Privacy Strategy: Ditch the Apps
The Facebook app on Android sparked controversy when it was found secretly tracking users' activities on other websites and apps. This happened through a method called "cookie injection." The app inserted special tracking codes into users' browsing sessions, allowing Facebook to gather data about online behavior, even when users believed they were browsing privately. By exploiting Android's system, the app bypassed typical privacy protections. Many were alarmed since this occurred without users' knowledge or consent. After public backlash, Facebook claimed they halted this practice for now. However, the incident has sparked broader discussions about the need for stronger privacy regulations and transparency from tech companies. Learn more about this at The Register.
In a separate report, The Hacker News highlighted a warning from Taiwan. Apps like RedNote, TikTok, WeChat, and others send user data, such as face scans and contacts, back to China. You can read the details at The Hacker News.
The common link between these stories and many others is clear. Apps on mobile devices often have excessive access to the device.
It's Not Just Social Media
Studies show that mobile apps frequently collect more data than needed, often without clear user permission, resulting in privacy breaches. This problem spans multiple app categories, including social media, fitness, retail, and even simple tools like weather apps. Academic researchers, consumer advocates, and regulators have tracked these issues from at least 2019 through 2025.
Back in 2019, researchers found over 1,000 Android apps harvesting data like location, Wi-Fi connections, and personal details, even after users denied permissions. These apps used permissions from other apps to sidestep privacy controls. Reported by CNET, this exposed a major flaw in Android's permission system and raised concerns about widespread data collection. At the time, companies like Facebook, Google, and Amazon faced growing scrutiny over privacy and security practices. Android 10, released later that year, introduced better privacy controls. Still, the event emphasized the importance of staying vigilant.
Legal and Ethical Implications
Such practices may violate international privacy laws, such as GDPR and CCPA, due to missing consent and deceptive data collection tactics. Legal experts warn that companies could face hefty fines and lawsuits, especially in the EU, where privacy rules are strict. On the ethical side, these incidents challenge user trust, corporate accountability, and the trade-off between data-driven features and personal privacy.
A Different Approach: Use a Browser
There’s rarely a need to use an app. Most websites offer mobile-friendly versions with nearly the same features as their apps. Some even function as Progressive Web Apps (PWAs). These allow you to launch the site from an icon on your phone’s home screen without a browser interface. Best of all, websites must request permission to access local resources like location, contacts, photos, or other apps. The browser’s sandbox keeps them contained, limiting their reach.
Browsers differ because they naturally restrict what websites can do on your device. Sites can only access a small set of features, and you can revoke those permissions anytime. This method shines when paired with a privacy-focused browser like Brave. Brave blocks ads and trackers, letting you browse without worrying about hidden surveillance. Add a VPN, such as Proton, to mask your location for extra protection.
We use this strategy for sites like X (formerly Twitter), Facebook, LinkedIn, and many others, avoiding the need for their apps entirely.
What if You Need the App
Sometimes, an app is unavoidable. For instance, a banking app might be required for mobile deposits. In these cases, you have options. If it’s a one-time need, install the app, complete the task, and uninstall it. Adding and removing apps is usually quick and simple.
If the app must stay, evaluate its permissions carefully. Does a flashlight app need your photos and contacts? Does a notepad app require your location? Grant only the bare minimum permissions it needs to work. Check existing apps too, and adjust their settings as follows.
iOS App Permissions
- Open Settings: Tap the Settings app on your iPhone or iPad.
- Find the App: Scroll down, then tap the app you want to manage.
- Adjust Permissions: Toggle switches for Camera, Microphone, Location, Photos, and more to turn access on or off.
- Location Settings: Pick Never, Ask Next Time, While Using, or Always (if offered).
- Privacy Settings: Or go to Settings > Privacy & Security, choose a category (like Camera), and adjust permissions for specific apps.
Android App Permissions
- Open Settings: Tap the Settings app on your Android device.
- Navigate to Apps: Select Apps or Apps & Notifications (varies by device).
- Select the App: Tap the app you want to control.
- Manage Permissions: Tap Permissions to view options like Camera, Storage, or Location, then toggle them on or off.
- Location Options: Choose Allow only while using the app, Ask every time, Deny, or Allow all the time (if available).
- Alternative Path: Visit Settings > Privacy > Permission Manager to tweak permissions by category (e.g., Microphone).
Note: Steps might differ slightly based on your Android version or device brand (like Samsung or Google). Always review permissions to ensure apps access only what’s essential.
Conclusion
In most cases, many will discover they can skip the app entirely and still enjoy the same experiences through the web.
Remember, we may not have anything to hide, but everything to protect.
