Why YSK: I was curious what my android apps actually do vs what they claim, so I ran a few through Exodus Privacy. One of my weather apps claimed "no data shared with third parties" in the Data Safety section. Exodus found 7 trackers including trackers from major ad networks and tech companies. That's when I went deeper.
Mozilla analyzed thousands of apps in 2023 and found the majority straight up lied in their Data Safety labels. An app says "no data collected" while running ad trackers from major tech companies the moment you open it. Oxford University ran an independent study and found the same thing. This isn't an edge case, it's the norm.
Play Store doesn't audit these claims. There's no technical verification. Developers fill out a form, check some boxes, and whatever they write goes live. It's the honor system for companies whose entire business model is selling your data.
if you want to verify this yourself:
- Exodus Privacy (open source tracker database, scans any app for hidden trackers)
- AppXpose (scans the APK directly on your Android device)
- Play Store Data Safety section (for comparison with the above)
- Mozilla Foundation 2023 report (the full study with findings)
good luck sleeping after that.