I created a google takeout and in that zip file I found some files containing a ton of data about me. It has logged every single page I visited while using the google search engine and chrome browser. It even logged every single time I opened an app on my old android phone. It even has VOICE RECORDINGS of me and a log of every time I used google assistant. This is just some of the data and I’m very sure there is even more data they have.
You must log in or register to comment.
How do you think they are able to pay the bills of those expensive af services for free?
Fortunately you can degoogle many Android phones. And stop using big tech products in general. They have a lot of issues, not only a complete lack of privacy
I might be looking into a new phone soon, what do you suggest?
A pixel, if you buy into GrapheneOS being the pinnacle of security. Otherwise, anything with an unlockable bootloader and LineagOS support.
Graphene gang representing
Gang gang
It’s actually quite ironic that the best phone to degoogle your life is sold by google.
Dont forget CalyxOS. IMHO better than Graphene
CalyxOS has pretty bad security. They install F-Droid and microG with root privileges, don’t release updates regularly and lack many security features of GrapheneOS.
Different strokes, but I personally dont think yge Graphene devs are trustworthy, and much prefer Calyx.
I’m also not afraid of root. Its how I harden my device (eg firewall)
GrapheneOS has a built in Firewall that doesn’t require root privileges. Also, you don’t trust the GrapheneOS devs who arguably create one of the most secure operating systems on the planet, which is open source and can be verified by everyone, but you trust Calyx devs who regularly go months without releasing any Android security patches and include highly privileged third party apps in their operating system. Makes a lot of sense.
Of course it requires root.
Much
Ironically enough, Google Pixels are great phones if you need to de-google with GrapheneOS.
I just can’t buy it and support them
Buy used on Swappa/ebay
Shameless plug for backmarket. They’re pretty solid
Twice the price of ebay
Depending on the state of the thing you’re looking at, maybe? A pixel 6 pro goes for ~220 on backmarket and ~210 on eBay. Does eBay guarantee free 30 day returns and have a great 1 year warranty? Depends on the seller. Backmarket offers it sitewide. Id rather pay a few extra bucks to not have to fight with someone over getting my money back or my shit fixed
deleted by creator
Or CalyxOS
GrapheneOS is amazing
Can you use banking apps on it?
Why would you want to use a banking app on something as insecure as a phone??!?
When your bank tells you that the code booklet will be phased out and mobile app will be the only way in the future.
Bingo
Change banks that take security seriously
As long as you don’t use some shady, unofficial ROM on a phone, most phones are actually vastly more secure than your typical Linux/Windows OS.
How long is your passphrase on your phone compared to your Linux/windows OS?
A phone is designed for quick usability, which is the enemy of security.
Sure, if you have a 20 char password on your phone and never install any sketchy apps, then it might be ok. But the whole phone ecosystem is just less secure because its designed for convince, not security.
A phone is more secure than most desktop computers. https://youtu.be/Wd4Pa03LvLk
GrapheneOS even significantly improves Android’s already pretty good security model.
Here is an alternative Piped link(s):
https://piped.video/Wd4Pa03LvLk
Piped is a privacy-respecting open-source alternative frontend to YouTube.
I’m open-source; check me out at GitHub.
Riiight, someone’s phone with a 4 digit pin that they tap out 100x per day in public in plain view of others (that I can easily pick out of your pocket) is more secure than a laptop with a 20 character passphrase that never leaves my house.
Do you even think about what you’re saying?
I’m talking about the security model of the platform, not the way you use your devices. If you do your online banking in a browser on your computer and your system gets infected with malware, that malware can access all the files on your computer. Including application data of your browser. It can access your cookies, which your bank’s website uses to store your login information. Such an attack is impossible on a mobile device, since apps can only access their own data, and inter-process communication is heavily restricted. Additionally, mobile operating systems like Android have complex permission systems, as well as kernel-based mandatory access control like SELinux/SE for Android. Your typical desktop OS has none of that. Android also has a strong implementation of Verified Boot, which makes sure that malware can’t persist on your system partition, even after your device gets infected. I recommend this video if you want to learn more about mobile device security: https://youtu.be/yTeAFoQnQPo
Yes. Check out this list: https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos
Will this still be true after safetynet is deprecated? Not trying to be difficult, just don’t want to get my hopes up.
Edit: ah its adressed in the link lol
deleted by creator
If you want a normie phone that you can install a privacy-focused OS on, Google Pixel is a surprisingly good option. Just take a look at the LineageOS’s and GrapheneOS’s officially supported devices lists before purchasing a specific model. You can also choose Xiaomi or Motorola but you won’t be able to lock the bootloader with a custom OS installed on that phones which can create some vulnerabilities. If you want to run Linux on your phone though, you either need a PinePhone or a OnePlus 6 series
Look for DivestOS supported devices. What I cannot recommend is Fairphone. Several Hardware issues, support refuses to accept them. The support in general is horrible.
Kind regards
A Fairphone 4 user with /e/OSLook at which devices are supported my grapheneos, calyxos, /e/os and ubuntu touch/droidian and get the newest one of those that you can afford. Usually a google pixel (ironically) but also fairphone are well supported and are better IMO.
Ubunto Touch is still a thing? Does it get updated forever like normal Linux distros do?
Yeah buddy. It’s still getting updates; for how long though depends on the developers of course. Use it and bung them a donation! You can even install full Linux apps on it via Libertine, although it’s slightly easier on Droidian IIRC. Very, very cool stuff.
deleted by creator
deleted by creator
deleted by creator
Toss Linux Mint on a bootable USB, fire up a live version and play around a bit. I was in the same boat and am working on fully transitioning over. The only minor hurdles are Office 365 and other Windows-only programs, but there are ways to get those to work, or just run a Windows VM.
I bought a fairphone 4 awhile ago from Murena, the only US distributor. Other phones have more bells and whistles but I feel better knowing I can repair it if something goes wrong. If you’re in Europe the FP5 is a good bet but I don’t think anyone is selling them in North America. I don’t know about distribution elsewhere.
Get a Pixel and install a custom ROM. Any ROM is fine, just dont install gapps. You actually have to go out of your way to install google crap. By default a new install is google-free
What’s even scarier is that takeout is probably only the data they want you to see, or are legally obliged to share.
I would be willing to wager they have lots more on you that you’re not even aware of.
including everything they see through our front camera and rear cameras 😱
Idk about that. What data could they get with that, that they can’t already get through other (cheaper) means, that would justify all the network traffic and storage space?
don’t forget if you have location enabled in your phone it tracks every single place you’ve been to
It does that even if you turn it off. The setting just controls location access by third party apps.
Lineage os and F-droid is the better solution. It has the advantage of being bloat free as well
You can also use GPS location without any google services running, it just takes a bit longer to find your position when you first connect. OsmAnd or Organic maps from f-droid, which are actually superior apps to google maps in a lot of ways, particularly OsmAnd.
These apps cannot find addresses in the US. Just a heads up so anyone that sees this doesn’t pull their hair out trying to figure it out. No, it isn’t you, it’s the app.
It’s not the app, it’s the lack of volunteers mapping addresses in the US.
Don’t pull your hair out, install StreetComplete and take a walk around your neighborhood.And if you find that fun, editing Openstreetmap in the browser isn’t all that hard, either.
If you add addresses you are missing, you can increase the apps utility for yourself directly. Pretty fun seeing the stuff you entered appear in the map. And it doesn’t require any coding skills.Something you can’t do with missing info in Google Maps.
This is very cool. Bookmarked.
THIS! OsmAnd and Organic Maps are not worse apps because you cannot find some addresses. The data comes from OpenStreetMap, and if it’s missing there it won’t be available in these apps. That’s not a bug, that’s a feature. How? OpenStreetMap data is open and free for everyone to use and edit, it’s like the Wikipedia of maps. No, you don’t have Google mapping everything for you, you should probably chip in and help add addresses if you want a map that doesn’t depend on a huge corporation, a map where you can correct mistakes, and a map that’s free for anyone to use in their apps or websites. Otherwise we depend on what Google wants to map, how they want to map it, and the app that they offer us to access that data.
Works fine when you use GPS coordinates
I had to use Satstat to reset the AGPS data as Lineage os just won’t refresh agps on its own.
Yeah Google Maps isn’t actually a map app. Its for navigation.
And it can be very wrong about those locations, too. For better or worse, idk. My old phone showed me going to completely different cities on the other side of my state when I went to the corner store.
Just imagine what Microsoft and Apple are getting thru telemetry
Fucking whataboutism. Apple and Microsoft aren’t ad companies. They’re hardware and software companies. They don’t have to collect data on you to literally make any money, Google does. If Google doesn’t track everything you do they’re incapable of making money. The same is absolutely not true for ms and Apple.
Removed by mod
I take it you mean Douglas Leith who is the first result?
Removed by mod
deleted by creator
Whataboutism? Where did I say this makes what Google is doing better? They all work together. God you people are dense.
Microsoft and Apple absolutely are ad companies lmfao.
Microsoft is a ad company and Apple locks you in so you only buy there proprietary products. I don’t see how they are better
In regards to how much data they collect from you, which is the topic of this discussion, I’d say they are better. Everyone likes to defend Google because they offer you cheap or free things, but the truth is that comes at the cost of them surveilling everything you do. That’s their business. This knee-jerk response to say “well, Apple does it too” is not only almost completely wrong, it misses the distinctions between the two companies and their business models. Also, even if Apple actually did collect as much data as Google that is not an argument to keep using Google products.
I don’t use Google, Apple or Microsoft products. My statement wasn’t intended to be a justification. I’m just saying Apple and Microsoft are no worse that Google
Apple is still an ad company they just want to cordon off their “private ad system” with their VPN products and hide my email shit. Don’t trust Apple at all myself
especially now that they give out Windows upgrades for free
Feel free to go request the same fucking data from
Apple: https://support.apple.com/en-us/102208
And Microsoft: https://www.cnbc.com/2018/04/18/how-to-download-a-copy-of-everything-microsoft-knows-about-me.html
Then go ahead and tell me they’re in the same ballpark as what Google’s collected on you.
What you’re able to request from these companies officially is just the tip of the iceberg. The point is that between phone numbers, email reuse, google analytics etc with fingerprinting, and operating system telemetry, a complete picture is assembled of users.
If you’re not looking for arguments and instead approaching things from understanding surveillance maybe my statements will make sense now.
It is literally not the tip of the iceberg. I work in the industry, so lecturing me about data management platforms is asinine. Microsoft and Apple’s collection practices are minuscule compared to Google’s and DMPs are terrible at their jobs.
Lol? Way to discredit yourself as a clueless fucking rube. “I work in the industry and I take everything my employer says at face value” is not going to convince me bucko.
Why don’t you start talking about Apple’s third party ad service servers if you think you know where all the data is going? They leak everything even if they don’t officially retain stuff. It’s all theatre for employees and regulators and the EU.
The point of calling ou twhataboutism is that we should condemn both of them
You do realize that Google is far worse than Apple and Microsoft combined right?
Not really although its hard to objectively prove anything
“ghengis Khan killed more people than Hitler ya know, right?”
As a percentage of population, so did Julius Caesar.
The reality is that Google is entirely dependent on ads and selling your data.
Apple and Microsoft, it’s just a happy side gig they can do.
Apple makes its money selling mediocre hardware and software for a premium markup.
Microsoft makes money selling Windows, Office(+Teams) and Azure to business users then from video games, then ad revenue.Missed the point
Oh I got your point, but I also reject it. Google is objectively making the internet worse.
There isn’t any reasonable comparison to Apple or MS outside of they’re all too big and too unregulated.
Well, that’s wrong. They all collect data and telemetry on you.
Hitler also tortured people
Ok
I see it as good reason to distance myself from all of these mega data harvesting corporations to the best of my ability. Same goes for meta and tiktok. Why bicker about which is worst when they all are varying degrees of terrible?
Yup. It’s a slow process for me, but honestly the fediverse is proving a great resource for that.
You know they can suck up Activity Pub and sell that too, right?
The only difference on the fediverse is that all of them can mine the data, instead of just one of them.
deleted by creator
deleted by creator
It takes some effort, but this is untrue. You can easily degoogle many phones with a privacy oriented OS. If you want to avoid Apple, make sure you’re not buying an iphone. Install Linux on your computer and use libre open source programs, a privacy oriented email and messaging app. If you need to watch youtube, at least use a proper front end for it. I don’t think anyone needs facebook or tiktok, I’ve been able to just walk away from those without alternatives.
There are manageable approaches to distance yourself almost entirely from these spy companies if you really want to. You can do it slowly, or pick one company at a time to get away from. It doesn’t have to be all or nothing, and even small steps in the right direction are beneficial to your privacy.
Doesn’t have anything to do with Microsoft and Apple’s market share on PC which is what I was thinking of.
Besides, it wasn’t like I was saying Google’s mobile telemetry is less invasive on Android, where they compete with Apple for being as creepy as possible. IIRC windows phones haven’t taken off
This is entirely speculation on your part.
Google has been more transparent that it happens. Apple is definitely collecting information on everything you do on their devices as well. It may be just as much info.
With their new pay later feature, you know they are at least collecting enough info to make financial decisions based on your profile.
They also collect health data using the watch.
They collect more than that in order to better understand how to keep people in their ecosystem. I’d wager the latter will about cover what OP was surprised by Google capturing.
Microsoft is another story. They are the most valuable tech company in the world right now due to AI. Which indicates that they are training some powerful AI on data that has been gathered in a number of places.
Of all three, Google has the most skin in that game, for what it’s worth, IMHO. They’re an advertising company first and foremost, and it shows in all of their products’ feature sets and privacy policies.
But we also can’t trust either of them lol
Data has become even more valuable with AI. All big tech outfits are incentivised to collect it now. Combine that with them being able to and you’re left just having to trust them. If you plan to use their stuff that is.
Google is by far the worst offender. Their business model is based on collecting this data. Microsoft wants this to be their business model too. Apple just wants to sell you devices, and they are promoting themselves as privacy friendly, I’m sure they’re making some effort to avoid collecting data they don’t need.
Apple is only promoting themselves as a privacy company to try to get VPN customers to move to their iCloud plus and shit. It’s like Micro$oft moving into open source. I really don’t think it’s ever wise to take a company’s philosophy seriously it’s just a way to manage customer and employee expectations temporarily.
No, I think Apple is promoting themselves as a privacy company because companies like Google, Meta, and Microsoft are abusing your data and you and it’s actually a great position to take and way to distinguish themselves from others in the industry. There are countless privacy features on Apple products that they initiated which show they’re pretty damn serious about it… MAC address hiding, killing 3rd party cookies and forcing Google to too, blocking trackers, encryption of cloud data, granular privacy controls, cracking down on Meta’s app tracking abuse. I trust Apple a million times more than the others and would rather pay extra for a device knowing my info isn’t being vacuumed up in the same way the others do. Tired of neck beard nerds defending the practices of these companies. Google and Meta are privacy nightmares. Google is the original privacy nightmare. It is spyware. You can’t convince me that aPpLe iS wOrSe just because you have an ax to grind with the company. The truth is there is a big difference between them and your whataboutism bullshit is lame and overplayed and also WRONG.
Oh my God I’ve triggered the Apple FOMO dorks. Please get a life
The worst part, is even when you try to avoid, you cant.
You send an email from proton, to mostly gmail account, now they have your email.
You mean your business, the guy next to you talk to google home, and you get recorded.
Every time I 'm forced to use a google account by some 3rd party, I get a panic attack from how predatory it is to get you to give them your data, you cant log out without 4 clic, it is a true dystopia we let that compagny rule our world
But but but you should pay for YouTube!
now they have your email.
That’s why you use hide-my-email aliases when you sign up to sites, so they can’t tie “your” email to you anymore.
Every time I 'm forced to use a google account
Create a few junk accounts, send recovery to a hide-my-email alias
If you use password managers it really is no bother to have multiple accounts, and Proton Pass integrates hide-my-email, it’s pretty neat.
Thanks for the hint with hide-my-email! I will ask my mail provider, if they offer something like this as a service.
dont panic. you can protect yourself. dont depend on others. you can use random email aliases for everything. always take the mindset that anything you say outside your home is public information. use throwaway phone numbers like jmp.chat if you have to use phone numbers at all. etc etc.
take the approach of compartmentalizing your identities and contact info, and take the approach of protecting your SELF first, dont depend on others. sorta like a shady arms dealer or something, but you’re not dealing arms :P!
Have you been under a rock?
I’m really not a fan of such gatekeeping rhetoric.
Congrats on already knowing stuff, I guess. The vast majority of people don’t have the ability, will or exposure to engage with most technical stuff, especially since the concept of (digital) privacy still is surprisingly controversial.
We all benefit from more people caring about privacy. Comments like yours achieve the exact opposite and don’t provide any value at all to the conversation.
Friends don’t let friends use Google and meta. show those you care about what you have discovered. don’t lecture them just make them aware, share your findings.
Also for a good read on Google and Meta, check out Jedi Blue. It’s a plan that FB and Google got sued for, for manipulating ad auction timings in favor of FB on Google in exchange for FB to promise to not open a competing ad service plans. They also gave FB access to every google device with Facebook (preinstalled esp) on it. The name Jedi Blue is a reference to the Jedi mind trick, assholes.
This shouldn’t be a surprise to anyone. It’s the same with all the big data companies. Everything you type, say or do gets logged and never deleted.
It could be they are collecting and hiding the data, but what they publicly disclose they have certainly varies. My de-google-fication really started when I used google takeout (like the OP here). Excluding things I wanted backed up (e.g. photos), Google still had more than a GB of textual data (this was 7 years ago or so—my memory may be wrong). I use Apple a lot so I went to their “takeout” page. They had a few MB of data pretty much all of which I considered innocuous. I don’t think they are equivalent.
I do agree Facebook probably collects as much data as Google, but I gave that up long ago.
That’s why I’m still in doubt wether to use my fingerprint to unlock my phone. Would be convenient, but where is it stored, who can access it?
Stored locally
are you sure about that?
I don’t see how your fingerprint could be used for advertising
Anybody with access to your finger, which means they don’t need you to be conscious or even alive to access your phone.
If they have me dead or unconscious my phone is the least of my concerns.
Needing a password/pattern instead makes them want to keep you alive tho. Good opsec.
Totally. I’m not saying it’s better security just that in a situation like that I’m not really worried about what’s going on with my phone.
Thats kinda fucked up. So you dont mind if all the conversations with your friends get published publicly?
You’re not a good friend.
My friends don’t want to use end to end encrypted platforms so it’s one data leak from being public anyway.
The suspect was later arrested in possession of a severed finger and a dank porn stash on the victims mobile phone
Depends if you wanna be remembered as John Smith instead of “Ah Yeah, John Smith the furry midget lover”
Maybe that’s my kink
Smart for many reasons as people listed here. Your fourth amendment rights to your phone also go out the window when you use biometrics like fingerprint. PIN/password is protected, fingerprint/face scan is not. Backwards world we’re in, huh?
Its not everything. Thats hyperbolic. Metadata is usually more profitable then the data itself.
Not literally everything. But if you’re sending unencrypted data via internet, even data you may not be aware of. It’s likely being stored by some company.
while, yes, regardless of your privacy settings google still collects a sickening amount of data on you, much of these things (like voice recordings and location history) can be managed and disabled in the settings. if you wish to go further, grapheneos removes A LOT of tracking potential.
these should be opt in features, but one can opt out of much of them.
How is it not zero on Graphene??
well if you have play services installed then google is gonna get some data on you.
So does CalyxOS
Today you learned a valuable lesson:
When an online service is free it generally means you’re the product.
Today companies will snoop your info even if you pay 1000s for a device.
Why wouldn’t they, obviously no one cares
It’s [current year], nobody is learning that lesson today. We’ve all known it for well over a decade now.
It’s not even online only anymore. You can’t do the setup process of Android OR Windows without connecting to the Internet, and I doubt Apple’s products are any better in that regard.
Yeah, anyone who’s never done this really should. It’s eye-opening to see it go from a theoretical discussion to “HOLY SHIT THEY HAVE ALL MY DATA” in real-time.
What’s a Google takeout?
Everything they have on you.
Everything they’re willing to tell you they have on you.
It’s Google’s name for a service that lets you download all the data Google has on your account. If you google google takeout it should get you to the page.
I really don’t understand why you find this surprising. We’re you expecting like…42% of all that to be saved?
To be fair, it wasn’t something most of us were thinking about in the early 2000’s
Then Google became ubiquitous, to the point where we didn’t question it. Like cell service
That’s very true. But not really by the time Android started.
Don’t be so harsh we all gotta learn eventually. His moment is now brethren!
Google has a data privacy setting that lets you delete your data history at some intervals. The lowest is 3 months last I checked. Make sure to use it.
deleted by creator
Ideally you should, but a lot people use Android or want to use Google services. An as example, if you use Google Maps, then you have to opt in to giving Google location access and Google will collect your data. In that case, the least you can do is limit the amount of time Google keeps your data and change from the default setting which I think is forever.
deleted by creator
So that would delete all the information that OP listed above?
Yes. You can select what to delete and what to retain if I recall correctly. It’s grouped by “activities”, by app if you will.
