Google Play Services and Privacy - General Questions and Answers

I understand the basic architecture of standard Android and how Google adds Google Play Services and Google apps to make it their own. Even as a privacy fan, I like the architecture of implementing APIs in this add-on to remove dependency from the OEMs, and allow updating Android apart from the OEM participation. I am a bit disturbed by the amount of data that can go through these API's, which would be transmitted to Google.
My question is, is Google Play services simply providing privacy intrusive APIs? If I owned an Android device with no Google Play Services, and absolutely no Google apps (other than AOSP), would adding Google Play Services itself (removing all permissions from it) reduce privacy in any way? I guess what I'm asking is, does Google Play Services perform any privacy intrusive functions in and of itself without other Google apps? If it simply provides an API for apps to use (mainly Google apps) to access functions that are privacy violators, but no app was on your device that utilized these functions, do you sacrifice anything?
Thanks

brainysmurf said:
I understand the basic architecture of standard Android and how Google adds Google Play Services and Google apps to make it their own. Even as a privacy fan, I like the architecture of implementing APIs in this add-on to remove dependency from the OEMs, and allow updating Android apart from the OEM participation. I am a bit disturbed by the amount of data that can go through these API's, which would be transmitted to Google.
My question is, is Google Play services simply providing privacy intrusive APIs? If I owned an Android device with no Google Play Services, and absolutely no Google apps (other than AOSP), would adding Google Play Services itself (removing all permissions from it) reduce privacy in any way? I guess what I'm asking is, does Google Play Services perform any privacy intrusive functions in and of itself without other Google apps? If it simply provides an API for apps to use (mainly Google apps) to access functions that are privacy violators, but no app was on your device that utilized these functions, do you sacrifice anything?
Thanks
Click to expand...
Click to collapse
I have been wondering about the same thing and am surprised that your post has received zero replies so far. Since posting the question did you find out anything more about this that you think is worth sharing?
From my understanding Google Play services are like a black box that you have no control over so I am not sure that removing permissions would work or be feasible. My understanding* is that Play Services can be upgraded/changed by Google without requiring your permission and are effectively working like a backdoor - so from that point of view it may be best to avoid them completely.
*I am no Android expert and if anyone with more knowledge cares to chime to correct me please do!

fishnetfancy said:
I have been wondering about the same thing and am surprised that your post has received zero replies so far. Since posting the question did you find out anything more about this that you think is worth sharing?
From my understanding Google Play services are like a black box that you have no control over so I am not sure that removing permissions would work or be feasible. My understanding* is that Play Services can be upgraded/changed by Google without requiring your permission and are effectively working like a backdoor - so from that point of view it may be best to avoid them completely.
*I am no Android expert and if anyone with more knowledge cares to chime to correct me please do!
Click to expand...
Click to collapse
I haven't since discovered much on the matter. The details behind GPS are still obscured. Sometimes I hear that it is another android app, constrained by the standard permissions model. Other times, I hear that it is a special systems application that can "do things"... Nevertheless, I have heard from many that using android devices without GPS is easier these days. You can try that out... I too was surprised that I didn't get much response, though there are other discussions which can help inform you on how to deal with the privacy concerns over GPS.

Related

life without gapps aka google apps

Moderators PLEASE READ THIS THREAD BEFORE DELETING IT LIKE YOU DID THE LAST ONE
I did a couple of different searches on this board, looking for an alternative to gapps aka google apps. What viable alternatives to the google play store are there? google hangouts and google mail? I came across a thread discussion nogapps and the blank store that comes with it, but i'm not overly convinced that it lacks google's data mining processes.
I am not asking for sites that provide "pirated software" as I already know where to get that. I am asking for a "store" where I can search various phrases, and get a good return without those apps being relinked to google play store.
Have you tried the Amazon App Store? (Yes, they have Android apps)
Am I correct in assuming you are looking for a market that is completely separate from Google's servers? If privacy is your concern, you should know that all services that are provided for "free" employ some sort of data mining, because that is how they can afford to keep those services running. Since Google Play is the largest repository for Android apps, you would be hard pressed to find another service that hosts all of the same .apks, as that would seem redundant.
There simply is no viable alternative to the Play Store.
You can get alternatives, but they won't be nearly as good.
As for the rest of the gapps there are plenty of alternatives that are just fine or better.
Why are you so against gapps though? Washington doesn't care what apps you use.
Sent from my GT-I9000 using xda premium
Even if the app doesn't mine your data, your ISP still does ...
plenty
well there are plenty stores available on internet. if you are on android 4.1 and rooted then you can install NOKIA app store. well its tricky to use, you can find a apk on xda. when you install it just install aptitode market from there, though aptitode can be installed alone too. you can find almost all apps. but still google holds android that will mean they will have the maximum apps and secure and most updated apps. even developers always put latest updated apps on play store first. well i used wildfire which has no gpu so cpu has to do work for most of operations which makes slow and to overcome the low space on that phone i sometime skip the gapps. it depends if you want surveillance free android then go for other market apps.:silly:..google even know when you are walking. i read this on xda somewhere.:laugh:
choice is yours.
100s of stores are available nowadays...
Gmail alternate is aosp email
Maps run without email account...
What else u need?
doctor_droid said:
What else u need?
Click to expand...
Click to collapse
A way to synchronize (not backup/restore) my contacts and calendars on the Internet (Mega, Dropbox, whatever...) to be shared among other devices. This is bare minimum.
Then, if I could also synchronize (again, not backup/restore)some system stuff like WiFi passwords, call logs, SMS/MMS, instant messaging stuff and some application settings, this would be an extra great feature.
Can you do it without GApps? If you know how to, please share!
I don't know if this idea will benefit the app devs. Getting rid of the play store is like taking away one of their BIGGEST market place. What do you think?
People wouldnt feel the need to seek alternatives if Google wasnt so hardcore with it
Like dam, is it really even reasonable to keep location tracking in the background 24/7 and 15 different types of loggers at once? You'd think those morons would understand how large of a percentage of their would-be-users would actually use more of their services if they didnt chose to make it an all or nothing affair. I literally use only the playstore, and because of whats needed for that I go ahead and utilize the sync. I would definitely be open to gmail, g+, etc. if they werent so retarted with it. Rant over.
carlfinity said:
don't know if this idea will benefit the app devs. Getting rid of the play store is like taking away one of their BIGGEST market place. What do you think?
Click to expand...
Click to collapse
I think more about my privacy than the app business.
I wish in could use something like CM with some synchronizing mechanism.
Unluckily for me I have a non-dumb-phone, a netbook and a desktop PC.
I use all three for work and would need some synchonization mechanism for calls, SMS and other stuff.
Do you have a suggestion in this direction?
I have read the opening post. So please remember that.
However, this kind of question will always lead to warez sites.... As it already has. And will continue to. And another thread asking same thing will lead to warez app responses yet again.
Google play store and Amazon are really the only ones that are legit and most other sites offer cracked versions of paid apps.
Obviously a website dedicated to Development and developers will not approve of most of the recommendations here, which I have deleted.
Please don't open another one of these threads. There's been enough answers provided already. So this thread is closed.
Thanks for understanding,
Darth
Forum Moderator

Remove COVID-19 contact tracing

If you go into settings and search for 'covid', you'll see settings implying that contact tracing functionality is installed.
How far does it go? It needs bluetooth but will it enable bluetooth regardless if you enable your antenna or not?
Will it show your bluetooth to be on or not?
I don't need answers to these questions. I want to remove this stuff from my phone.
My understanding is that the functionality was installed 'as a part of' and 'in an update of' Google Play-Services.
To remove it, I guess we would need a modified Google Play-Services package
or
remove Google Play-Services altogether.
I don't know to what lengths Google Play-Services is required by OxygenOS or other distros for that matter.
Google Apps won't work anymore without it. That definitely suck for Translate and Maps but I guess there are alternatives for that.
Google bought Waze. I wonder if Waze needs Google Play-Services..
I never was a fan of custom ROMs and rooting. I was perfectly happy with OxygenOS (OnePlus 7).
Now I really don't care, I want this garbage off my phone. Kr,
progonkpa said:
If you go into settings and search for 'covid', you'll see settings implying that contact tracing functionality is installed.
How far does it go? It needs bluetooth but will it enable bluetooth regardless if you enable your antenna or not?
Will it show your bluetooth to be on or not?
I don't need answers to these questions. I want to remove this stuff from my phone.
My understanding is that the functionality was installed 'as a part of' and 'in an update of' Google Play-Services.
To remove it, I guess we would need a modified Google Play-Services package
or
remove Google Play-Services altogether.
I don't know to what lengths Google Play-Services is required by OxygenOS or other distros for that matter.
Google Apps won't work anymore without it. That definitely suck for Translate and Maps but I guess there are alternatives for that.
Google bought Waze. I wonder if Waze needs Google Play-Services..
I never was a fan of custom ROMs and rooting. I was perfectly happy with OxygenOS (OnePlus 7).
Now I really don't care, I want this garbage off my phone. Kr,
Click to expand...
Click to collapse
Next phone you can consider huawei.. Lol.. Legally required to ship with no trace of Google.
Sent from my SM-G985F using Tapatalk
OpenGapps the way forward?
progonkpa said:
To remove it, I guess we would need a modified Google Play-Services package
Click to expand...
Click to collapse
I am interested in this approach, as Aurora Store isn't able to fully replace google play at this time (no app purchasing)
So I have 2. questions to the community at large:
Would OpenGapps be the way forward? would this prevent googleplayserevices from be update by google thus preventing unauthorised/non-consented changes that facilitate state-level tracking.
And regard9ing the existing google services is there anyway to disable the covid19 toast notification appearing everytime time you enabled/disable bluetooth and or gps. The xposed module 'EnhancedToast' is able to do this, but only works on Andoird 6/7 or below.
b1k3rdude said:
I am interested in this approach, as Aurora Store isn't able to fully replace google play at this time (no app purchasing)
So I have 2. questions to the community at large:
Would OpenGapps be the way forward? would this prevent googleplayserevices from be update by google thus preventing unauthorised/non-consented changes that facilitate state-level tracking.
And regard9ing the existing google services is there anyway to disable the covid19 toast notification appearing everytime time you enabled/disable bluetooth and or gps. The xposed module 'EnhancedToast' is able to do this, but only works on Andoird 6/7 or below.
Click to expand...
Click to collapse
Covid-19 contact tracing requires installing an app, if you, yourself, the user, have not installed some form of Covid-19 contact tracing app, then you "should" be in the clear unless you somehow agreed to/allowed/gave permission to something without knowing what you were agreeing to/allowing/giving permission to .
Sent from my SM-S767VL using Tapatalk
Droidriven said:
Covid-19 contact tracing requires installing an app, if you, yourself, the user, have not installed some form of Covid-19 contact tracing app, then you "should" be in the clear unless you somehow agreed to/allowed/gave permission to something without knowing what you were agreeing to/allowing/giving permission to .
Sent from my SM-S767VL using Tapatalk
Click to expand...
Click to collapse
Google admitting they installed this on your phone without your permission
youtube video titled "Exposure Notifications System: Helping Health Authorities fight COVID-19"
check your android - settings/general/google->COVID-19 Exposure Notifications
I'm assuming being rooted is required to do anything towards removing/disabling it?
ultra4e said:
Google admitting they installed this on your phone without your permission
youtube video titled "Exposure Notifications System: Helping Health Authorities fight COVID-19"
check your android - settings/general/google->COVID-19 Exposure Notifications
I'm assuming being rooted is required to do anything towards removing/disabling it?
Click to expand...
Click to collapse
The only way to get rid of it is to delete Google Play Services. That's how they snuck it in. On Android Pie it's simple. Just debloat via ADB using pm list packages prompt and voila! it's gone. On Android 10 it works the same EXCEPT none of the google apps, firefox, instacart, or anything like that will WORK. So you can de-google all you want - they've baked it into everything. It's something I'm struggling with now since I was forced to upgrade.

Any reports of Google services spying on non-Google apps?

Today I was on my Sony Xperia XZ2 Compact, reading Facebook (using the Android Facebook app).
I was reading a bicycle forum, and replied to a thread regarding a local landmark.
I decided to double-check I was getting the name right, so I went to the Google search widget, and started typing the name of the landmark. The landmark is called "Hawk Hill" - I typed "ha" and "Hawk Hill" popped up as the first suggestion.
Now, that seems way too damned coincidental for it not to have been Google services scanning what I type in other apps.
I've searched here for discussions on what kinds of spying Google does; I mean, I know they scan data in their own apps, examine my search history, look at what web sites I've visited, etc. I don't love that, but I can live with it.
However, Google spying on my Facebook app? Really? I thought that the terms of service don't allow Google services to spy on non-Google apps. I could believe that they might see what websites I visit, but on an SSL-encrypted connection, how could they be reading the data exchanged?
Has anyone been following what the current state of Google spying on user activity is, especially vis a vis "always on listening" on the mic, or spying on other apps data?
- Tim
G-Works
tbessie said:
Today I was on my Sony Xperia XZ2 Compact, reading Facebook (using the Android Facebook app).
I was reading a bicycle forum, and replied to a thread regarding a local landmark.
I decided to double-check I was getting the name right, so I went to the Google search widget, and started typing the name of the landmark. The landmark is called "Hawk Hill" - I typed "ha" and "Hawk Hill" popped up as the first suggestion.
Now, that seems way too damned coincidental for it not to have been Google services scanning what I type in other apps.
I've searched here for discussions on what kinds of spying Google does; I mean, I know they scan data in their own apps, examine my search history, look at what web sites I've visited, etc. I don't love that, but I can live with it.
However, Google spying on my Facebook app? Really? I thought that the terms of service don't allow Google services to spy on non-Google apps. I could believe that they might see what websites I visit, but on an SSL-encrypted connection, how could they be reading the data exchanged?
Has anyone been following what the current state of Google spying on user activity is, especially vis a vis "always on listening" on the mic, or spying on other apps data?
- Tim
Click to expand...
Click to collapse
Lool that's the point of google company lol... get custom ROM and don't install gapps, lol even facebook is spying on your activities, even your personal data aka phonebooks, messagess, etc... where did you live all these years lool...
Don't get me wrong but all that gapps and others social apps were make that way. that's the price of your digital life.. you become a product.
I'll never gonna use that [email protected], spyware, datamining, etc in my life.. get custom ROM and don't install [email protected] and you'll be safe.
Respect your privacy and your device.
Good luck and stay safe.
tbessie said:
Today I was on my Sony Xperia XZ2 Compact, reading Facebook (using the Android Facebook app).
I was reading a bicycle forum, and replied to a thread regarding a local landmark.
I decided to double-check I was getting the name right, so I went to the Google search widget, and started typing the name of the landmark. The landmark is called "Hawk Hill" - I typed "ha" and "Hawk Hill" popped up as the first suggestion.
Now, that seems way too damned coincidental for it not to have been Google services scanning what I type in other apps.
I've searched here for discussions on what kinds of spying Google does; I mean, I know they scan data in their own apps, examine my search history, look at what web sites I've visited, etc. I don't love that, but I can live with it.
However, Google spying on my Facebook app? Really? I thought that the terms of service don't allow Google services to spy on non-Google apps. I could believe that they might see what websites I visit, but on an SSL-encrypted connection, how could they be reading the data exchanged?
Has anyone been following what the current state of Google spying on user activity is, especially vis a vis "always on listening" on the mic, or spying on other apps data?
- Tim
Click to expand...
Click to collapse
Hi Tim,
Let me start by saying that I am not in favor of all these practices and I do not like that these companies use our information however they please.
That said I will try to be as impartial as possible
"I've searched here for discussions on what kinds of spying Google does; I mean, I know they scan data in their own apps, examine my search history, look at what web sites I've visited, etc. I don't love that, but I can live with it."
You can look at myActivity (google it) and see all the data they have collected from you, you can delete it, pause the data collection (partially) or even have it deleted only after a few months.
They do everything you just said, and much more.
"However, Google spying on my Facebook app? Really? I thought that the terms of service don't allow Google services to spy on non-Google apps. I could believe that they might see what websites I visit, but on an SSL-encrypted connection, how could they be reading the data exchanged? "
Well technically all they did was read your clipboard, which if you're using gboard , they can.
Also note that Facebook will not work without Google's cloud services installed on the phone, so there is already a comunication overlay between the two services .
You can try to take some control back by using a different keyboard , using the web browser version of facebook and/or installing blokada wich will block not only ands but some of the more intrusive trackers they use .
if you have any questions or observations , please tell me!
FB is spyware... and malware.
I ditch it after a month over 12 years ago.
Wouldn't call any of this spying, just an auto/smart suggestion based on your browsing/typing history. Also doubt Google is reading everytging from your Facebook app to make these suggestions.
If you are using gboard, that most likely is how this suggestion was made. If you aren't using gboard then it would be a bigger mystery. Either change keyboard or look into keyboard settings and turn off suggestion/autocomplete/learning and similar "smart" settings.
Also, got rid of intrusive Facebook years ago...
drnightshadow said:
Lool that's the point of google company lol... get custom ROM and don't install gapps, lol even facebook is spying on your activities, even your personal data aka phonebooks, messagess, etc... where did you live all these years lool...
Don't get me wrong but all that gapps and others social apps were make that way. that's the price of your digital life.. you become a product.
I'll never gonna use that [email protected], spyware, datamining, etc in my life.. get custom ROM and don't install [email protected] and you'll be safe.
Respect your privacy and your device.
Good luck and stay safe.
Click to expand...
Click to collapse
That's a lot of lols and lools.
You're not telling me anything I don't already know. If you'll reread my post, I was asking for info on the specifics of what types of spying are KNOWN and verified to be occurring - what is google spying on? What is the mechanism of action? Are they recording every keystroke, reading every encrypted stream, reading all app data, etc? What info is exchanged between Android/google and other apps? Etc.
I'm a software guy, and I was asking for TECHNICALLY SPECIFIC answers, as this is a technical forum. General warnings and hyperbole aren't helping. :-/
Disable Google Firebase... it inventories all kinds of personal files.
With regards to the question asked with this thread's title:
Google Play Services is a library ( read a collection of software routines accessed by Android programs - mainly GMS apps ) not an Android program , hence you must not fear you - or any app - will be spied on by Google Play Services.
FYI:
Google Play Services basically acts as a shim between the normal Android apps and the installed Android OS. Right now Google Play Services handles the Google Maps API, Google Account syncing, remote wipe, push messages, the Google Play Games back end, and many other duties.
If you ever question the power of Google Play Services, try disabling it. Nearly every Google App ( keyword: GMS ) on your device will break.
Don't confuse things!
jwoegerbauer said:
With regards to the question asked with this thread's title:
Google Play Services is a library ( read a collection of software routines accessed by Android programs - mainly GMS apps ) not an Android program , hence you must not fear you - or any app - will be spied on by Google Play Services.
FYI:
Google Play Services basically acts as a shim between the normal Android apps and the installed Android OS. Right now Google Play Services handles the Google Maps API, Google Account syncing, remote wipe, push messages, the Google Play Games back end, and many other duties.
If you ever question the power of Google Play Services, try disabling it. Nearly every Google App ( keyword: GMS ) on your device will break.
Don't confuse things!
Click to expand...
Click to collapse
I normally run with it disabled; it saves time, trouble and battery (a fair amount too). Disabling it saves me from firewall blocking a bunch of apps; it's easier to toggle gps on/off when needed.
Keeps Find my Device from setting it's self as a System Administrator, which I really don't want running, ever. Kills gmaps too, yah.
Maps, location don't need to constantly be running in the background unless you need them to be running.
The only time disabling it is a pain is to access Playstore which requires a reboot with it enabled. I have only one app that requires constant Playstore connection to work, SD Maid Pro; it gets disabled anyway as I get tired of it constantly running in the background.
I flat out don't trust any Google product... as a result of Google's actions and history.

[Privacy] Puttin' Google in the Goolag

Situation:
I have somewhat of a "love-REALLY HATE" relationship with Google apps and ecosystem.
On one hand, they are great at what they do.
On the other, it's like having a spy satellite overhead, given how much telemetry it does.
Question:
I'd like to cut all of the Google apps' internet, location, sensor and background activity access for good when not in use. Or at least spoof whatever personal data is being sent (Device info, location, activities, etc). Any way to do that?
What I've done so far:
My current way-to-go method involves installing RethinkDNS+firewall, then blocking every single one of google apps including Gboard. It sort-of works, but very inconvenient, as I have to manually enable internet access for a particular app and/or service when needed. I also tried edXposed's XluaPrivacy module to cut off access to certain permissions. Again, cumbersome.
After going through F-Droid, I found an app called "Insular", that claims being able to put all of the "big brother" apps (such as Gapps) behind an isolated sandbox, a digital gulag of sorts.
Thanks for the pointer to Insular whose advertising on F-Droid says:
Insular is a FLOSS fork of Island.
With Insular, you can:
Isolate your Big Brother apps
Clone and run multiple accounts simutaniuosly
Freeze or archive apps and prevent any background behaviors
Unfreeze apps on-demand with home screen shortcuts
Re-freeze marked apps with one tap
Hide apps
Selectively enable (or disable) VPN for different group of apps
Prohibit USB access to mitigate attacks with physical access
Click to expand...
Click to collapse
Based on that, I suspect this XDA thread about "Island" may be useful.
[APP][5.0+][BETA] Island - app freezing, privacy protection, parallel accounts​
"Island" is a sandbox environment to clone selected apps and isolate them from accessing your personal data outside the sandbox (including call logs, contacts, photos and etc) even if related permissions are granted. Device-bound data is still accessible (SMS, IMEI and etc).
Isolated app can be frozen on demand, with launcher icon vanish and its background behaviors completely blocked.
Click to expand...
Click to collapse
Totesnochill said:
Question:
I'd like to cut all of the Google apps' internet, location, sensor and background activity access for good when not in use. Or at least spoof whatever personal data is being sent (Device info, location, activities, etc). Any way to do that?
Click to expand...
Click to collapse
Like you, my relationship with Google is strained where I don't set up any Google Account on Android and it works just fine.
I don't have a contacts.db sqlite database for that reason too, so my favorite communication apps are all designed to store their own contacts db internally to the app itself.
I replace Google apps with FOSS equivalents such as NewPipe (or, more recently, Vanced YouTube) for example.
And I spoof my GPS location by default (using Lexa Fake GPS, for example).
Of course, given I don't have a Google Account on my phone, I use the Aurora Store instead of the Google Play Store. Of course, I strive for apps that don't require Google Framework Services (GSF) which Aurora neatly filters out for us.
Since I'm not rooted, I can't delete Google Play Store, but I can disable it, which is almost as good.
And, I use privacy-aware apps for my messenger, calendar, contacts, and dialer apps (many of which come from Simple Mobile Tools' suite which are available on F-Droid).
To keep my WiFi SSID/BSSID/GPS/Strength/etc. out of the hands of Google (& Mozilla and Kismet and Wigle, etc.), I add "_nomap" to the SSID and I turn off the SOHO router SSID broadcast (which "hinders" most cellphones from uploading my BSSID information to Google public servers); but then I have to also turn off "AutoReconnect" on Android 12 and also I have the Developer Options set in Android 12 to randomize the MAC address on EACH connection; however that means I need to set any "static" connections on my LAN from the phone and not with address reservation on the router (which typically utilizes the MAC address).
And it's not just Google we need to keep our data out of their hands, as I even use WhatsApp privacy aware tools such as the WhatsApp dialer and WhatsApp Click to Chat mechanisms (to keep my contacts out of Facebook's hands too).
For offline maps, I use a quick web browser lookup on a privacy browser (such as Tor or Epic or Opera), since the Google address lookup is still the best in the world... (which is the love/hate relationship, right?)... and then I paste the GPS coordinates that the privacy browser found on the maps.google.com web site into a local routing application (such as a shortcut to a browser to google maps on the phone or better yet, to a dedicated offline map program such as OSM And~), and even traffic can be gotten without Google (e.g., Sigalert & 511 apps).
I used to reset the Advertising ID with a homescreen shortcut that could be activated from Windows via a batch file over Wi-Fi, but now with Android 12 we can wipe out the Advertising ID altogether (i.e., reset it to all zeroes). However, I still periodically change my GSF ID and other supposedly unique identifiers.
I'm still trying to figure out the implication of "trackers", so if anyone has more information about them, please advise.
Off hand there must be scores more things I do for privacy, where we probably should have a main thread on this site of all the myriad things people can do to increase their privacy on Android (some of which I've screenshotted for you below).
GalaxyA325G said:
Like you, my relationship with Google is strained where I don't set up any Google Account on Android and it works just fine.
Click to expand...
Click to collapse
Thanks heaps for the very in-depth response. Really opens up on a lot of things I wasnt aware of, and I realized that unlike desktop, when it comes to mobile privacy I'm still a bit behind.
Are there any guides where I can do some reading on the concepts and techniques you've described? Especially regarding contacts.db sqlite database, GPS spoofing and privacy-aware options for accessing WhatsApp.
Also, what are your thoughts on MIcroG?
Totesnochill said:
Thanks heaps for the very in-depth response.
Click to expand...
Click to collapse
I try to put effort into the response so that others can benefit (but nobody ever presses the like button so maybe it's not worth the effort).
For example, when I mentioned I spoof my GPS, I looked up the app I used and linked to it so that you wouldn't have to test a score of apps like I did to find the best one.
Totesnochill said:
Really opens up on a lot of things I wasn't aware of, and I realized that unlike desktop, when it comes to mobile privacy I'm still a bit behind.
Click to expand...
Click to collapse
That was just off the top of my head where there has to be at least a hundred different privacy things I do on Android to distance me from Google that most people don't bother to do.
I admit, sometimes it feels like we're putting a dozen locks on the front door, but in the end, we LEARN a lot about Android in the process.
A lot of the protection is to protect ourselves from others who don't know how to configure their phone, so they are uploading our private information (like our contacts and home locations) to Google databases.
For example, the typical Android phone when it drives by your front door uploads to google your exact location, your signal strength, your unique BSSID and your SSID... where you'll note in my response above I had to do a half dozen things on my phone and router to prevent that from happening (i.e., just adding "_nomap" doesn't work but most people don't realize that because they don't think about it).
Totesnochill said:
Are there any guides where I can do some reading on the concepts and techniques you've described?
Click to expand...
Click to collapse
I'm sure there are plenty.
But I have been in MANY situations where there are none.
Take, for example, changing the GSFID... almost nowhere on the net is that described how to do it. Almost nobody does it, but it can be done if you know how.
I really should write a set of privacy tutorials so that everyone can do it but I have to find the time, and this web site doesn't like text tutorials I found out recently. So they make it a PITA in the end to help people. Sigh.
Totesnochill said:
Especially regarding contacts.db sqlite database, GPS spoofing and privacy-aware options for accessing WhatsApp.
Click to expand...
Click to collapse
If you look at the links I gave you in my response for contacts, gps spoofing and privacy-aware WhatsApp, you'll get a good start.
A quickie is to not have a contacts.sqlite database, which means you need your own contacts.csv or more likely contacts.vcf file, which you can maintain on the PC if you like (works with Excel for example).
Now that you don't have a contacts.db sqlite database, you need to find the contacts and dialer and mms/sms apps that can suck in their own contacts.vcf file, which I pointed you to in the Simple Mobile Tools suite.
For GPS spoofing, I didn't mention you need to turn "Mock Location" on in the Android Developer Options, but that's what most people already do so I assumed you knew that. Once you turn that on, you can just select the mock location app of your choice (where I suggested one above which isn't perfect but none of them are).
That particular app moves your location every few feet and it gets the altitude and it can easily be stopped and started, etc., but I'd like it if it didn't move just "west by 10 feet every minute" but instead if it would follow a pre-determined route that I could give it. So they need a lot more work to be as good as we'd like them to be.
For What'sApp privacy, look at the two apps I linked to in the prior post as they don't need the contacts.sqlite database to work.
Your WhatsApp should only have an icon in your folders for the people you contact and nothing else, IMHO. That's the best privacy you can get, although WhatsApp does decent hashing on the contacts file when it uploads it to their servers - but still - why give them your entire contacts when you only contact 10 people (or whatever) on WhatsApp. Right?
Totesnochill said:
Also, what are your thoughts on MIcroG?
Click to expand...
Click to collapse
Funny you mentioned microG since I installed it for the first time yesterday when I was setting up Vanced Youtube based on this thread.
I generally choose apps that don't use GSF but sometimes you have to use a GSF app (e.g., Zoom meetings), and then it's nice to use MicroG instead of Google Services Framework.
I only installed it yesterday so I really don't know how well it will work for me as I didn't even need to install it to install VancedYoutube. You just need it to log into YouTube but I never do that anyway.
In summary, there's probably a hundred things we do to our phones to set up privacy but I'd have to write each one up in detail to help everyone and that's a lot of work.
Especially if almost nobody reads these threads.
GalaxyA325G said:
I try to put effort into the response so that others can benefit (but nobody ever presses the like button so maybe it's not worth the effort).
In summary, there's probably a hundred things we do to our phones to set up privacy but I'd have to write each one up in detail to help everyone and that's a lot of work.
Click to expand...
Click to collapse
Thank you for doing God's work out there. Ethics like these are what creates the content that keeps the internet from becoming a dumpster fire otherwise. Tutorials and explanations that come from the fellow users are THE best and usually directly on-point.
When I was just starting setting up Linux environment, I wrote "how-to notes" on every successful step. At first it was more like the "sticky notes" to help me remember, but eventually (as the list grew) I started writing these tips in a way as if they were to be read by someone with little background in the subject. What used to be the "Linux notes" file became 10563 lines monstrosity now... So every time I need to answer someone's question I just copypaste from this file.
GalaxyA325G said:
That was just off the top of my head where there has to be at least a hundred different privacy things I do on Android to distance me from Google that most people don't bother to do.
I admit, sometimes it feels like we're putting a dozen locks on the front door, but in the end, we LEARN a lot about Android in the process.
Click to expand...
Click to collapse
Absolutely. I've spent about 2 weeks tweaking my new phone (Nokia X6), trying out different roms/recoveries and app setups. Pissed off a bunch of people in the process - most wouldn't understand that I'm setting up a system to last another 7 years, just like my previous phone (Galaxy Gprime). Not to mention that with the amount of sensitive info on the phone, security and privacy are a legit concern, and worth learning about just how one learns to install and use the lock on the front doors.
Phones became disposable both in software and hardware, and so have the general attitude towards the devices.
My final setup became AOSP PixelPlusUI Rom (comes with about openGapps nano worth of Google stuff) with most other stock apps (contacts , dialer, keyboards, msg etc) removed via ADB and replaced with F-Droid alternatives.
I've also used Rethink DNS with whitelist set up/AppInspector to put Google in the Goolag - no internet access for anything google-related at all times. So far my phone has 253 apps blocked (including almost all of the system apps). Surprisingly, all of the necessary apps off google play store (Whatsapp, FB messenger) still function well. Whenever I need a particular Gservice (like a translator), I just enable access for that (and only that) until I dont need it anymore.
GalaxyA325G said:
If you look at the links I gave you in my response for contacts, gps spoofing and privacy-aware WhatsApp, you'll get a good start.
A quickie is to not have a contacts.sqlite database, which means you need your own contacts.csv or more likely contacts.vcf file, which you can maintain on the PC if you like (works with Excel for example).
Click to expand...
Click to collapse
Thanks! I'm not sure why the links didnt show up at first. I'll give this a look. I've been using "simple mobile tools" for quite a while, and I must say I like how they are completely autonomous and transparent about what prems they need and why.
GalaxyA325G said:
For GPS spoofing, I didn't mention you need to turn "Mock Location" on in the Android Developer Options, but that's what most people already do so I assumed you knew that.
Click to expand...
Click to collapse
I definitely saw the option in the dev settings, but didnt experiment with it. Well, now I know, thanks!
Funny you mentioned microG since I installed it for the first time yesterday when I was setting up Vanced Youtube based on this thread.
I generally choose apps that don't use GSF but sometimes you have to use a GSF app (e.g., Zoom meetings), and then it's nice to use MicroG instead of Google Services Framework.
I only installed it yesterday so I really don't know how well it will work for me as I didn't even need to install it to install VancedYoutube. You just need it to log into YouTube but I never do that anyway.
In summary, there's probably a hundred things we do to our phones to set up privacy but I'd have to write each one up in detail to help everyone and that's a lot of work.
Click to expand...
Click to collapse
I will give microG a try (in a form of LineageOS for MicroG). In fact I did install this rom before but I was a bit confused about what it did and assumed that it is a regular LinOS repack with Gplay store and apps built-in. Time to test again.
Especially if almost nobody reads these threads.
Click to expand...
Click to collapse
Threads like these is how I passed my uni exams. Not even exaggerating XD. Thanks again for a very detailed insightful read!
Hello my friends, very happy to meet good hearted people who think alike about Gugle.
as my name suggests I'm noob still and didn't understand much of discussion but very happy to meet you friends. My love & warm regards to all here. Here is what I did uptill now before I saw this thread :
1> Load GSI/ROM.
2> Load TWRP
3> Load Magisk
4> Load microG
5> Install Service Disabler
5.1> Disable bunch of internal services like telemetry, analytics, location (FusedLocation not possible to disable) for every app (3-rd party & system app), contacts sync etc.
6> Install SD-Maid Pro
6.1> Freeze apps like Gugle Calendar Sync Adapter & Gugle Contacts Sync Adapter
7> Install CIAFirewall Fake VPN & configure it.
8> I use Opera browser for Banking, Youtube, Cab booking, Surfing, Gmail, Food Order etc.
9> Install Aurora Store for general app management & installation
10> For contacts I save all contacts in notepad app, and let all calls purposely bounce then I call back aftter checking whose call it was & state false apologies.
#FYI :- Gugle, Mycrowsowft , eFbee are not really to be blamed, rhey are having to comply with FBI, Phentagon, Central Intelligence Agencies, Interpol, etc. or they have to shut bizness.
GalaxyA325G said:
Like you, my relationship with Google is strained where I don't set up any Google Account on Android and it works just fine.
Click to expand...
Click to collapse
Hi, I’m glad to have found this thread as I’m not happy with how my normal Android phone is spied upon by google. But I’m not technically knowledgeable and I don’t want to risk bricking my phone by trying amateur attempts at rooting, or installing Insular, etc…
So far I have not signed in, I allow only minimum permissions, use Netguard, Aurora and FDroid, and have disabled bloatware. I also force-stop apps as much as possible when not in use, and enable Location and Bluetooth only when needed.
I know this is just an amateur, token attempt to reduce spying - so I may have to eventually buy a degoogled phone.
I’ve also done some of the privacy suggestions in the attachments you posted.
Could you help me with a couple of newbie questions…
1): I might have minimised some personal data harvested by most of the apps I use, but I guess my privacy precautions will have no significant effect on the amount of telemetry collected by google?
2): If my precautions really have no significant effect, I’m wondering if would it make any real difference if I was signed in as I don’t use any of the google backup services anyway?
Thanks.

Dumbing down phone as much as possible with Custom ROM

Hello.
I plan to turn my phone as "dumb" as possible, leaving only apps that are absolutely necessary and practical, essentially making my phone as minimalistic, simple and distraction free while at the same time maximizing the hurdle to install new apps due to the lack of willpower aswell as the general battery life.
I have the POCO F1 with LineageOS 19.1, root is currently enabled via Magisk.
I considered just buying a regular dumb phone, but unfortunately I do not feel they are worth it; plus I'd want to still use Spotify.
I'd greatly appreciate ideas/solutions for this particular project. Thank you in advance!
EnigmaticLife said:
Hello.
I plan to turn my phone as "dumb" as possible, leaving only apps that are absolutely necessary and practical, essentially making my phone as minimalistic, simple and distraction free while at the same time maximizing the hurdle to install new apps due to the lack of willpower aswell as the general battery life.
I have the POCO F1 with LineageOS 19.1, root is currently enabled via Magisk.
I considered just buying a regular dumb phone, but unfortunately I do not feel they are worth it; plus I'd want to still use Spotify.
I'd greatly appreciate ideas/solutions for this particular project. Thank you in advance!
Click to expand...
Click to collapse
What you'd like to do isn't really "dumbing down" XD - it is simply making a "barebones Android" phone with only the apps/functions you need without usual bloat that comes preinstalled on the new devices. This is in fact something a lot of people on XDA are passionate about, as it helps optimize for space, speed, battery life and privacy.
For the Android phone to be considered usable in modern day and age, it needs a handful of apps:
Dialer
SMS messenger
Contacts
File manager
Gallery
Clock
Calendar
Calculator
Web browser
Camera
Installing vanilla LineageOS rom (or any other rom with no GoogleApps) will give you this default Android experience. For 99% of tasks that do not involve Google this is enough.
However, most people want something more than just a dialer, and so phone manufacturers pre-install some other stuff for them: Google (play store, chrome, maps, drive, mail), Payment (Samsung Pay), Gallery/Music apps, social media apps, fancy wallpapers etc. This is what makes the phone "smart" for you, I guess?
In case you want to cut it down further, you can use adb to remove certain apps from this list. This includes certain system apps too, like unnecessary fonts or accessibility services (web search is your friend here). Theoretically the phone can serve as a GSM calling brick only with the following:
Dialer
SMS messenger
Contacts
But then you'd be doing the hardware a misservice - why lug around Octa-core 8GB RAM 4000mAh HD TFT6.1" 999GB device if you could achieve the same with a Nokia 1100 or 3310? These are still being sold
UPDATE: Just saw your additions about Spotify. If you only want to use the phone for Calling/Web browsing/YouTube/Spotify, go with the "Install No GApps LineageOS -> Sideload apps you need and nothing else".
Word of WARNING though: a lot of popular messaging/steraming/quality of life (maps) apps APSOLUTELY DEPEND on google ecosystem (i.e. GApps like google play, google play services and google services framework).
WITHOUT GOOGLE THESE APPS WILL LIKELY CRASH or won't work as intended. I.e. Whatsapp will not give you "New message" notifications and will not ring UNLESS you have it open in your face right when the call comes in. Delivery/Ride sharing apps that need google maps will not show you the map. Facebook messenger will has the same problem as Whatsapp. List of risks is far too long, and you will need to have an idea of whether the app requires google and whatsnot.
Therefore Make absolutely sure that barebones phone is what you want. If it is, a lot of apps that reliably work with the barebones setups can be found on Fdroid.
Despite having "dumb" in the name, this procedure requires one to be amazingly smart about it
To conclude, you have the following ways of achieving this:
1. Install no-Gapps (i.e. "vanilla") lineageOs, delete what you wont need, sideload .apk of apps you are after
2. Install stock android rom, then Degoogle and Debloat it. Guides for your particular model can be found here on XDA
3. Install SlimROM, a custom Android distro whose developers had the same idea as you did, i.e. optimized for simplicity.
Totesnochill said:
What you'd like to do isn't really "dumbing down" XD - it is simply making a "barebones Android" phone with only the apps/functions you need without usual bloat that comes preinstalled on the new devices. This is in fact something a lot of people on XDA are passionate about, as it helps optimize for space, speed, battery life and privacy.
For the Android phone to be considered usable in modern day and age, it needs a handful of apps:
Dialer
SMS messenger
Contacts
File manager
Gallery
Clock
Calendar
Calculator
Web browser
Camera
Installing vanilla LineageOS rom (or any other rom with no GoogleApps) will give you this default Android experience. For 99% of tasks that do not involve Google this is enough.
However, most people want something more than just a dialer, and so phone manufacturers pre-install some other stuff for them: Google (play store, chrome, maps, drive, mail), Payment (Samsung Pay), Gallery/Music apps, social media apps, fancy wallpapers etc. This is what makes the phone "smart" for you, I guess?
In case you want to cut it down further, you can use adb to remove certain apps from this list. This includes certain system apps too, like unnecessary fonts or accessibility services (web search is your friend here). Theoretically the phone can serve as a GSM calling brick only with the following:
Dialer
SMS messenger
Contacts
But then you'd be doing the hardware a misservice - why lug around Octa-core 8GB RAM 4000mAh HD TFT6.1" 999GB device if you could achieve the same with a Nokia 1100 or 3310? These are still being sold
UPDATE: Just saw your additions about Spotify. If you only want to use the phone for Calling/Web browsing/YouTube/Spotify, go with the "Install No GApps LineageOS -> Sideload apps you need and nothing else".
Word of WARNING though: a lot of popular messaging/steraming/quality of life (maps) apps APSOLUTELY DEPEND on google ecosystem (i.e. GApps like google play, google play services and google services framework).
WITHOUT GOOGLE THESE APPS WILL LIKELY CRASH or won't work as intended. I.e. Whatsapp will not give you "New message" notifications and will not ring UNLESS you have it open in your face right when the call comes in. Delivery/Ride sharing apps that need google maps will not show you the map. Facebook messenger will has the same problem as Whatsapp. List of risks is far too long, and you will need to have an idea of whether the app requires google and whatsnot.
Therefore Make absolutely sure that barebones phone is what you want. If it is, a lot of apps that reliably work with the barebones setups can be found on Fdroid.
Despite having "dumb" in the name, this procedure requires one to be amazingly smart about it
To conclude, you have the following ways of achieving this:
1. Install no-Gapps (i.e. "vanilla") lineageOs, delete what you wont need, sideload .apk of apps you are after
2. Install stock android rom, then Degoogle and Debloat it. Guides for your particular model can be found here on XDA
3. Install SlimROM, a custom Android distro whose developers had the same idea as you did, i.e. optimized for simplicity.
Click to expand...
Click to collapse
This is really interesting. I am thinking of trying to do this with a Google pixel 4a. Would I be able to do the lineage OS with that? I haven't found other threads that speak on this topic, am I right? Thinking that I would like to customize exactly what apps I have on the phone etc.
LineageOS for Google Pixel 4a exists:
LineageOS Downloads
download.lineageos.org

Categories

Resources