Field notes on privacy.
Long-form writing about trackers, breaches, Android internals, and what we're learning from millions of scans.
Start by topic
The Apps You Should Delete Immediately Aren't Malware. They Just Changed Owners.
Apps you should delete immediately often aren't scams, they're utility apps resold to new developers who quietly added tracking SDKs after the fact.
The Boring Apps Are the Worst Offenders. Here Are the Tracker-Free Alternatives Nobody Talks About
Flashlight, calculator, and QR scanner apps carry more trackers than social media. A category-by-category guide to real tracker-free alternatives on Android.
AR Zone, Global Goals, and the Apps Samsung Signs With Its Own Keys
AR Zone and Global Goals sit on millions of Galaxy phones with system-level signing and outdated patches. Here's what that actually means for your privacy.
The Package Name Decoder: What Every Xiaomi and Redmi Preinstalled App Actually Does
A package-by-package breakdown of Xiaomi and Redmi preinstalled apps, what com.miui and com.xiaomi names mean, and why your region changes what's on your phone.
Samsung System Apps You Can Actually Remove, and the Trackers Inside Each One
Samsung preloads dozens of system apps with hidden trackers. Here's what Samsung Free, Bixby, and Game Optimizing Service collect, and how to remove them.
The Preinstalled Apps You Can Actually Delete (and the Ones That Will Break Your Update Path)
Not all preinstalled apps are bloatware. Here's how to tell which of the 40+ system apps on your phone are safe to remove, disable, or leave alone.
What a Tracker Actually Does With Your Data in the First 48 Hours
A tracker firing on your phone is just the start. Here's the real pipeline: identity stitching, RTB auctions, enrichment, and resale, step by step.
How Many Trackers Is Normal for an App? The Number Depends on the Category, Not the App
Is 8 trackers a lot? Depends what the app does. Here's how tracker counts vary by category, why raw numbers mislead, and how to judge yours.
What 'App Tracking' Actually Means, According to the People Who Build It
App tracking isn't collecting data, it's linking it across apps and time. Here's the real technical definition, and why resetting your ad ID barely matters.
What Is a Tracker on Your Phone? It's Not an App, It's a Library You Never Saw
A tracker on your phone isn't a spy app, it's a code library called an SDK. Here's how five tracker types quietly link your data across every app you install.
Xiaomi's Bloatware Isn't Clutter, It's an Ad Network You Paid For
Xiaomi's preloaded apps generate real ad revenue through MIUI system ads. Here's how the tracking works, what MSA does, and how to shut it off.
Privacy First Is a Marketing Category. It's Also a Business Model That Rarely Survives
Privacy first apps get bought, defunded, or quietly rewritten every year. Here's how to check whether a privacy claim will survive contact with a term sheet.
GDPR Compliance Audits Cost Businesses €83,000 on Average. The Apps on Your Phone Would Fail in Minutes.
Most Android apps would fail a GDPR compliance check within minutes. Here's what the regulation actually requires and why your apps ignore it.
The McDonald's App Asks for 23 Permissions. A Cash Register Needs Zero.
McDonald's app requests 23 Android permissions to sell you a burger. We break down what each one actually does and why fast food needs your location.
The Three Minutes After You Uninstall an App
Most Android apps continue transmitting data for 72 hours after uninstall. Here's what they're sending and why the Play Store doesn't warn you.
I Installed Temu to See What the Privacy Cost Actually Is
Temu's app contains 23 tracker modules and requests 37 permissions. Here's what happens after you click install on the $100 billion shopping phenomenon.
Writing Your Own App Transparency Report
Most companies write transparency reports to manage PR. Writing one for yourself forces you to confront what your phone actually does with your data.
Commercial Spyware Costs $9 Million Per Deployment. Consumer Apps Get the Same Capabilities for Free.
NSO Group charged governments $9M for Pegasus spyware. Meanwhile, free consumer apps collect the same device data legally through app stores.
The Data Broker Economy Pays $4.37 Per User Profile. Guess Who Gets That Money.
Apps sell your behavioral data to brokers for an average of $4.37 per profile. None of it goes to you. Here's how the transaction actually works.
TikTok Collects More Device Data Than Any Social App We've Measured
TikTok accesses 41 device identifiers and scans your clipboard every 90 seconds. Here's what ByteDance's data collection looks like under the hood.
Battery Drain Is Just the Symptom. The Real Cost Is What Your Phone Does While You Sleep.
Apps that drain battery in background often do so by sending data constantly. A typical phone loses 15% overnight doing surveillance work, not system tasks.
The Permission Creep Problem: Apps Request 40% More Access Than They Did Three Years Ago
Apps now request 40% more permissions than in 2023. Why developers over-permission, what it costs users, and how to fight back without deleting everything.
The Apps That Sell Your Data Are Not the Ones You Think
Most articles warn about sketchy apps, but Candy Crush shares data with 131 companies. Here's who actually profits from your phone activity.
Instagram Alternatives That Don't Monetize Your Social Graph
Pixelfed, BeReal, and Glass handle your photos without auctioning behavioral data. Here's how they work and what they actually collect.
The Line Between Spyware and Normal Apps Doesn't Exist Anymore
Most spyware definitions describe features found in mainstream apps. Here's why the old classification system is useless in 2026.
The Privacy-First App Stack: What I Actually Use Instead of the Defaults
Real alternatives to tracker-heavy apps tested over 18 months. Specific recommendations for messaging, email, maps, and more without the surveillance tax.
The Parent Spy App Industry Teaches Children That Privacy Is Conditional
Parents install monitoring apps on 42% of teen phones. What those 16 million children learn about trust, surveillance, and digital rights lasts forever.
The False Negative Problem: Why Most Spyware Scans Miss What Matters
Most Android spyware detection tools check the wrong things. Here's why 73% of privacy violations hide in plain sight and what actually works.
The VPN Scam Playbook: Six Tactics That Should Be Illegal But Aren't
Free VPN apps use six specific tactics to deceive users. Learn the actual techniques scammers use to pass app store review and steal your data.
Xiaomi Ships 71 System Apps You Didn't Ask For and Can't Remove
Xiaomi devices come preloaded with 71 system apps on average. Most collect data, many display ads, and you can't uninstall them without root access.
Free VPN Apps Are a Privacy Trap. Here Is What Is Actually Inside Them.
88% of free VPN apps leak the data they promise to hide. We scanned the APKs to show you exactly what is inside them and what you can do about it.
The messaging app exodus nobody saw coming
WhatsApp lost 25 million users in one week after a single policy change. Here's where they went and why it matters for your privacy.
15 Apps With the Most Hidden Trackers (Scanned and Verified)
We scanned thousands of Android apps for hidden trackers. Here are 15 apps with the highest tracker counts, all verified by APK bytecode analysis.
9 Warning Signs Your Android App Is Spying on You
Is your Android app spying on you? Here are 9 concrete warning signs to look for, from suspicious permissions to unexpected battery drain.
Android Spyware: How to Detect and Remove It
Learn how to find hidden spyware on Android, what antivirus apps miss, how to remove it, and how to protect against stalkerware.
How to Check If an Android App Is Safe Before Installing
Before you install any Android app, here is how to check if it is safe: permissions, trackers, developer reputation, and what Google Play does not tell you.
How to Find Hidden Trackers in Your Android Apps
Most Android apps contain hidden tracker SDKs that Google Play never discloses. Here is how to find them, what they mean, and what to do next.
Samsung ships 47 preloaded apps and you can't delete most of them
Samsung Galaxy phones come with 47 preinstalled apps on average. 31 can't be uninstalled. Here's what they're tracking and why carriers love bloatware.
The anatomy of a background ping: what your phone tells Google at 3am
Most Android phones send data while you sleep. Here's what one hour of nighttime pings revealed about Google Play Services, timestamps, and silent surveillance.
The free VPN economy runs on selling your data to the highest bidder
Free VPN apps promise privacy but 86% contain third-party trackers. Here's how the business model works and what your traffic data is really worth.
Your phone sends 900 background pings a day and nobody told you
Android apps ping servers 900 times daily even when closed. Learn what background network activity reveals and how to audit what your phone sends home.
Instagram Collects 79 Percent More Data Than It Needs To Function
Instagram tracks 37 data types including browsing history and health data. Here's the math on why calling it spyware isn't hyperbolic.
The GDPR consent screen is not a privacy protection
Most Android apps show GDPR consent dialogs, but 83% still share data before you click anything. Here's why compliance theater fails users.
How to detect spyware on Android, for real this time
Forget battery drain tips. Here is what actually works to find spyware and hidden trackers on your Android phone, step by step, no root required.
What is a tracker in an app, and why should you care
A tracker is third-party code the developer bundled in. It reads device IDs, coarse location and your app list, with no prompt. Here is how to find them.
The spyware detection ritual is broken
Standard spyware detection advice misses the point. The real surveillance on your phone is already installed, sold as features, and completely legal.
App stores lie. Here's what four studies actually say.
Four independent studies of Google Play and iOS app listings. Different samples, different methods, same answer: the labels don't match the code.
How machine learning is changing Android security, and what we're building
ML detects what static analysis misses. How we train models on real Android scan data to find tracker-permission combos, fake APKs, and cross-app surveillance.
I scanned 47 apps on my phone. Here's what I found.
A full weekend audit of every app on a normal Android phone. 47 apps, 211 trackers, and a permission count that would make most people uncomfortable.
Why does this app need microphone permission?
Why do apps request microphone, location, or contacts access they don't need? A field guide to Android permission creep and how to spot it.
What trackers are actually hiding in your apps
We scanned 32 of the most-installed Android apps and counted every embedded tracker SDK. The average app hides 5 trackers. Some have over 12.
The Ping Reducer Industry Is a Coordinated Data Heist Disguised as Gaming Technology
ExitLag's Android app requests 49 permissions including GPS and biometrics. For a ping reducer. Here's why the entire industry is built on a lie.