Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
Android’s hidden problems.
Google has an awkward Android problem that has just been highlighted. The AI space race between Google and Samsung and between Android and iPhone has exposed long-standing issues that need to be addressed, issues buried within Android’s core.
Google continues to narrow the gap to iPhone, with Android 15 and the forthcoming Android 16 bringing security and privacy upgrades. And while Samsung owners have endured a frustrating wait for their upgrade, this is now imminent and it seems Android 16 will be handled differently. But there’s one awkward black hole that remains, hidden tracking that’s impossible to stop. This is bad news for all Android users, but especially for Galaxy and Pixel users buying handsets with “on-device privacy” built in.
The issue is the old versus the new. You will have noticed that AI announcements from both Google and Samsung stress on-device, privacy-preserving processing when touting new features. Google’s latest scam detection “protects your privacy by processing everything on-device,” and even its controversial new photo scanning “is done on-device and all of the images or specific results and warnings are private to the user.”
Samsung — which pushed hybrid AI before Google — goes further, “Galaxy’s approach to AI personalization,” it says, “from the launch of Samsung’s first AI phone to our continuous innovation of on-device AI, is to never compromise on privacy.”
That’s the new. But then we come to the old. As I reported earlier this month, a study published by Trinity College, Dublin has exposed Google’s decision to track Android phones through “cookies, identifiers and other data that Google silently stores on Android handsets,” through the default apps that are pre-installed. This happens despite there being “no consent sought for storing any of this data and no opt out.”
There’s a legal dimension to this tracking, which the research team says has been exposed for the first time in their report. This, they say, is a “wake-up call” for data regulators to “start properly protecting” users of Android phones.
Google did respond on this legal point, telling me “the researcher acknowledges in the report that they are not legally qualified, and we do not agree with their legal analysis. User privacy is a top priority for Android and we are committed to complying with all applicable privacy laws and regulations.”
But on the substance of the tracking, the Trinity team says it “informed Google of our findings, and delayed publication to allow them to respond. They gave a brief response, stating that they would not comment on the legal aspects (they were not asked to comment on these). They did not point out any errors or misstatements (which they were asked to comment on). They did not respond to our question about whether they planned to make any changes to the cookies etc stored by their software.”
Google told me “this report identifies a number of Google technologies and tools that underpin how we bring helpful products and services to our users.” There is nothing to suggest that this on-device tracking is to be revisited given these concerns.
When you add to this the delayed deprecation of cookies in Chrome and the equally controversial resurrection of digital fingerprinting, you start to see a pattern. Despite the focus on on-device AI processing, the basics have not changed. It suggests we may be seeing an AI privacy push that’s more marketing than privacy related.
This leaves Samsung in a strange limbo land. It is pushing to catch iPhone, but it’s tied to Android. And that means these kind of legacy tracking issues impact all its users. At the same time, it cannot rush out security fixes or OS upgrades at the same pace as Pixel, because it does not control both its hardware and core software.
It would be good to see a thorough review of hidden tracking that takes place without consent or opt out — that means “silent” Android tracking and digital fingerprinting. It would be good to see default opt outs introduced across the board. Absent that, each of those on-device marketing messages may need an asterisk.
