Android Q's new privacy features include user control over app access to device location, new limits on access to files in shared external storage, restrictions on launching activities, and restrictions on access to the device's hardware and sensors.
While the EFF thinks that is laudable, they are all undermined by Android's continued support of a feature that "allows third-party advertisers, including Google itself, to track users across apps", Bennett Cyphers, engineer for the EFF, wrote in a post. "Android still doesn't let users control their apps' access to the Internet, basic permission that would address a wide range of privacy concerns."
Cyphers said that while Android Q has new restrictions on non-resettable device identifies, it will allow unrestricted access for its tracking identifier [called "advertising ID"]...
"Facebook and other targeting companies allow businesses to upload lists of ad IDs that they have collected to target those users on other platforms. On Android, there is no way for the user to control which apps can access the ID, and no way to turn it off. While we support Google taking steps to protect other hardware identifiers from unnecessary access, its continued support of the advertising ID -- a "feature" designed solely to support tracking -- undercuts the company's public commitment to privacy."
Cypher noted cryptically that while Apple's iOS has similar identifiers for advertisers that contradict with its privacy campaign, it does enable users to turn off the tracking.
Android Q also ships with an "opt-out of ad personalisation" checkbox where users can indicate that they don't want Google's identifier to track them, Cyphers reports -- but "the checkbox doesn't affect the ad ID in any way.
"It only encodes the user's 'preference', so that when an app asks Android whether a user wants to be tracked, the operating system can reply 'no, actually they don't.' Google's terms tell developers to respect this setting, but Android provides no technical safeguards to enforce this policy."
