Per one tech forum this week: “Google has quietly installed an app on all Android devices called ‘Android System SafetyCore’. It claims to be a ‘security’ application, but whilst running in the background, it collects call logs, contacts, location, your microphone, and much more making this application ‘spyware’ and a HUGE privacy concern. It is strongly advised to uninstall this program if you can. To do this, navigate to 'Settings’ > 'Apps’, then delete the application.”
You must log in or register to comment.
Thanks for bringing this up, first I’ve heard of it. Not present on my GrapheneOS pixel, present on stock.
I suppose I should encourage pixel owners to switch from stock to graphene, I know which decide I rather spend time using. GrapheneOS one of course.
I’ve got a Pixel 8 Pro and I’m currently using the stock OS. Anything in particular that you miss with Graphene OS?
I switched from a Samsung to a Pixel a couple years ago. I instantly installed GrapheneOS and have loved it ever since. It generally works perfectly normally with the huge background benefit of security and privacy. The only issues I have had is one of my banking apps doesn’t work (but the others work fine) and lack of RCS (but I’m sure it’s coming). In short, highly highly recommend. I will be sticking with GOS for the long term!
I’ve looked into it.l briefly. Did you have any issues switching? I’m concerned about how some apps I need would function.
I did a fair amount of research before the switch to find alternatives to Google services, some I’ve replaced, others I felt were too much of a hassle for my phone usage.
I’ve kept my original pixel stock, the hardest part about switching this one over was plugging it in and following the instructions.
I’m hoping to get rid of my stock OS pixel soon, it would appear my bank hasn’t blocked it’s app on Graphene, unlike Uber.
For the rest I’ll either buy a cheap af shitbox to use purely for banking and Uber (if it comes to that).
If you’ve any other questions I’m happy to help find then answers with you, feel free to DM me.
Uber works on GrapheneOS
I’ll give it another try then! Last attempt it wouldn’t open.
I switched from a Samsung to a Pixel a couple years ago. I instantly installed GrapheneOS and have loved it ever since. It generally works perfectly normally with the huge background benefit of security and privacy. The only issues I have had is one of my banking apps doesn’t work (but the others work fine) and lack of RCS (but I’m sure it’s coming). In short, highly highly recommend. I will be sticking with GOS for the long term!
I’m traumatized by trying to use banking apps on lineage… don’t think I’ll risk it until I get a backup phone
People don’t seem to understand the risks presented by normalizing client-side scanning on closed source devices. Think about how image recognition works. It scans image content locally and matches to keywords or tags, describing the person, objects, emotions, and other characteristics. Even the rudimentary open-source model on an immich deployment on a Raspberry Pi can process thousands of images and make all the contents searchable with alarming speed and accuracy.
So once similar image analysis is done on a phone locally, and pre-encryption, it is trivial for Apple or Google to use that for whatever purposes their use terms allow. Forget the iCloud encryption backdoor. The big tech players can already scan content on your device pre-encryption.
And just because someone does a traffic analysis of the process itself (safety core or mediaanalysisd or whatever) and shows it doesn’t directly phone home, doesn’t mean it is safe. The entire OS is closed source, and it needs only to backchannel small amounts of data in order to fuck you over.
Remember the original justification for clientside scanning from Apple was “detecting CSAM”. Well they backed away from that line of thinking but they kept all the client side scanning in iOS and Mac OS. It would be trivial for them to flag many other types of content and furnish that data to governments or third parties.
Not on mine, it doesn’t. I don’t use the Play Store. I don’t have Google Play Services. And I don’t have Google Apps installed. And I’m running Lineage OS. So, fuck you Google.
There’s one in every thread.
“i just needed to pop in here and mention that the terrible/wrong/evil thing in the post doesn’t affect me at all, like it does for you suckers ROFLMFAO…but also: LOL”
And they never say it in a helpful way, either. It’s always done in a smug way.
I can suffer a little smugness if it brings in to the fold atleast one dude who’s never heard of LineageOS
I’ve been considering putting graphene on my pixel for a month or so now, I’m just in tech and have a shit load of MFA entries in multiple apps that don’t sync anywhere, and I don’t have the energy to redo all that shit at work when I barely have enough time to do my normal shit…
I used to live rooting and throwing custom rooms on my phone, but I’ve been out of that for a decade and don’t have a usable spare device to test/use as a backup.
I understand, I was in exactly the same position. Then my battery swelled and wouldn’t hold a charge at all, so I couldn’t restore anything anyway, and my last backup was inaccessible (I know I know, test your backups, but like I started this post with I’m in the same boat of all work and no time for me).
Losing everything was remarkably freeing. Just switch all your 2FA to Aegis as has been suggested, and save anything you want to back up over the wire, then take the plunge. You won’t lose everything like I had to, and you won’t regret the switch 😊
You can’t export your MFA? Aegis for example allows this.
Aegis is amazing for standard TOTP (6 digit code that changes every 30 minutes), but there are also proprietary OTP that require own apps and usually do not support export and would require to set it up from 0. Microsoft for example have push notifications that I love and prefer over TOTP, but for recovery purposes I have TOTP added in Aegis as well so if I ever loose MS Authenticator data, I will not be locked out.
Google photos has been “searchable by name” for years now. Tell it the name of a face in one photo and it can go search (pretty successfully) through all your photos for other photos containing that person. And, of course, once told, it never forgets.
Is it still a service when you are the product? Or, are you being served? https://en.wikipedia.org/wiki/To_Serve_Man_(The_Twilight_Zone)
Well then I hope they like seeing my butthole.
My older brother swipes through your phone’s photos without asking, so I put some colonoscopy pictures in there. He hasn’t tried to look at photos on my phone since.
Oh Google what have you done to yourself.
Interestingly I don’t have it on my stock samsung phone. I haven’t updated it since oneui 6. Is safetycore installed by update or by GMS?
Hope they like all my dick pics
Don’t worry they won’t!
/Burn
laughs in GrapheneOS
The countdown to Android’s slow and painful death is already ticking for a while.
It has become over-engineered and no longer appealing from a developer’s viewpoint.
I still write code for Android because my customers need it - will be needing for a while - but I’ve stopped writng code for Apple’s i-things and I research alternatives for Android. Rolling my own environment with FOSS components on top of Raspbian looks feasible already. On robots and automation, I already use it.
What’s over engineered about it?
In my experience, the API has iteratively made it ever harder for applications to automatically perform previously easy jobs, and jobs which are trivial under ordinary Linux (e.g. become an access point, set the SSID, set the IP address, set the PSK, start a VPN connection, go into monitor / inject mode, access an USB device, write files to a directory of your choice, install an APK). Now there’s a literal thicket of API calls and declarations to make, before you can do some of these things (and some are forever gone).
The obvious reason is that Google tries to protect a billion inexperienced people from scammers and malware.
But it kills the ability to do non-standard things, and the concept of your device being your own.
And a big problem is that so many apps rely on advertising for its income stream. Spying a little has been legitimized and turned into a business under Android. To maintain control, the operating system then has to be restrictive of apps. Which pisses off developers who have a trusting relationship with their customer and want their apps to have freedom to operate.
I suppose that’s all true, I’d say more “following apples lead on locking things down” than over engineered, but 🍅🍅.
I find myself avoiding the whole root business, I do want my mobile device to be fairly locked down. But I also use alternative OSs and app stores to avoid 90% of the garbage (stuff I can’t avoid I put in work profile, like I still need google maps).
It works for me, but on the front of this complexity driving away devs I don’t really see a viable alternative. Base Linux isn’t secure enough for what we put on these little computers. I mean you’ve still got tons of influential people arguing you shouldn’t use secureboot or a tpm as if leaving your whole computer unsecured is better than the indignity of using a non-free bios.
More information: It’s been rolling out to Android 9+ users since November 2024 as a high priority update. Some users are reporting it installs when on battery and off wifi, unlike most apps.
App description on Play store: SafetyCore is a Google system service for Android 9+ devices. It provides the underlying technology for features like the upcoming Sensitive Content Warnings feature in Google Messages that helps users protect themselves when receiving potentially unwanted content. While SafetyCore started rolling out last year, the Sensitive Content Warnings feature in Google Messages is a separate, optional feature and will begin its gradual rollout in 2025. The processing for the Sensitive Content Warnings feature is done on-device and all of the images or specific results and warnings are private to the user.
Description by google Sensitive Content Warnings is an optional feature that blurs images that may contain nudity before viewing, and then prompts with a “speed bump” that contains help-finding resources and options, including to view the content. When the feature is enabled, and an image that may contain nudity is about to be sent or forwarded, it also provides a speed bump to remind users of the risks of sending nude imagery and preventing accidental shares. - https://9to5google.com/android-safetycore-app-what-is-it/
So looks like something that sends pictures from your messages (at least initially) to Google for an AI to check whether they’re “sensitive”. The app is 44mb, so too small to contain a useful ai and I don’t think this could happen on-phone, so it must require sending your on-phone data to Google?
I guess the app then downloads the required models
Seriously…. Why do people continue to buy their products? They’re seemingly one of the most invasive security risks one could be involved with.
Most people don’t really know what that actually means, and they don’t feel they have anything to hide from some nebulous corporate entity.
why, what do you recommend?
I mean you have just disclaime the whole android ecosystem, and the only other alternative is Apple, which is questionable if it’s better.
and this would have even applied to my fairphone!
would have, if I didn’t get rid of google services the day I got it.I don’t have to recommend anything just because I’m asking why people are buying spyware tech.
Just like I may not know the proper way to safely jump out of an airplane, but I do know a parachute is involved.
A person asking why people do a thing that seems stupid isn’t obligated to solve the problem.
Then I guess the better question is what do you use?
Wouldn’t it be a given that I don’t have an android phone?
That’s what you don’t use, which wasn’t what they asked, right?
I just realized the network error made me doubly post my comment, I’ve deleted the other copy
No worries. Happens to all of us.
I didn’t see it anywhere on my phone but ill look into it more after work. Thanks for the heads up.
Per one tech forum this week
Stop spreading misinformation.
And what exactly does that have to do with GrapheneOS?
Have you even read the article you posted? It mentions these posts by GrapheneOS
Please, read the links. They are the security and privacy experts when it comes to Android. That’s their explanation of what this Android System SafetyCore actually is.
So is this really just a local AI model? Or is it something bigger? My S25 Ultra has the app but it hasn’t used any battery or data.
I mean the grapheneos devs say it is. Are they going to lie.
Yes, absolutely, and regularly, and without shame.
But not usually about technical stuff.
graphene folks have a real love for the word misinformation (and FUD, and brigading). That’s not you under there👻, Daniel, is it?
After 5 years of his
anticshateful bullshit lies, I think I can genuinely say that word triggers me.If the app did what op is claiming then the EU would have a field day fining google.
To quote the most salient post
The app doesn’t provide client-side scanning used to report things to Google or anyone else. It provides on-device machine learning models usable by applications to classify content as being spam, scams, malware, etc. This allows apps to check content locally without sharing it with a service and mark it with warnings for users.
Which is a sorely needed feature to tackle problems like SMS scams
if the cellular carriers were forced to verify that caller-ID (or SMS equivalent) was accurate SMS scams would disappear (or at least be weaker). Google shouldn’t have to do the job of the carriers, and if they wanted to implement this anyway they should let the user choose what service they want to perform the task similar to how they let the user choose which “Android system WebView” should be used.
No, that wouldn’t make much difference. I don’t think I’ve seen a real world attack via SMS that even bothered to “forge” the from-field. People are used to getting texts from unknown numbers.
And how would you possibly implement this supposed “caller-id” for a field that doesn’t even have to be set to a number?
caller id is the thing that tells you the number. it isn’t cheap to forge, but it’s the only way a scan could reasonably effect anyone with more than half a brain. there is never a reason to send information to an unknown SMS number, or click on a link from a text message from an unknown number.
Carriers don’t care. They are selling you data. They don’t care how it’s used. Google is selling you a phone. Apple held down the market for a long time for being the phone that has some of the best security. As an android user that makes me want to switch phones. Not carriers.
You don’t need advanced scanning technology running on every device with access to every single bit of data you ever seen to detect scam. You need telco operator to stop forwarding forged messages headers and… that’s it. Cheap, efficient, zero risk related to invasion of privacy through a piece of software you did not need but was put there “for your own good”.
I will perhaps be nitpicking, but… not exactly, not always. People get their shit hacked all the time due to poor practices. And then those hacked things can send emails and texts and other spam all they want, and it’ll not be forged headers, so you still need spam filtering.
Why do you need machine learning for detecting scams?
Is someone in 2025 trying to help you out of the goodness of their heart? No. Move on.
Blaming the victim solves nothing.
Scamming is a rapidly growing industry that is becoming more professional and specialized all the time. Anyone can be scammed.
If you want to talk money then it is in businesses best interest that money from their users is being used on their products, not being scammed through the use of their products.
Secondly machine learning or algorithms can detect patterns in ways a human can’t. In some circles I’ve read that the programmers themselves can’t decipher in the code how the end result is spat out, just that the inputs will guide it. Besides the fact that scammers can circumvent any carefully laid down antispam, antiscam, anti-virus through traditional software, a learning algorithm will be magnitudes harder to bypass. Or easier. Depends on the algorithm
I don’t know the point of the first paragraph…scams are bad? Yes? Does anyone not agree? (I guess scammers)
For the second we are talking in the wild abstract, so I feel comfortable pointing out that every automated system humanity has come up with so far has pulled in our own biases and since ai models are trained by us, this should be no different. Second, if the models are fallible, you cannot talk about success without talking false positives. I don’t care if it blocks every scammer out there if it also blocks a message from my doctor. Until we have data on consensus between these new algorithms and desired outcomes, it’s pointless to claim they are better at X.
I’ve just given it the boot from my phone.
It doesn’t appear to have been doing anything yet, but whatever.
Yeah no issues here just uninstalling. It hasn’t come back.
It didn’t appear in my apps list so I thought it wasn’t installed. But when I searched for the app name it appears. So be aware.
How did you search for it? Search bar in settings?
Play Store, it doesn’t show in local search results, but they list it as installed.
Even worse, i found this comment in the app store and it did the same on my device :
Installed automatically without my knowledge, no notification, only found it because of a friend’s post, and even then, you only see it through a link, it doesn’t come up in your app list or a search of the Google play store. I thought it felt like my battery was draining a little quicker too, which is apparently also something noticed in connection to having this app. Uninstalling.
The app can be found here :
https://play.google.com/store/apps/details?id=com.google.android.safetycore
.Oh right, maybe I noticed because of Storage Isolation, that’s an app which allows you to restrict folder access of other apps, and it prompts me to select actions for every newly installed app. So it casually prompts me whenever google pushes a new, hidden installation.
i believe this application hides in different ways on different devices and maybe it is also different by regions making it even worse to detect and explain to someone else. So, i wouldn’t be surprised if you told me you found it in a different way than how it was explained in my comment.
.
also in the Forbes article :
Per one tech forum (
https://gbatemp.net/threads/psa-to-all-android-users-google-quietly-installs-spyware-on-android-devices.667542/GBAtemp.net - The Independent Video Game Community
)
this week: “Google has quietly installed an app on all Android devices called ‘Android System SafetyCore’. It claims to be a ‘security’ application, but whilst running in the background, it collects call logs, contacts, location, your microphone, and much more making this application ‘spyware’ and a HUGE privacy concern. It is strongly advised to uninstall this program if you can.… →
Remove the following 2 spywares :
1).
Android System SafetyCore: https://play.google.com/store/apps/details?id=com.google.android.safetycore
2).
Android System Key Verifier: https://play.google.com/store/apps/details?id=com.google.android.contactkeysYep, I’ve removed both of those the second they showed up on my phone uninvited. Even as a non-US citizen, with the current state of their government, I definitely don’t want any corporate collecting data on myself.
i was able to find it on my oneplus, and i also noticed, why is my oneplus 12r draining so fast?
On my settings screen I have a search bar at the top
you can look it up on your app managment settings too, search for it there.