Looks to be a duplicate of a post from yesterday https://news.ycombinator.com/item?id=33194105 https://news.ycombinator.com/item?id=33194105 Anyways reposting

Looks to be a duplicate of a post from yesterday https://news.ycombinator.com/item?id=33194105 https://news.ycombinator.com/item?id=33194105 Anyways reposting my comment from that thread: Seems like even if you enable the option to block connections outside a VPN, Android is designed to still do connectivity checks for special cases like identifying captive portals (like hotel WiFi). From the article: > “Even if the content of the message does not reveal anything more than "some Android device connected", the metadata (which includes the source IP) can be used to derive further information, especially if combined with data such as WiFi access point locations.” > Mullvad is still debating the significance of the data leak with Google, calling them to introduce the ability to disable connectivity checks and minimize liability points. > Notably, GrapheneOS, Android-based privacy and security-focused operating system that can run on a limited number of smartphone models, provides this option with the intended functionality.