Security News > 2020 > January > Privacy activists beg Google to ban un-removable bloatware from Android
For much of Android's existence, Google has adopted a relatively hands-off approach that lets manufacturers ship units with pre-installed bloatware which, in many cases, cannot be easily removed.
"Android Partners - who use the Android trademark and branding - are manufacturing devices that contain pre-installed apps that cannot be deleted, which can leave users vulnerable to their data being collected, shared and exposed without their knowledge or consent," the letter states.
The concern surrounding bloatware hinges on the fact they exist without the standard Android security model, with pre-installed apps able to access the microphone, camera, and location by default.
Presently, apps downloaded from the standard Google Play store require the user to "Opt in" to access the more sensitive parts of the phone.
The open letter also cites an academic study published in May 2019 that found 91 per cent of all pre-installed apps aren't present on the Google Play Store - suggesting they may have harmful behaviours that would preclude them from being listed on the standard Android app store.
News URL
Related news
- Google Blocks Unsafe Android App Sideloading in India for Improved Fraud Protection (source)
- Google brings better bricking to Androids, to curtail crims (source)
- How to enable Safe Browsing in Google Chrome on Android (source)
- Google on scaling differential privacy across nearly three billion devices (source)
- Google Warns of Actively Exploited CVE-2024-43093 Vulnerability in Android System (source)
- Google patches actively exploited Android vulnerability (CVE-2024-43093) (source)
- Google fixes two Android zero-days used in targeted attacks (source)
- Google's mysterious 'search.app' links leave Android users concerned (source)
- Week in review: Zero-click flaw in Synology NAS devices, Google fixes exploited Android vulnerability (source)
- Google launches on-device AI to alert Android users of scam calls in real-time (source)