I created a google takeout and in that zip file I found some files containing a ton of data about me. It has logged every single page I visited while using the google search engine and chrome browser. It even logged every single time I opened an app on my old android phone. It even has VOICE RECORDINGS of me and a log of every time I used google assistant. This is just some of the data and I’m very sure there is even more data they have.
You must log in or register to comment.
How do you think they are able to pay the bills of those expensive af services for free?
Fortunately you can degoogle many Android phones. And stop using big tech products in general. They have a lot of issues, not only a complete lack of privacy
I might be looking into a new phone soon, what do you suggest?
A pixel, if you buy into GrapheneOS being the pinnacle of security. Otherwise, anything with an unlockable bootloader and LineagOS support.
Graphene gang representing
Gang gang
It’s actually quite ironic that the best phone to degoogle your life is sold by google.
Dont forget CalyxOS. IMHO better than Graphene
CalyxOS has pretty bad security. They install F-Droid and microG with root privileges, don’t release updates regularly and lack many security features of GrapheneOS.
Different strokes, but I personally dont think yge Graphene devs are trustworthy, and much prefer Calyx.
I’m also not afraid of root. Its how I harden my device (eg firewall)
GrapheneOS has a built in Firewall that doesn’t require root privileges. Also, you don’t trust the GrapheneOS devs who arguably create one of the most secure operating systems on the planet, which is open source and can be verified by everyone, but you trust Calyx devs who regularly go months without releasing any Android security patches and include highly privileged third party apps in their operating system. Makes a lot of sense.
Of course it requires root.
Much
Ironically enough, Google Pixels are great phones if you need to de-google with GrapheneOS.
I just can’t buy it and support them
Buy used on Swappa/ebay
Shameless plug for backmarket. They’re pretty solid
Twice the price of ebay
Depending on the state of the thing you’re looking at, maybe? A pixel 6 pro goes for ~220 on backmarket and ~210 on eBay. Does eBay guarantee free 30 day returns and have a great 1 year warranty? Depends on the seller. Backmarket offers it sitewide. Id rather pay a few extra bucks to not have to fight with someone over getting my money back or my shit fixed
-
Pretty certain these things have razor thin margins, if any.
-
You’re supporting them MUCH more by giving them your data. According to Proton the average Google user is worth ~$400/year.
Pixel phones are mostly designed to be flagship Android experiences, not generate hardware revenue.
-
Or CalyxOS
GrapheneOS is amazing
Can you use banking apps on it?
Yes. Check out this list: https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos
Will this still be true after safetynet is deprecated? Not trying to be difficult, just don’t want to get my hopes up.
Edit: ah its adressed in the link lol
Why would you want to use a banking app on something as insecure as a phone??!?
When your bank tells you that the code booklet will be phased out and mobile app will be the only way in the future.
Bingo
Change banks that take security seriously
As long as you don’t use some shady, unofficial ROM on a phone, most phones are actually vastly more secure than your typical Linux/Windows OS.
How long is your passphrase on your phone compared to your Linux/windows OS?
A phone is designed for quick usability, which is the enemy of security.
Sure, if you have a 20 char password on your phone and never install any sketchy apps, then it might be ok. But the whole phone ecosystem is just less secure because its designed for convince, not security.
A phone is more secure than most desktop computers. https://youtu.be/Wd4Pa03LvLk
GrapheneOS even significantly improves Android’s already pretty good security model.
Here is an alternative Piped link(s):
https://piped.video/Wd4Pa03LvLk
Piped is a privacy-respecting open-source alternative frontend to YouTube.
I’m open-source; check me out at GitHub.
Riiight, someone’s phone with a 4 digit pin that they tap out 100x per day in public in plain view of others (that I can easily pick out of your pocket) is more secure than a laptop with a 20 character passphrase that never leaves my house.
Do you even think about what you’re saying?
I’m talking about the security model of the platform, not the way you use your devices. If you do your online banking in a browser on your computer and your system gets infected with malware, that malware can access all the files on your computer. Including application data of your browser. It can access your cookies, which your bank’s website uses to store your login information. Such an attack is impossible on a mobile device, since apps can only access their own data, and inter-process communication is heavily restricted. Additionally, mobile operating systems like Android have complex permission systems, as well as kernel-based mandatory access control like SELinux/SE for Android. Your typical desktop OS has none of that. Android also has a strong implementation of Verified Boot, which makes sure that malware can’t persist on your system partition, even after your device gets infected. I recommend this video if you want to learn more about mobile device security: https://youtu.be/yTeAFoQnQPo
deleted by creator
If you want a normie phone that you can install a privacy-focused OS on, Google Pixel is a surprisingly good option. Just take a look at the LineageOS’s and GrapheneOS’s officially supported devices lists before purchasing a specific model. You can also choose Xiaomi or Motorola but you won’t be able to lock the bootloader with a custom OS installed on that phones which can create some vulnerabilities. If you want to run Linux on your phone though, you either need a PinePhone or a OnePlus 6 series
Look for DivestOS supported devices. What I cannot recommend is Fairphone. Several Hardware issues, support refuses to accept them. The support in general is horrible.
Kind regards
A Fairphone 4 user with /e/OSLook at which devices are supported my grapheneos, calyxos, /e/os and ubuntu touch/droidian and get the newest one of those that you can afford. Usually a google pixel (ironically) but also fairphone are well supported and are better IMO.
Ubunto Touch is still a thing? Does it get updated forever like normal Linux distros do?
Yeah buddy. It’s still getting updates; for how long though depends on the developers of course. Use it and bung them a donation! You can even install full Linux apps on it via Libertine, although it’s slightly easier on Droidian IIRC. Very, very cool stuff.
deleted by creator
deleted by creator
Toss Linux Mint on a bootable USB, fire up a live version and play around a bit. I was in the same boat and am working on fully transitioning over. The only minor hurdles are Office 365 and other Windows-only programs, but there are ways to get those to work, or just run a Windows VM.
13 years was a long time ago
I bought a fairphone 4 awhile ago from Murena, the only US distributor. Other phones have more bells and whistles but I feel better knowing I can repair it if something goes wrong. If you’re in Europe the FP5 is a good bet but I don’t think anyone is selling them in North America. I don’t know about distribution elsewhere.
Get a Pixel and install a custom ROM. Any ROM is fine, just dont install gapps. You actually have to go out of your way to install google crap. By default a new install is google-free
They may even save every Google meet meeting for all we know. They may train their AI on how our faces look in meetings.
Nothing is too creepy for Google.
Why would they need that? There is plenty of your face on Google photos.
For you, maybe. Mine is filled with black screen pocket photos, furry porn, and 714 copies of a video of a horrifying mecha furby that’s stepping on its own removed face.
Another copy shows up every time I have a nightmare about it, which is pretty odd, now that I think about it.
Why would they need that? Let me introduce you to Big Data.
The faces training was all of the filters. Every single time someone took a video or picture and used filters to add cute moe eyes, or make themselves look like a crab, it was being used to make whichever company was doing it have a better bottom line or to accelerate their facial recognition.
What’s even scarier is that takeout is probably only the data they want you to see, or are legally obliged to share.
I would be willing to wager they have lots more on you that you’re not even aware of.
including everything they see through our front camera and rear cameras 😱
Idk about that. What data could they get with that, that they can’t already get through other (cheaper) means, that would justify all the network traffic and storage space?
don’t forget if you have location enabled in your phone it tracks every single place you’ve been to
It does that even if you turn it off. The setting just controls location access by third party apps.
Lineage os and F-droid is the better solution. It has the advantage of being bloat free as well
You can also use GPS location without any google services running, it just takes a bit longer to find your position when you first connect. OsmAnd or Organic maps from f-droid, which are actually superior apps to google maps in a lot of ways, particularly OsmAnd.
These apps cannot find addresses in the US. Just a heads up so anyone that sees this doesn’t pull their hair out trying to figure it out. No, it isn’t you, it’s the app.
It’s not the app, it’s the lack of volunteers mapping addresses in the US.
Don’t pull your hair out, install StreetComplete and take a walk around your neighborhood.And if you find that fun, editing Openstreetmap in the browser isn’t all that hard, either.
If you add addresses you are missing, you can increase the apps utility for yourself directly. Pretty fun seeing the stuff you entered appear in the map. And it doesn’t require any coding skills.Something you can’t do with missing info in Google Maps.
This is very cool. Bookmarked.
THIS! OsmAnd and Organic Maps are not worse apps because you cannot find some addresses. The data comes from OpenStreetMap, and if it’s missing there it won’t be available in these apps. That’s not a bug, that’s a feature. How? OpenStreetMap data is open and free for everyone to use and edit, it’s like the Wikipedia of maps. No, you don’t have Google mapping everything for you, you should probably chip in and help add addresses if you want a map that doesn’t depend on a huge corporation, a map where you can correct mistakes, and a map that’s free for anyone to use in their apps or websites. Otherwise we depend on what Google wants to map, how they want to map it, and the app that they offer us to access that data.
Works fine when you use GPS coordinates
I had to use Satstat to reset the AGPS data as Lineage os just won’t refresh agps on its own.
Yeah Google Maps isn’t actually a map app. Its for navigation.
And it can be very wrong about those locations, too. For better or worse, idk. My old phone showed me going to completely different cities on the other side of my state when I went to the corner store.
The worst part, is even when you try to avoid, you cant.
You send an email from proton, to mostly gmail account, now they have your email.
You mean your business, the guy next to you talk to google home, and you get recorded.
Every time I 'm forced to use a google account by some 3rd party, I get a panic attack from how predatory it is to get you to give them your data, you cant log out without 4 clic, it is a true dystopia we let that compagny rule our world
But but but you should pay for YouTube!
now they have your email.
That’s why you use hide-my-email aliases when you sign up to sites, so they can’t tie “your” email to you anymore.
Every time I 'm forced to use a google account
Create a few junk accounts, send recovery to a hide-my-email alias
If you use password managers it really is no bother to have multiple accounts, and Proton Pass integrates hide-my-email, it’s pretty neat.
Thanks for the hint with hide-my-email! I will ask my mail provider, if they offer something like this as a service.
dont panic. you can protect yourself. dont depend on others. you can use random email aliases for everything. always take the mindset that anything you say outside your home is public information. use throwaway phone numbers like jmp.chat if you have to use phone numbers at all. etc etc.
take the approach of compartmentalizing your identities and contact info, and take the approach of protecting your SELF first, dont depend on others. sorta like a shady arms dealer or something, but you’re not dealing arms :P!
Friends don’t let friends use Google and meta. show those you care about what you have discovered. don’t lecture them just make them aware, share your findings.
Also for a good read on Google and Meta, check out Jedi Blue. It’s a plan that FB and Google got sued for, for manipulating ad auction timings in favor of FB on Google in exchange for FB to promise to not open a competing ad service plans. They also gave FB access to every google device with Facebook (preinstalled esp) on it. The name Jedi Blue is a reference to the Jedi mind trick, assholes.
This shouldn’t be a surprise to anyone. It’s the same with all the big data companies. Everything you type, say or do gets logged and never deleted.
It could be they are collecting and hiding the data, but what they publicly disclose they have certainly varies. My de-google-fication really started when I used google takeout (like the OP here). Excluding things I wanted backed up (e.g. photos), Google still had more than a GB of textual data (this was 7 years ago or so—my memory may be wrong). I use Apple a lot so I went to their “takeout” page. They had a few MB of data pretty much all of which I considered innocuous. I don’t think they are equivalent.
I do agree Facebook probably collects as much data as Google, but I gave that up long ago.
That’s why I’m still in doubt wether to use my fingerprint to unlock my phone. Would be convenient, but where is it stored, who can access it?
Stored locally
are you sure about that?
I don’t see how your fingerprint could be used for advertising
Anybody with access to your finger, which means they don’t need you to be conscious or even alive to access your phone.
If they have me dead or unconscious my phone is the least of my concerns.
Needing a password/pattern instead makes them want to keep you alive tho. Good opsec.
Totally. I’m not saying it’s better security just that in a situation like that I’m not really worried about what’s going on with my phone.
Thats kinda fucked up. So you dont mind if all the conversations with your friends get published publicly?
You’re not a good friend.
My friends don’t want to use end to end encrypted platforms so it’s one data leak from being public anyway.
The suspect was later arrested in possession of a severed finger and a dank porn stash on the victims mobile phone
Depends if you wanna be remembered as John Smith instead of “Ah Yeah, John Smith the furry midget lover”
Maybe that’s my kink
Smart for many reasons as people listed here. Your fourth amendment rights to your phone also go out the window when you use biometrics like fingerprint. PIN/password is protected, fingerprint/face scan is not. Backwards world we’re in, huh?
Its not everything. Thats hyperbolic. Metadata is usually more profitable then the data itself.
Not literally everything. But if you’re sending unencrypted data via internet, even data you may not be aware of. It’s likely being stored by some company.
while, yes, regardless of your privacy settings google still collects a sickening amount of data on you, much of these things (like voice recordings and location history) can be managed and disabled in the settings. if you wish to go further, grapheneos removes A LOT of tracking potential.
these should be opt in features, but one can opt out of much of them.
How is it not zero on Graphene??
well if you have play services installed then google is gonna get some data on you.
So does CalyxOS
Today you learned a valuable lesson:
When an online service is free it generally means you’re the product.
Today companies will snoop your info even if you pay 1000s for a device.
Why wouldn’t they, obviously no one cares
It’s [current year], nobody is learning that lesson today. We’ve all known it for well over a decade now.
It’s not even online only anymore. You can’t do the setup process of Android OR Windows without connecting to the Internet, and I doubt Apple’s products are any better in that regard.
Have you been under a rock?
I’m really not a fan of such gatekeeping rhetoric.
Congrats on already knowing stuff, I guess. The vast majority of people don’t have the ability, will or exposure to engage with most technical stuff, especially since the concept of (digital) privacy still is surprisingly controversial.
We all benefit from more people caring about privacy. Comments like yours achieve the exact opposite and don’t provide any value at all to the conversation.
Yeah, anyone who’s never done this really should. It’s eye-opening to see it go from a theoretical discussion to “HOLY SHIT THEY HAVE ALL MY DATA” in real-time.
What’s a Google takeout?
Everything they have on you.
Everything they’re willing to tell you they have on you.
It’s Google’s name for a service that lets you download all the data Google has on your account. If you google google takeout it should get you to the page.
Google has a data privacy setting that lets you delete your data history at some intervals. The lowest is 3 months last I checked. Make sure to use it.
deleted by creator
Ideally you should, but a lot people use Android or want to use Google services. An as example, if you use Google Maps, then you have to opt in to giving Google location access and Google will collect your data. In that case, the least you can do is limit the amount of time Google keeps your data and change from the default setting which I think is forever.
deleted by creator
So that would delete all the information that OP listed above?
Yes. You can select what to delete and what to retain if I recall correctly. It’s grouped by “activities”, by app if you will.
I really don’t understand why you find this surprising. We’re you expecting like…42% of all that to be saved?
To be fair, it wasn’t something most of us were thinking about in the early 2000’s
Then Google became ubiquitous, to the point where we didn’t question it. Like cell service
That’s very true. But not really by the time Android started.
Don’t be so harsh we all gotta learn eventually. His moment is now brethren!
