I think it might be a good idea to pause updates on our Android devices, as horrible as it is for security just to prevent this from happening. My OEM has a lot of bloat (Facebook and other junk apps you can't uninstall, useless system services, etc) that mostly do nothing except provide some functionality I don't use along with analytics every minute so they are uninstalled.

"Disabling" an app does not do that much, the OS can re enable it with an update or prevent you from disabling it.

I doubt there is true full privacy on a phone anymore with a stock ROM.

▲

kotaKat 5 hours ago | parent | next [-]

Every single reboot on my lower end Motorola phone, they have decided it fit to re-enable com.glance.lockscreenM every single boot and on every single update.

It's horrible. I don't think I can trust them to produce a Graphene phone at all, really, despite all of everyone's assurances.

	▲	createful 4 hours ago \| parent \| next [-]
		At least you can disable it; on some phones (especially Chinese phones) you cannot do anything to the system services, they intercept all app requests, essentially what Google did but with their system. The only recommendation I can give you is to look into Hail (device-owner app that can "freeze" apps, a "lower level" form of disabling, see https://f-droid.org/en/packages/com.aistra.hail/) which will mean even if the app gets reinstalled on system update, the device owner app will prevent it from running. I think GrapheneOS might have issues in the future considering that Android will be getting more and more locked down. People say GrapheneOS is the better OS when it just is hardened Android; it is doomed purely because of the Android base. Perhaps a Linux based edition of GrapheneOS would do well, even if it will not have a lot of app compatibility. There's only so much patching you have to do to Android before it just becomes more work than good.
	▲	Markoff 4 hours ago \| parent \| prev [-]
		just use Shizuku + Canta to remove it

▲

Godsend69 5 hours ago | parent | prev [-]

[dead]

▲

createful 4 hours ago | parent | next [-]

I use Rethink DNS for this, see (https://github.com/celzero/rethink-app).

Despite it's name it can also block IPs and specific apps from connecting to specific servers. I use it to block all manufacturer and OEM related apps that I cannot uninstall through adb or disable. Very handy for blocking constant Chinese phone telemetry pings, as well as additional network level blocklists for ads (Pi-hole like), completely locally so you can trust it unlike a shady VPN.

I checked out your link; it seems to be a mailing list for a hosts file for telemetry? Why is there no option to just see the file without giving in my email? Not the most private.

	▲	Godsend69 41 minutes ago \| parent [-]
		You're right, our Telemetry Blocklist is a mailing list for a hosts file. I can offer you the list directly, no email required. Just visit https://raw.githubusercontent.com/lightinthedarksolutions/te... and copy the file to your device. This will block common telemetry servers without any external dependencies.

▲

Saris 4 hours ago | parent | prev [-]

I don't this is doing a lot, it only has 18 domains listed and is missing all tracking domains from samsung, motorola, apple, android, etc..