look at reviews of the app, see if it is installing other apps without your consent, or constantly nagging you to download other apps. Generally 99.99% of apps on Google play are safe. Occasionally some crapware gets on there, but if you take a look at its rating and reviews (not just the highlights) you should be good.
Sent from my SCH-R220
Click to expand...
Click to collapse
Thanks for the advice. Yes, I am aware that common source/cause of malwares are side load apps and rooted device. So I am always fairly cautious about any apps i installed via non-play store source. However, these two caught apk are installed right out of box. That kinda annoys me. I don't jump on the bandwagon and say Chinese phones are infested with malwares and I believe a lot of the time people just over exaggerate and blow some minority out of proportion.
However, the truth is, this is the first Chinese phone I got and it came with two identified malwares. To be fair, it might not be particularly malicious, but it's enough to make me have second thought about my purchase....
KernelCorn said:
Always check the apps permissions. I absolutely refuse to install an app that has permissions that it shouldn't be using. However, if the app you're about to download needs permissions related to the app features, that's OK with me.
I see so many Play Store apps that are just total spyware in my book. Flashlight apps are a good example of this. There is zero reasons a flashlight app needs to read my contacts or a data connection. Just be mindful of reviews and permissions and you'll be OK.
Click to expand...
Click to collapse
Thanks for the comment! Yes, I am quite careful about the app I get to choose to install, but I have little control over these apps that come pre-installed on these chinese phone and got detected as "malwares"
mattzeller said:
I don't worry about apps with excessive permissions, I just revoke the permissions I don't like.
Sent from my SCH-R220
Click to expand...
Click to collapse
Yap, what I did for those two apps I mentioned are turning off all permissions access to them, disable app for the one I can and turn off background data access. Hopefully it will freeze them for good and stop them from playing naughty.
Just a question though, say I do all those above (e.g. switching off permission, force stopped etc), technically speaking, can a malware still be "active and do what they "meant" to do"? I meant after all, they are meant to do something "out of control" right?
bagachin said:
Yap, what I did for those two apps I mentioned are turning off all permissions access to them, disable app for the one I can and turn off background data access. Hopefully it will freeze them for good and stop them from playing naughty.
Just a question though, say I do all those above (e.g. switching off permission, force stopped etc), technically speaking, can a malware still be "active and do what they "meant" to do"? I meant after all, they are meant to do something "out of control" right?
Click to expand...
Click to collapse
No, if you revoke the permission to view your contacts, it is the system that is blocking the apps ability to view your contacts.
Though I think you are being a little paranoid.
Everyone freaks out out all the permissions apps require, when the app actually never uses most of the permissions it asks for, at least not in the way you think. You wouldn't think the launcher needs permissions to access your contacts, but it does. How else is it going to allow you to make a call, or display an incoming all, or missed call/text badges.
I mean take a look at the litany of permissions Nova Launcher and TeslaUnread require, yet we all know the app is not malware. As long as you install from legitimate sources, you will be fine. Like I said in my first post, disable the Beauty app, the other is the Launcher. If you don't like it, install a different one.
Sent from my SCH-R220
Who would you rather have snoop in on your calls? China, or USA.. Because it is one or the other.. me personally, I will take the country in which I do not reside...
mattzeller said:
No, if you revoke the permission to view your contacts, it is the system that is blocking the apps ability to view your contacts.
Though I think you are being a little paranoid.
Everyone freaks out out all the permissions apps require, when the app actually never uses most of the permissions it asks for, at least not in the way you think. You wouldn't think the launcher needs permissions to access your contacts, but it does. How else is it going to allow you to make a call, or display an incoming all, or missed call/text badges.
I mean take a look at the litany of permissions Nova Launcher and TeslaUnread require, yet we all know the app is not malware. As long as you install from legitimate sources, you will be fine. Like I said in my first post, disable the Beauty app, the other is the Launcher. If you don't like it, install a different one.
Sent from my SCH-R220
Click to expand...
Click to collapse
Unfortunately the way things are with the permissive Android system, we have to be a little paranoid. The built in system apps like launchers and permissions can't be disabled easily unless the user is technical enough to know about rooting using apps like xposed/xprivacy.

[Privacy] Puttin' Google in the Goolag

Situation:
I have somewhat of a "love-REALLY HATE" relationship with Google apps and ecosystem.
On one hand, they are great at what they do.
On the other, it's like having a spy satellite overhead, given how much telemetry it does.
Question:
I'd like to cut all of the Google apps' internet, location, sensor and background activity access for good when not in use. Or at least spoof whatever personal data is being sent (Device info, location, activities, etc). Any way to do that?
What I've done so far:
My current way-to-go method involves installing RethinkDNS+firewall, then blocking every single one of google apps including Gboard. It sort-of works, but very inconvenient, as I have to manually enable internet access for a particular app and/or service when needed. I also tried edXposed's XluaPrivacy module to cut off access to certain permissions. Again, cumbersome.
After going through F-Droid, I found an app called "Insular", that claims being able to put all of the "big brother" apps (such as Gapps) behind an isolated sandbox, a digital gulag of sorts.
Thanks for the pointer to Insular whose advertising on F-Droid says:
Insular is a FLOSS fork of Island.
With Insular, you can:
Isolate your Big Brother apps
Clone and run multiple accounts simutaniuosly
Freeze or archive apps and prevent any background behaviors
Unfreeze apps on-demand with home screen shortcuts
Re-freeze marked apps with one tap
Hide apps
Selectively enable (or disable) VPN for different group of apps
Prohibit USB access to mitigate attacks with physical access
Click to expand...
Click to collapse
Based on that, I suspect this XDA thread about "Island" may be useful.
[APP][5.0+][BETA] Island - app freezing, privacy protection, parallel accounts​
"Island" is a sandbox environment to clone selected apps and isolate them from accessing your personal data outside the sandbox (including call logs, contacts, photos and etc) even if related permissions are granted. Device-bound data is still accessible (SMS, IMEI and etc).
Isolated app can be frozen on demand, with launcher icon vanish and its background behaviors completely blocked.
Click to expand...
Click to collapse
Totesnochill said:
Question:
I'd like to cut all of the Google apps' internet, location, sensor and background activity access for good when not in use. Or at least spoof whatever personal data is being sent (Device info, location, activities, etc). Any way to do that?
Click to expand...
Click to collapse
Like you, my relationship with Google is strained where I don't set up any Google Account on Android and it works just fine.
I don't have a contacts.db sqlite database for that reason too, so my favorite communication apps are all designed to store their own contacts db internally to the app itself.
I replace Google apps with FOSS equivalents such as NewPipe (or, more recently, Vanced YouTube) for example.
And I spoof my GPS location by default (using Lexa Fake GPS, for example).
Of course, given I don't have a Google Account on my phone, I use the Aurora Store instead of the Google Play Store. Of course, I strive for apps that don't require Google Framework Services (GSF) which Aurora neatly filters out for us.
Since I'm not rooted, I can't delete Google Play Store, but I can disable it, which is almost as good.
And, I use privacy-aware apps for my messenger, calendar, contacts, and dialer apps (many of which come from Simple Mobile Tools' suite which are available on F-Droid).
To keep my WiFi SSID/BSSID/GPS/Strength/etc. out of the hands of Google (& Mozilla and Kismet and Wigle, etc.), I add "_nomap" to the SSID and I turn off the SOHO router SSID broadcast (which "hinders" most cellphones from uploading my BSSID information to Google public servers); but then I have to also turn off "AutoReconnect" on Android 12 and also I have the Developer Options set in Android 12 to randomize the MAC address on EACH connection; however that means I need to set any "static" connections on my LAN from the phone and not with address reservation on the router (which typically utilizes the MAC address).
And it's not just Google we need to keep our data out of their hands, as I even use WhatsApp privacy aware tools such as the WhatsApp dialer and WhatsApp Click to Chat mechanisms (to keep my contacts out of Facebook's hands too).
For offline maps, I use a quick web browser lookup on a privacy browser (such as Tor or Epic or Opera), since the Google address lookup is still the best in the world... (which is the love/hate relationship, right?)... and then I paste the GPS coordinates that the privacy browser found on the maps.google.com web site into a local routing application (such as a shortcut to a browser to google maps on the phone or better yet, to a dedicated offline map program such as OSM And~), and even traffic can be gotten without Google (e.g., Sigalert & 511 apps).
I used to reset the Advertising ID with a homescreen shortcut that could be activated from Windows via a batch file over Wi-Fi, but now with Android 12 we can wipe out the Advertising ID altogether (i.e., reset it to all zeroes). However, I still periodically change my GSF ID and other supposedly unique identifiers.
I'm still trying to figure out the implication of "trackers", so if anyone has more information about them, please advise.
Off hand there must be scores more things I do for privacy, where we probably should have a main thread on this site of all the myriad things people can do to increase their privacy on Android (some of which I've screenshotted for you below).
GalaxyA325G said:
Like you, my relationship with Google is strained where I don't set up any Google Account on Android and it works just fine.
Click to expand...
Click to collapse
Thanks heaps for the very in-depth response. Really opens up on a lot of things I wasnt aware of, and I realized that unlike desktop, when it comes to mobile privacy I'm still a bit behind.
Are there any guides where I can do some reading on the concepts and techniques you've described? Especially regarding contacts.db sqlite database, GPS spoofing and privacy-aware options for accessing WhatsApp.
Also, what are your thoughts on MIcroG?
Totesnochill said:
Thanks heaps for the very in-depth response.
Click to expand...
Click to collapse
I try to put effort into the response so that others can benefit (but nobody ever presses the like button so maybe it's not worth the effort).
For example, when I mentioned I spoof my GPS, I looked up the app I used and linked to it so that you wouldn't have to test a score of apps like I did to find the best one.
Totesnochill said:
Really opens up on a lot of things I wasn't aware of, and I realized that unlike desktop, when it comes to mobile privacy I'm still a bit behind.
Click to expand...
Click to collapse
That was just off the top of my head where there has to be at least a hundred different privacy things I do on Android to distance me from Google that most people don't bother to do.
I admit, sometimes it feels like we're putting a dozen locks on the front door, but in the end, we LEARN a lot about Android in the process.
A lot of the protection is to protect ourselves from others who don't know how to configure their phone, so they are uploading our private information (like our contacts and home locations) to Google databases.
For example, the typical Android phone when it drives by your front door uploads to google your exact location, your signal strength, your unique BSSID and your SSID... where you'll note in my response above I had to do a half dozen things on my phone and router to prevent that from happening (i.e., just adding "_nomap" doesn't work but most people don't realize that because they don't think about it).
Totesnochill said:
Are there any guides where I can do some reading on the concepts and techniques you've described?
Click to expand...
Click to collapse
I'm sure there are plenty.
But I have been in MANY situations where there are none.
Take, for example, changing the GSFID... almost nowhere on the net is that described how to do it. Almost nobody does it, but it can be done if you know how.
I really should write a set of privacy tutorials so that everyone can do it but I have to find the time, and this web site doesn't like text tutorials I found out recently. So they make it a PITA in the end to help people. Sigh.
Totesnochill said:
Especially regarding contacts.db sqlite database, GPS spoofing and privacy-aware options for accessing WhatsApp.
Click to expand...
Click to collapse
If you look at the links I gave you in my response for contacts, gps spoofing and privacy-aware WhatsApp, you'll get a good start.
A quickie is to not have a contacts.sqlite database, which means you need your own contacts.csv or more likely contacts.vcf file, which you can maintain on the PC if you like (works with Excel for example).
Now that you don't have a contacts.db sqlite database, you need to find the contacts and dialer and mms/sms apps that can suck in their own contacts.vcf file, which I pointed you to in the Simple Mobile Tools suite.
For GPS spoofing, I didn't mention you need to turn "Mock Location" on in the Android Developer Options, but that's what most people already do so I assumed you knew that. Once you turn that on, you can just select the mock location app of your choice (where I suggested one above which isn't perfect but none of them are).
That particular app moves your location every few feet and it gets the altitude and it can easily be stopped and started, etc., but I'd like it if it didn't move just "west by 10 feet every minute" but instead if it would follow a pre-determined route that I could give it. So they need a lot more work to be as good as we'd like them to be.
For What'sApp privacy, look at the two apps I linked to in the prior post as they don't need the contacts.sqlite database to work.
Your WhatsApp should only have an icon in your folders for the people you contact and nothing else, IMHO. That's the best privacy you can get, although WhatsApp does decent hashing on the contacts file when it uploads it to their servers - but still - why give them your entire contacts when you only contact 10 people (or whatever) on WhatsApp. Right?
Totesnochill said:
Also, what are your thoughts on MIcroG?
Click to expand...
Click to collapse
Funny you mentioned microG since I installed it for the first time yesterday when I was setting up Vanced Youtube based on this thread.
I generally choose apps that don't use GSF but sometimes you have to use a GSF app (e.g., Zoom meetings), and then it's nice to use MicroG instead of Google Services Framework.
I only installed it yesterday so I really don't know how well it will work for me as I didn't even need to install it to install VancedYoutube. You just need it to log into YouTube but I never do that anyway.
In summary, there's probably a hundred things we do to our phones to set up privacy but I'd have to write each one up in detail to help everyone and that's a lot of work.
Especially if almost nobody reads these threads.
GalaxyA325G said:
I try to put effort into the response so that others can benefit (but nobody ever presses the like button so maybe it's not worth the effort).
In summary, there's probably a hundred things we do to our phones to set up privacy but I'd have to write each one up in detail to help everyone and that's a lot of work.
Click to expand...
Click to collapse
Thank you for doing God's work out there. Ethics like these are what creates the content that keeps the internet from becoming a dumpster fire otherwise. Tutorials and explanations that come from the fellow users are THE best and usually directly on-point.
When I was just starting setting up Linux environment, I wrote "how-to notes" on every successful step. At first it was more like the "sticky notes" to help me remember, but eventually (as the list grew) I started writing these tips in a way as if they were to be read by someone with little background in the subject. What used to be the "Linux notes" file became 10563 lines monstrosity now... So every time I need to answer someone's question I just copypaste from this file.
GalaxyA325G said:
That was just off the top of my head where there has to be at least a hundred different privacy things I do on Android to distance me from Google that most people don't bother to do.
I admit, sometimes it feels like we're putting a dozen locks on the front door, but in the end, we LEARN a lot about Android in the process.
Click to expand...
Click to collapse
Absolutely. I've spent about 2 weeks tweaking my new phone (Nokia X6), trying out different roms/recoveries and app setups. Pissed off a bunch of people in the process - most wouldn't understand that I'm setting up a system to last another 7 years, just like my previous phone (Galaxy Gprime). Not to mention that with the amount of sensitive info on the phone, security and privacy are a legit concern, and worth learning about just how one learns to install and use the lock on the front doors.
Phones became disposable both in software and hardware, and so have the general attitude towards the devices.
My final setup became AOSP PixelPlusUI Rom (comes with about openGapps nano worth of Google stuff) with most other stock apps (contacts , dialer, keyboards, msg etc) removed via ADB and replaced with F-Droid alternatives.
I've also used Rethink DNS with whitelist set up/AppInspector to put Google in the Goolag - no internet access for anything google-related at all times. So far my phone has 253 apps blocked (including almost all of the system apps). Surprisingly, all of the necessary apps off google play store (Whatsapp, FB messenger) still function well. Whenever I need a particular Gservice (like a translator), I just enable access for that (and only that) until I dont need it anymore.
GalaxyA325G said:
If you look at the links I gave you in my response for contacts, gps spoofing and privacy-aware WhatsApp, you'll get a good start.
A quickie is to not have a contacts.sqlite database, which means you need your own contacts.csv or more likely contacts.vcf file, which you can maintain on the PC if you like (works with Excel for example).
Click to expand...
Click to collapse
Thanks! I'm not sure why the links didnt show up at first. I'll give this a look. I've been using "simple mobile tools" for quite a while, and I must say I like how they are completely autonomous and transparent about what prems they need and why.
GalaxyA325G said:
For GPS spoofing, I didn't mention you need to turn "Mock Location" on in the Android Developer Options, but that's what most people already do so I assumed you knew that.
Click to expand...
Click to collapse
I definitely saw the option in the dev settings, but didnt experiment with it. Well, now I know, thanks!
Funny you mentioned microG since I installed it for the first time yesterday when I was setting up Vanced Youtube based on this thread.
I generally choose apps that don't use GSF but sometimes you have to use a GSF app (e.g., Zoom meetings), and then it's nice to use MicroG instead of Google Services Framework.
I only installed it yesterday so I really don't know how well it will work for me as I didn't even need to install it to install VancedYoutube. You just need it to log into YouTube but I never do that anyway.
In summary, there's probably a hundred things we do to our phones to set up privacy but I'd have to write each one up in detail to help everyone and that's a lot of work.
Click to expand...
Click to collapse
I will give microG a try (in a form of LineageOS for MicroG). In fact I did install this rom before but I was a bit confused about what it did and assumed that it is a regular LinOS repack with Gplay store and apps built-in. Time to test again.
Especially if almost nobody reads these threads.
Click to expand...
Click to collapse
Threads like these is how I passed my uni exams. Not even exaggerating XD. Thanks again for a very detailed insightful read!
Hello my friends, very happy to meet good hearted people who think alike about Gugle.
as my name suggests I'm noob still and didn't understand much of discussion but very happy to meet you friends. My love & warm regards to all here. Here is what I did uptill now before I saw this thread :
1> Load GSI/ROM.
2> Load TWRP
3> Load Magisk
4> Load microG
5> Install Service Disabler
5.1> Disable bunch of internal services like telemetry, analytics, location (FusedLocation not possible to disable) for every app (3-rd party & system app), contacts sync etc.
6> Install SD-Maid Pro
6.1> Freeze apps like Gugle Calendar Sync Adapter & Gugle Contacts Sync Adapter
7> Install CIAFirewall Fake VPN & configure it.
8> I use Opera browser for Banking, Youtube, Cab booking, Surfing, Gmail, Food Order etc.
9> Install Aurora Store for general app management & installation
10> For contacts I save all contacts in notepad app, and let all calls purposely bounce then I call back aftter checking whose call it was & state false apologies.
#FYI :- Gugle, Mycrowsowft , eFbee are not really to be blamed, rhey are having to comply with FBI, Phentagon, Central Intelligence Agencies, Interpol, etc. or they have to shut bizness.
GalaxyA325G said:
Like you, my relationship with Google is strained where I don't set up any Google Account on Android and it works just fine.
Click to expand...
Click to collapse
Hi, I’m glad to have found this thread as I’m not happy with how my normal Android phone is spied upon by google. But I’m not technically knowledgeable and I don’t want to risk bricking my phone by trying amateur attempts at rooting, or installing Insular, etc…
So far I have not signed in, I allow only minimum permissions, use Netguard, Aurora and FDroid, and have disabled bloatware. I also force-stop apps as much as possible when not in use, and enable Location and Bluetooth only when needed.
I know this is just an amateur, token attempt to reduce spying - so I may have to eventually buy a degoogled phone.
I’ve also done some of the privacy suggestions in the attachments you posted.
Could you help me with a couple of newbie questions…
1): I might have minimised some personal data harvested by most of the apps I use, but I guess my privacy precautions will have no significant effect on the amount of telemetry collected by google?
2): If my precautions really have no significant effect, I’m wondering if would it make any real difference if I was signed in as I don’t use any of the google backup services anyway?
Thanks.

Categories

Resources