Notifications and Privacy

Hey Guys.
Below is a post I created to give some information to our members regarding using notifications with your apps and how it could affect your privacy.

Notifications can be used to track you. Not all do, but I believe the majority do. It’s a surprisingly pervasive form of tracking. What do I mean by pervasive? Tracking that’s widespread, difficult to detect, and builds a remarkably detailed profile of you.

How Notifications Enable Tracking:

Notification Tokens: When you install an app, the app provider (and often, third-party tracking companies) receives a unique “notification token” from your device. This token is essentially a digital address that allows them to send notifications to your device, even if the app isn’t actively running.

"Silent" Notifications: Apps can send notifications that don’t even display on your screen. These “silent” notifications are designed to be invisible to you, but they still register on your device and can be used for tracking.

Tracking Data: Notifications can contain data about:
When you open an app: This tells the tracker when you’re using the app.
When you don’t open an app: This is also valuable data, indicating when you’re not engaging with a particular service.

Device Information: The notification token is linked to your device’s unique identifier, allowing trackers to associate your activity with your specific device.

Location: Some notifications can include approximate location data, even if you haven’t explicitly granted the app location permissions.

Cross-App Tracking: The real power of notification tracking comes from combining data from multiple apps. Trackers can build a detailed profile of your interests, habits, and movements by correlating data from different sources.

Levels of Tracking:

Basic Tracking (App-Level): The app developer uses notifications to understand how you’re using their app. This is relatively benign, but still a form of data collection.

Cross-App Tracking (Advertising Networks): Advertising networks (like Facebook, Google, and others) use notifications to track your activity across multiple apps. This allows them to build a detailed profile of your interests and target you with personalized ads.

Attribution Tracking: App developers use attribution tracking to determine which ads or marketing campaigns led to an app install. This involves using notifications to track your activity after you click on an ad.

Advanced Tracking (Data Brokers): Data brokers collect and combine data from various sources, including notification tracking, to create comprehensive profiles of individuals. This data can be used for marketing, credit scoring, and other purposes.

What Can You Do to Protect Yourself?

Limit App Permissions: Be selective about the permissions you grant to apps. Only grant permissions that are necessary for the app to function.

Disable Notifications: Turn off notifications for apps that you don’t need to receive alerts from.

Use a Privacy-Focused Operating System: These prioritize privacy and offer features to limit tracking.

Use a Privacy-Focused Browser: Use a browser like iodeOS Broser, Brave, Firefox Focus, or DuckDuckGo Privacy Browser, which block trackers and protect your privacy.

Use a VPN: A VPN can mask your IP address and encrypt your internet traffic, making it more difficult to track your online activity.

Use a Tracker Blocker: Install a tracker blocker extension in your browser to block tracking scripts and prevent websites from collecting your data. (uBlock Origin is a good choice)

Review Privacy Policies: Read the privacy policies of the apps and websites you use to understand how they collect and use your data.

Limit Ad Tracking: Enable the “Limit Ad Tracking” setting on your device to reduce the amount of data that advertisers can collect about you. (Settings > Privacy > Tracking)

Opt-Out of Data Collection: Some companies allow you to opt-out of data collection. Check their privacy policies for instructions.

4 Likes

The crazy part is that a valuable PASSIVE feature like notifications was built to provide data ACTIVELY and in a way that you can never know what happens in the background, it’s similar to the emails that you would assume safe to just read them but when you open them they start downloading things, running JavaScript and notifying the sender what kind of underwear you are wearing. The other day I discovered that some apps had permission to scan for WiFi devices even when the WiFi is off and I don’t even remember granting them such a permission.

3 Likes