Excellent thinking! These are the SDKs to worry about. Next is, who do they ‘phone home’ to? An easy way to find things is with a local proxy or DNS log, as

Excellent thinking! These are the SDKs to worry about. Next is, who do they ‘phone home’ to? An easy way to find things is with a local proxy or DNS log, as your phone looks up things on behalf of apps. Which things are looked up by more than one app? A few I noticed back in 2019: iOS “User Linking” Trackers [business].app.link [business].onelink.me [hash].ulink.adjust.com [business].bttn.io bnc.lt branch.io Then you can also see who is invoking them coming from the domain tree: - https://securitytrails.com/list/apex_domain/app.link https://securitytrails.com/list/apex_domain/app.link (2962) - https://securitytrails.com/list/apex_domain/onelink.me https://securitytrails.com/list/apex_domain/onelink.me (998) - https://securitytrails.com/list/apex_domain/bttn.io https://securitytrails.com/list/apex_domain/bttn.io (60)