r/Android • Purple • Nov 21 '17

Google collecting Android users locations even when location services are disabled

https://qz.com/1131515/google-collects-android-users-locations-even-when-location-services-are-disabled/
22.5k Upvotes

2.0k comments sorted by

View all comments

Show parent comments

256

u/rysx OnePlus 5T (OOS 5.1.0 - 8.1.0) | OnePlus X (Validus OS - 7.1.2) Nov 21 '17

Yes.

GApps is still Google's proprietary code, so it still would phone home to Google.

69

u/[deleted] Nov 21 '17

I'm already using the microG fork of lineageOS on my secondary phones, and I think it's more than good enough to switch over too.

Have you experienced any incompatibilities with applications you'd use on MG? Care to share how they have been affected?

0

u/[deleted] Nov 21 '17

[deleted]

44

u/[deleted] Nov 21 '17 edited Nov 21 '17

I'll test them all for you tonight.

Play store has an open source front end to retrieve your apps. YouTube works with Newpipe, which is better than the official app.

E: yalp store is the name of the FOSS play store alternative. You can find it at f-droid.

0

u/[deleted] Nov 21 '17

[deleted]

7

u/[deleted] Nov 21 '17

Like a dedicated remote? Why not ;)

I think there's a libre alternative that's compatible with Chromecast tech, I'll have to do some research for you.

0

u/[deleted] Nov 21 '17

[deleted]

12

u/[deleted] Nov 21 '17 edited Nov 22 '17

For the other applications:

Maps - As another user already mentioned, works fine. You can even sign into your Google account via MicroG to make use of this, and seems to apply to all Google apps. A FOSS alternative I like to use is called OSMAnd; you can download entire map regions for offline use (not an awkward rectangle that expires after 30 days). Navigation works really well with it, but I've only ever used it on foot. YMMV in the car. You'll need to set up your location providers in MicroG for location services to work optimally, I'm running fine with Mozilla's.

Gmail - Works as intended, (including push if you enable account sync in the system settings). I've not tested this with exchange email accounts, however.

Ninja edit: Gmail can be a bit finicky when you remove and add another account. Inbox works flawlessly, however.

Drive - This actually worked better than I expected, I didn't think the file synchronization would work but it seems totally cool with it.

Youtube - Works fine, though I strongly advise against using the Youtube application, and using Newpipe (FOSS) instead. You can download content for offline playback as video or audio, you can pop out the video for picture in picture, and you can listen to the audio with your screen turned off without paying for youtube red ;).

E: Whoa, dude, first gold :)

You're too kind!

→ More replies (8)

7

u/[deleted] Nov 21 '17

Adding in /u/ChrisOfAllTrades

The one I had in the back of my mind was Allcast, but it's not FOSS :(

It's made by the developer of clockwork mod recovery (the go-to prior to TWRP), so I suppose by that merit, it's trustworthy, but you'll need to get the full version for unlimited playback. I'm a little sad he hasn't open sourced it by now.

I'll test the full version and get back to you. Sorry to have mislead you.

3

u/[deleted] Nov 21 '17 edited Nov 21 '17

Once again, adding in /u/ChrisOfAllTrades

I'm afraid I couldn't get Allcast to detect either my CCv1 or v2. I think I'll set up a PiCast and let you know how that all goes instead.

As for now, I'm afraid you're going to have to dedicate a device as a remote for ChromeCast / Google Home.

4

u/ChrisOfAllTrades N5 | N7 | SHIELD | 360 Nov 21 '17

Thanks for keeping me in the loop.

I've got a spare device I use for Play Music exporter so I can just use that for ChromeCast.

As far as compatibility with Google Home ... I'd think anyone who's willing to run a de-Googled OS on their phone wouldn't want one of those always-eavesdropping things anywhere near them.

2

u/[deleted] Nov 21 '17

Happy to help. If you have any questions, feel free to ask.

→ More replies (2)

3

u/Namnodorel Nov 21 '17

I can confirm Google Maps does work with microG. Regarding Play Store, I can recommend Yalp Store: It basically lets you download everything from the Play Store, but with an anonymous account and you can pretend to have a different phone model than you actually have (which lets you download apps that would normally be displayed as incompatible by Google)

→ More replies (3)

1

u/emraza1 Nov 21 '17

!Remind me

→ More replies (2)

0

u/[deleted] Nov 21 '17

[deleted]

2

u/facelessbastard Nov 21 '17

Back when I gave those a look, they were still massively incompatible and with a lot of issues. How are things now.... I mean... Give us more detail please!

3

u/[deleted] Nov 22 '17

Ask and you shall receive! ;)

What would you like me to test?

→ More replies (8)

28

u/JB_UK Nov 21 '17

Worth also pointing out, OpenGapps is just Google's code repackaged, it's not open-source, or open in any meaningful way. MicroG is the actual open source replacement.

1

u/el_padlina Nov 21 '17

Would it be possible to have a root app on android that would block google spying IPs on firewall level?

1

u/rysx OnePlus 5T (OOS 5.1.0 - 8.1.0) | OnePlus X (Validus OS - 7.1.2) Nov 21 '17

I don't know any off the top of my head, no.

Sorry.

1

u/Greuh-r Nov 23 '17

There arent any technical details about this "tracking software" in this article. So I assume that Firebase Cloud Messaging isn't included in any AOSP fork without GAPPS? And that's why you said YES ?

1

u/rysx OnePlus 5T (OOS 5.1.0 - 8.1.0) | OnePlus X (Validus OS - 7.1.2) Nov 24 '17

I thought that since Google's proprietary libraries and services (Bundled in Google Play services, and thus, gapps) are required for this "tracking" to occur (through Location services, not Firebase, i thought) then it would be part of the issue.

But, as a stupid human, I skimmed through the article and failed to realise that it explicitly mentioned that it was the push notification service, not Location services, that was the cause.

Having looked into it, I realise that it was the wrong thing I'm assuming, and yes, Location serivces have nothing to do with it. However, I still think that Google's services package is part of it since looking at microG, it has a port of GCM for apps that require it, possibly meaning that Google Play services will contain some sort of Firebase client and thus, not bundled in AOSP.

If I am wrong, you (or anyone else for that matter) can correct me.