Abstract: Android has come a long way in enhancing its security features and building out privacy controls for users, including with its Android 12 innovations. But as Apple continues to crack down on ad-tracking in an iOS 14 feature, the bar is higher than ever—and in ways that increasingly complicate Google’s balance between the privacy its users deserve and the targeted advertising that drives its business.
Android 12 Lets You See What Your Apps Are Getting IntoA new privacy dashboard and “app hibernation” are coming to Google’s mobile operating system.Google’s new privacy dashboard breaks down app activity by category— like “Location,” “Camera,” and “Microphone”—and then shows you which apps accessed those mechanisms, and for how long.Photograph: Getty Images
“With this release we want to keep narrowing down the scope of what data apps get,“ says Android group product manager Charmaine D’Silva. „It’s taken some time to get it right, but the main focus of this release is giving a deeper level of transparency to users.”Android 12 includes a “Privacy Dashboard” where you can see which apps used potentially sensitive permissions in the past 24 hours. The dashboard breaks down app activity by category— like “Location,” “Camera,” and “Microphone”—and then shows you which apps accessed those mechanisms. Google will also be asking developers to provide additional information on what they were using the access for at that particular moment. And you can adjust or revoke app permissions through the dashboard. It gives more insight than you might be used to into how apps work in the background, especially because it includes not only that an app accessed, say, location data or your microphone, but when and for how long.
“We give permissions to apps so they can do awesome things; it’s not at all unusual to see entries on the dashboard,” D’Silva says. “But is anything on the list surprising? Maybe you gave an app access awhile ago and don’t remember why exactly. We wanted to give users a complete picture.”
Android 12 also introduces a green indicator light in the top right corner of any screen that goes on if your smartphone’s microphone or camera are in use. Apple’s iOS 14 added a similar feature last year. In Android, though, you can pull down on the light to see more details about which app is using the mic or camera and why, and there’s easy access from there to revoke permission if you want to.
Google is also adding two controls in Android’s “Quick Settings” to completely turn off camera access or microphone access for all apps. Pressing one or both of the buttons is the software equivalent of putting a sticker over your webcam. It doesn’t revoke permissions to an app; it simply kills the feed from the sensor. Most importantly, the operating system itself runs the camera and microphone off switches, which means apps don’t know when they’re enabled. They just see blank feeds coming from the mic and camera if they try to access them. Otherwise, malicious apps could take note of when your camera and microphone are off, and look for other ways to track potentially sensitive activity.
When it comes to sharing permission information with apps, Android already offers the option to share location data as a one-off, rather than committing to share it anytime an app wants. D’Silva says the option to do these one-time data shares has been popular with users. Android 12 takes things a step farther by adding the ability to share only an approximate position with an app. This way you don’t need to tell a weather app where you live or work in order to get the forecast in your neighborhood. Apple’s mobile operating system debuted a similar feature last year in iOS 14. As with sharing your precise location, Android 12 provides three options for sharing your approximate device location with apps: “While using the app,” “Only this time,” or “Don’t allow.”
The Android team is continuing to roll out its “permission auto-reset” program, first announced for Android 11. The idea is to reset permissions on apps you haven’t used for an extended period of time, so they don’t hold on to access they don’t need. If you want to reinstate their permissions later, you always can. In the last few weeks alone, D’Silva says that 8.5 million app permissions have reset. Android 12 is also expanding on this idea with a new feature called “App Hibernation.” In addition to removing permissions from apps you haven’t used in a long time, this extra step will fully stop apps from running in the background, remove all the temporary and optimization files an app is storing on your device, and remove the app’s ability to send notifications. If you tap on a hibernating app, it will come back to life and reestablish its presence as you use it. But the app’s permissions aren’t automatically reinstated. Hibernation is simply a way to keep apps around on your phone without letting them lurk unchecked.To allow more apps to deploy local machine learning features like Android’s Live Caption accessibility function, Now Playing music identification tool, and Smart Reply for chat, Android 12 includes in a new feature called Private Compute Core. The idea is to establish an isolated environment, or a sandbox, in which AI systems can run without direct network access and completely separated from other operating system functions. Only a set group of application programming interfaces can interact with the Private Compute Core. While separating these systems in software doesn’t guarantee perfect security, it makes it much harder for a rogue app or malware to gain remote access to local machine learning features or the personal data powering them. And D’Silva emphasizes that Private Compute Core is fully open source, so developers can vet the setup for flaws.Android has come a long way in enhancing its security features and building out privacy controls for users, including with its Android 12 innovations. But as Apple continues to crack down on ad-tracking in an iOS 14 feature, the bar is higher than ever—and in ways that increasingly complicate Google’s balance between the privacy its users deserve and the targeted advertising that drives its business.
Google: Marketers assign your Google device an ID and then monitor your web and in-app behavior across different platforms to generate composite profiles of demographic information, purchasing habits, and life events
The New iOS Update Lets You Stop Ads From Tracking You—So Do It

If you’re sick of opaque ad tracking and don’t feel like you have a handle on it, a new iOS feature promises to give you back some control. With the release of Apple’s iOS 14.5 on Monday, all of your apps will have to ask in a pop-up: Do you want to allow this app to track your activity across other companies‘ apps and websites? For once, your answer can be no.
A lot of the biggest data privacy crises of the past few years have come not from breaches but from all the opaque policies around how companies share user data and track those users across services for targeted advertising. Marketers assign your device an ID and then monitor your web and in-app behavior across different platforms to generate composite profiles of demographic information, purchasing habits, and life events. Apple has already taken a strong stand to disrupt ad tracking in its Safari browser; this iOS update brings the showdown to mobile. But while the step may seem like a no-brainer to iOS users, it’s been deeply controversial with companies built on ad revenue, including and especially Facebook.“This is a significant and impactful move,” says Jason Kint, CEO of the digital publishing trade organization Digital Content Next. (WIRED parent company Condé Nast is a member.) “The digital advertising business has been mostly built off of micro-targeting audiences. Facebook, as an example, has code embedded in millions of apps to collect data to target audiences wherever it wants as promptly as possible—and this cuts that off.”iOS already gave its users the option to turn off ad ID sharing completely, essentially zeroing out the unique identifier on your phone, known as IDFA, that iOS gives developers for in-app and cross-service tracking. iOS 14.5’s new requirements, though, compel each app to put the question to users individually through Apple’s AppTrackingTransparency framework, so you have more granular control. This allows you to grant the privilege to certain apps if, for example, you would rather see tailored ads on a particular service. But it also will simply expose how many apps participate in cross-service ad tracking, including some you may not have suspected.“We believe tracking should always be transparent and under your control,” Katie Skinner, an Apple user privacy software manager, said at Apple’s Worldwide Developers Conference last June. „So moving forward, App Store policy will require apps to ask before tracking you across apps and websites owned by other companies.“

After you install iOS 14.5, you’ll see this pop-up when you open any app that tracks you across the web.
Photograph: AppleThe new iOS pop-ups can include a short message about why a developer wants users to enable tracking, essentially a pitch of what the benefits might be. And the popups won’t appear if a developer tracks you across its own services, like Facebook following you from its main platform across Messenger and Instagram. You probably assume that platforms owned by the same parent company would (or at least could) share data; the larger issue Apple wants to address is tracking across services that you wouldn’t intuitively think have any type of relationship.
If you notice Facebook popping up frequently in examples about the impact of Apple’s tracking transparency initiative, it’s because the company has been vocal, and aggressive, in its objections. Facebook chief financial officer Dave Wehner has mentioned privacy initiatives around IDFA as a concern in many company earnings calls since late 2019. And in December, Facebook ran a series of full-page newspaper ads with the line, “We’re standing up to Apple for small businesses everywhere.” A companion website for Facebook’s campaign says, “Apple’s latest update threatens the personalized ads that millions of small businesses rely on to find and reach customers.”
Facebook also disputes Apple’s characterization that this type of data sharing should really be called “tracking” at all. Facebook refers to it as “what Apple defines as ‘tracking’” in its support documents for developers and businesses.Apple CEO Tim Cook responded to the claims in December, tweeting, “We believe users should have the choice over the data that is being collected about them and how it’s used. Facebook can continue to track users across apps and websites as before. App Tracking Transparency in iOS 14 will just require that they ask for your permission first.”Announced in June 2020, Apple originally planned to start requiring developers to support ATT for the iOS 14 launch in September 2020. The company went ahead with rolling out another iOS 14 addition, its app “privacy labels,” in December 2020. But amid industry backlash, the company delayed the ATT requirement “to give developers time to make necessary changes.““This has been much needed. I wish it didn’t get delayed,” says Will Strafach, a longtime iOS security researcher and creator of the Guardian Firewall app. “Nonetheless it’s a fantastic step toward adding some level of plain-English user awareness about what apps are doing.”
For now, though, just download iOS 14.5 if you have an iPhone, and get ready to start tapping “Ask App not to Track” whenever you see it. Especially in places you never saw coming.