AppXpose AppXpose
DOSSIER / TRACKERS

App trackers.

A tracker is not a virus. It is a library the developer added on purpose, and that is exactly why it is everywhere.

When an app needs crash reports, install attribution, analytics, or advertising, the developer does not build that. They add an SDK. Each SDK arrives as a package of compiled classes inside the APK, and each one comes with its own data appetite: device identifiers, coarse location, screen events, the list of other apps installed alongside it. A single app can carry a dozen of them without anything in the interface hinting at it.

They also nest. Bundling one advertising SDK can drag in an analytics SDK it depends on, which is why a naive count over class prefixes overstates what is actually there. Untangling that is most of the work: sub-packages of the same vendor collapse into one entry, and known transitive dependencies collapse into the SDK that pulled them in.

The posts below cover what individual SDKs collect, how tracker counts should and should not be read, and what we see when the same app is scanned across many real devices.

Everything filed under trackers

· Tracker-Free Apps

The Boring Apps Are the Worst Offenders. Here Are the Tracker-Free Alternatives Nobody Talks About

Flashlight, calculator, and QR scanner apps carry more trackers than social media. A category-by-category guide to real tracker-free alternatives on Android.

· Trackers

What a Tracker Actually Does With Your Data in the First 48 Hours

A tracker firing on your phone is just the start. Here's the real pipeline: identity stitching, RTB auctions, enrichment, and resale, step by step.

· App Trackers

How Many Trackers Is Normal for an App? The Number Depends on the Category, Not the App

Is 8 trackers a lot? Depends what the app does. Here's how tracker counts vary by category, why raw numbers mislead, and how to judge yours.

· Trackers

What Is a Tracker on Your Phone? It's Not an App, It's a Library You Never Saw

A tracker on your phone isn't a spy app, it's a code library called an SDK. Here's how five tracker types quietly link your data across every app you install.

· Instagram Alternatives

Instagram Alternatives That Don't Monetize Your Social Graph

Pixelfed, BeReal, and Glass handle your photos without auctioning behavioral data. Here's how they work and what they actually collect.

· Messaging Privacy

The messaging app exodus nobody saw coming

WhatsApp lost 25 million users in one week after a single policy change. Here's where they went and why it matters for your privacy.

· Trackers

15 Apps With the Most Hidden Trackers (Scanned and Verified)

We scanned thousands of Android apps for hidden trackers. Here are 15 apps with the highest tracker counts, all verified by APK bytecode analysis.

· App Safety

How to Check If an Android App Is Safe Before Installing

Before you install any Android app, here is how to check if it is safe: permissions, trackers, developer reputation, and what Google Play does not tell you.

· Trackers

How to Find Hidden Trackers in Your Android Apps

Most Android apps contain hidden tracker SDKs that Google Play never discloses. Here is how to find them, what they mean, and what to do next.

· Instagram Privacy

Instagram Collects 79 Percent More Data Than It Needs To Function

Instagram tracks 37 data types including browsing history and health data. Here's the math on why calling it spyware isn't hyperbolic.

· Trackers

What is a tracker in an app, and why should you care

A tracker is third-party code the developer bundled in. It reads device IDs, coarse location and your app list, with no prompt. Here is how to find them.

· App Audit

I scanned 47 apps on my phone. Here's what I found.

A full weekend audit of every app on a normal Android phone. 47 apps, 211 trackers, and a permission count that would make most people uncomfortable.

· Trackers

What trackers are actually hiding in your apps

We scanned 32 of the most-installed Android apps and counted every embedded tracker SDK. The average app hides 5 trackers. Some have over 12.

Common questions

Is every tracker bad? +

No, and treating them all the same makes the number useless. A crash reporter serves the user indirectly: fewer crashes. An advertising identifier SDK exists to follow a person across apps. Both are trackers by the technical definition, so the category of each one matters more than the raw count.

Why do different tools report different tracker counts for the same app? +

Mostly because of how sub-packages and dependencies are counted. If an advertising SDK bundles an analytics library, counting both inflates the number. Some tools also match on broad package prefixes, which sweeps in open-source libraries and framework code that are not trackers at all.

Other topics

Check your own apps.

The analysis runs on your device, against the bytecode of the packages you already have installed. No account, no sign-in.

GET IT ON Google Play