4 ms·
I've made a complaint to the police and my local privacy regulator (in France) more than a year ago, regarding blatant and widespread illegal data collection by
by rcMgD2BwE72F 5y ago
I've made a complaint to the police and my local privacy regulator (in France) more than a year ago, regarding blatant and widespread illegal data collection by Google on probably most Android devices on Earth. I have not yet heard back from them and I doubt they'll even consider this report. Here it is in a nutshell.
1. set up a brand new phone (Pixel, OnePlus or else)
2. do not connect to a Google account at first or if it is required, log out and remove the account as soon as possible
3. create a contact on your phone with any Contact application (with a name, email address and phone number). Do no enable sync for this application.
4. open the Play Store to download any application (e.g one from your government). You'll be asked to connect to a Google account at this stage, of course
5. now, try to log into your Google account to download the application but *not have Google automatically collect all your contacts' details* (stored locally).
You can't!
This is not possible because:
1. by default, adding the Google account will enable the automatic synchronization for all Google-related apps and services (incl. Contacts). You can disable this before login.
2. You cannot stop the sync of these Contacts while connecting Google Play to your account. It is done in the background and by the time you switch from Google Play (or the login page) to the Settings menu of your device, the sync will have started (if not completed already).
3. You cannot do all this in airplane mode obviously, as it it's impossible to log into a Google account without an Internet connection.
This is illegal per GDPR, because at no point you consent to have your data collected by Google. Also, Android does not inform you of this collection so it's up to you to discover this by browsing your device's settings, down a a sub-levels.
It is a massive collection (and fraud) because most people have probably a hundreds contacts or more on their mobile device. Most mobile devices run Android. Google Play is almost impossible to avoid nowadays (Twitter, Facebook, Youtube, Whatsapp, Signal, Firefox, your bank's app, your employers' apps... they all require Google Play and Services to work correctly). Worst, your contacts' information isn't yours, but your contacts' too. Google simply helps themselves.
With 73% of mobile OS market share, around 99% of Android users being probably logged in just to access the Play Store, Google probably has collected the names, email addresses, phone numbers and lots of private information (birthday dates, home and work addresses, employers' names, job titles, digicodes, etc) of every person on Earth, and probably more than once. Without asking for permission.
This is easy to reproduce, 100% illegal (at least per GDPR), everyone is affected and yet, _crickets_.
If you're in the US and believe this is illegal there too, please contact a privacy organization or any entity that might do something about it, at least if you don't like having all your contact details collected by Google without consent.