Related
http://www.tgdaily.com/security-brief/50862-as-many-as-4-million-people-downloaded-data-stealing-android-app
Mike Luttrell | Thu 29th Jul 2010, 08:30 am
A seemingly innocuous Android app that let users change their phone's wallpaper has actually been stealing private user information and may have been downloaded millions of times.
Users should be concerned if they downloaded an app from "Jackeey Wallpaper." While it does perform the functions described in the app download page, it also ends up taking the phone's Internet browser history, mobile phone number, every single text message, and voicemail password. That information is then sent to a website based in Shenzhen, China.
Click to expand...
Click to collapse
http://phandroid.com/2010/07/29/another-app-stealing-data/
[Update]: MyLookout chimed in with us to clarify some details that other outlets have been reporting. Specifically, the app does collect data from your phone, but only the device’s phone number, subscriber identifier, and voicemail number fields are retrieved. SMS and browsing history are not touched by any of the apps they analyzed throughout their Blackhat conference. Your voicemail’s password is also not transmitted unless you included the password in your phone’s voicemail number field.
We’re not yet certain on what the developer’s intentions are for using the pieces of data it does send to China – so we can’t outright call it malicious – but it is collecting and sending data nevertheless. Hopefully that clears up some of the confusion everyone’s been faced with regarding the read-only property READ_PHONE_STATE that the application uses to access certain pieces of data.
Click to expand...
Click to collapse
So no SMS, browsing history or voice mail password taken.
FOR REAL?!?!
All your data belongs to somebody else
jp_macaroni said:
http://www.tgdaily.com/security-brief/50862-as-many-as-4-million-people-downloaded-data-stealing-android-app
Click to expand...
Click to collapse
Free isn't free: http://www.androidpolice.com/2010/0...t-all-your-data-are-belong-to…-somebody-else/
Same happened to me with an app posted here for movies
Flixster for android
http://www.flixster.com/
I did find out ON TIME , that someone was messing with my gmail account , had to change my password inmediatly
I received an altert from an IP ( from their site ) trying to change my password !
You've been warned , happened to me !
It's not like it doesn't show you the stuff when you install apps.. And this "Genome Project" thing is out of context nonsense.... 14% of free apps have access to your contacts. You realize that includes IM programs, SMS programs, Email programs, etc....
If you install a wallpaper app that requests access to your Accounts and Contacts, well....
http://www.cyrket.com/search?q=Jackeey+Wallpaper
I don't see such permissions on the 2-3 I looked through, but maybe specific ones did.
Another thing about this "lookout" app and Genome Project.. Look at the permissions on their app on the market:
Permissions: ACCESS_COARSE_LOCATION , ACCESS_FINE_LOCATION , ACCESS_NETWORK_STATE , CLEAR_APP_CACHE , DISABLE_KEYGUARD , GET_ACCOUNTS , INTERNET , MANAGE_ACCOUNTS , MODIFY_AUDIO_SETTINGS , PERSISTENT_ACTIVITY , READ_CONTACTS , READ_LOGS , READ_OWNER_DATA , READ_PHONE_STATE , READ_SMS , READ_SYNC_SETTINGS , READ_USER_DICTIONARY , RECEIVE_BOOT_COMPLETED , RECEIVE_SMS , VIBRATE , WAKE_LOCK , WRITE_CALENDAR , WRITE_CONTACTS , WRITE_SETTINGS , WRITE_SMS , WRITE_SYNC_SETTINGS , WRITE_USER_DICTIONARY , com.android.browser.permission.READ_HISTORY_BOOKMARKS , com.android.browser.permission.WRITE_HISTORY_BOOKMARKS
What if the 'AV' software itself turns out to be the one stealing data? If anything could, it could.
we get that all apps ask for permission to allow access to our location, contacts, emails etc....but to gather our private info and sell them to China.....thats messed up.
time to sue.
That information is then sent to a website based in Shenzhen, China.
Click to expand...
Click to collapse
question:
if this app was downloaded and used by US government....would it be considered as a SPY? lol
It's a big deal, but it illustrates very well that android users are in a ffa environment without someone looking over their shoulder to protect them.
It's good and bad. Some people will call bad on google for not protecting them, but others will see it for the truth of it and know they have to cover their own ass.
Wouldnt a functional firewall app work for this?
cutting off apps access to non essential portions of data...but also from data transmitting?
Flixster is malicious??
pvillasuso said:
Same happened to me with an app posted here for movies
Flixster for android
http://www.flixster.com/
I did find out ON TIME , that someone was messing with my gmail account , had to change my password inmediatly
I received an altert from an IP ( from their site ) trying to change my password !
You've been warned , happened to me !
Click to expand...
Click to collapse
Woaaah now... I have used this app on almost ever ROM I flash - downloaded straight from the market each time. I've never had an indication that my information was compromised in any way... Are you 100% sure that Flixster was the culprit? That's a pretty heavy claim for what I think is a very widely used (and recommended) app.
and what about all the gmail notifiers?
More fears:
I will preface this by saying I don't know much about Android security, but to me, it's as secure as any PC.
So: what about gmail notifier apps and apps that ask for access to your gmail account?
Do they have access to your gmail password? Seems like it. So what's to stop malicious gmail notifier developers from stealing your gmail passwords and having their way with your google account, for example, grepping your mailbox for banking information.
Also think about keyboard apps, what's to top malicious keyboard developers from writing a keyboard which logs all your keystrokes to a zipfile then uploads it to a russian server for analysis of B-A-N-K and P-A-S-S-W-O-R-D and then the next keystrokes which follow that?
It doesn't end there. Picture apps which can steal your pictures. Apps which can record your phone conversations and upload the audio to servers a few hours later so you don't notice that data going on.
bwolmarans said:
More fears:
I will preface this by saying I don't know much about Android security, but to me, it's as secure as any PC.
So: what about gmail notifier apps and apps that ask for access to your gmail account?
Do they have access to your gmail password? Seems like it. So what's to stop malicious gmail notifier developers from stealing your gmail passwords and having their way with your google account, for example, grepping your mailbox for banking information.
Also think about keyboard apps, what's to top malicious keyboard developers from writing a keyboard which logs all your keystrokes to a zipfile then uploads it to a russian server for analysis of B-A-N-K and P-A-S-S-W-O-R-D and then the next keystrokes which follow that?
It doesn't end there. Picture apps which can steal your pictures. Apps which can record your phone conversations and upload the audio to servers a few hours later so you don't notice that data going on.
Click to expand...
Click to collapse
The same things are possible for a regular computer as well. You can connect to a site and it could execute a download that then snoops your keystrokes and uploads them somewhere.
The difference (so far) is that on android you have to install an app to do that.
The takehome message is to excersize caution and install apps you can verify where they come from and what they do.
This will happen more and more. Mobile is where people are doing most of there communication and beginning alot of banking.
Not just Android all mobile OS.
Like I said a zonealarm/lilsnitch like app would be of great use. Even if logging or reading they still need to communicate out. An easy low mem/bat/cpu usage app that monitors this behaviour would go along way.
This is becomming a bigger issue and we do need some type of security alert monitor!
http://www.newsfactor.com/story.xhtml?story_id=13100EVAC2WI
"Mobile apps on Android-powered smartphones and Apple's iPhone can disclose more personal data than most users realize, security vendor Lookout revealed Wednesday at the Black Hat USA 2010 conference in Las Vegas. Rather than being malicious, users often give the apps permission to access data when they are installed...."
jp_macaroni said:
http://www.tgdaily.com/security-brief/50862-as-many-as-4-million-people-downloaded-data-stealing-android-app
Click to expand...
Click to collapse
Opps missed this post prior to posting my thread...
http://forum.xda-developers.com/showthread.php?t=739446
Arcarsenal said:
Woaaah now... I have used this app on almost ever ROM I flash - downloaded straight from the market each time. I've never had an indication that my information was compromised in any way... Are you 100% sure that Flixster was the culprit? That's a pretty heavy claim for what I think is a very widely used (and recommended) app.
Click to expand...
Click to collapse
100% sure , I checked out the IP involved , and it pointed directly to their website !!!
pvillasuso said:
Same happened to me with an app posted here for movies
Flixster for android
http://www.flixster.com/
I did find out ON TIME , that someone was messing with my gmail account , had to change my password inmediatly
I received an altert from an IP ( from their site ) trying to change my password !
You've been warned , happened to me !
Click to expand...
Click to collapse
Don't be stupid. Flixster is a 100% legitimate app. Don't bad mouth it because you fell for a phishing scam some place else.
GldRush98 said:
Don't be stupid. Flixster is a 100% legitimate app. Don't bad mouth it because you fell for a phishing scam some place else.
Click to expand...
Click to collapse
Use it then, who cares anyway ..!
Hope u get your gmail account hacked ...
samagon said:
The takehome message is to excersize caution and install apps you can verify where they come from and what they do.
Click to expand...
Click to collapse
Easy to say, but how do you 'verify where they come from and what they do'?
my account is temporarily suspended for violating the community standards, which I have no idea what does it mean.
apparently, every account without real name will be suspended sooner or later. according to Google discussion board, large number of people is facing this problem now, especially those with names like mine (sony ericssone community), iphone, XDA ...etc. please read the following
http://www.google.com/support/profiles/bin/answer.py?answer=1228271
so I had to change my name to my personal name and ask for appeal and wait for them to reactivate my account. this seems to be stupid for me. if we want to make group or something, what should we do???? and where is the openness that google keeps mentioning in each of their articles?????
I finally found the answer, if you want to have any of the groups names, you need to have a business account, which as you all know is not available yet, so you need to wait
yes, all non standard name accounts will be shut down
which i think is something else that is a +1 over facebook. you don't have a million different crappy little pages pestering you all day long.
just create a hangout...
then add it here. http://gphangouts.com/
too bad, i enjoy your daily news.
and hangout is not work on phone, which there's huddle which not working on computer.
thanks alot
I will be back as soon as they reactivate it
Hi everybody
my account is finally reactivated after I changed my name. I wish xda change their name before they get suspended as well.
we are currently over 250 members and everyone is wellcome
here is my link
https://profiles.google.com/113070422033274639984
Is it possible to fake register the kindle. I'm more than happy to have a rooted kindle and leave anything to do with the amazon app store behind. But certain features like email and calender need me to register on amazon.. any workaround? There seemed to be something you could do with the paperwhite kindles
Fake Register the Kindle Fire HD 7"
los911 said:
Is it possible to fake register the kindle. I'm more than happy to have a rooted kindle and leave anything to do with the amazon app store behind. But certain features like email and calender need me to register on amazon.. any workaround? There seemed to be something you could do with the paperwhite kindles
Click to expand...
Click to collapse
los911,
So far we have not been able to "Fake Register" the Kindle. Amazon has spent a lot of time
making sure the device logs into their service. I think most of the development is being
spent on upgrades, tweaks and future ROM's. I will talk this over with our development
team but so far I have not heard any discussion on this topic. Maybe someone else
will have a better answer.
prokennexusa said:
los911,
So far we have not been able to "Fake Register" the Kindle. Amazon has spent a lot of time
making sure the device logs into their service. I think most of the development is being
spent on upgrades, tweaks and future ROM's. I will talk this over with our development
team but so far I have not heard any discussion on this topic. Maybe someone else
will have a better answer.
Click to expand...
Click to collapse
Thanks for your reply.
What do you suggest I do? Should I install a different app for each of the amazon apps I cannot use?
Root and Google Play for Amazon 7" Kindle Fire HD Software Version 7.2.3
los911 said:
Thanks for your reply.
What do you suggest I do? Should I install a different app for each of the amazon apps I cannot use?
Click to expand...
Click to collapse
Los911,
Sorry, I should have included that with my last response.
Here are the replacements:
1. Root the Kindle http://forum.xda-developers.com/showthread.php?t=2069117
2. Install Google Play Store http://forum.xda-developers.com/showthread.php?t=2069859
3. Then using Google Play Store, search for (then Install);
Google Play Books > Amazon Books
Google Currents > Amazon Newsstand
Google Play Magazines > Amazon Newsstand
Google Play Store Apps > Amazon Apps Store
Google Play Music > Amazon Music
Google Play Movies > Amazon Videos
Google Play Games > Amazon Games
Google Play Store > Amazon Shop
Google Play Books > Amazon Audiobooks
Dolphin > Amazon Web (Silk)
I think that covers it. The Amazon Photos can be replaced by a number of applications, just search Google Play for
Photo Software, over 100 applications appear, most are free.
Let me know if you have any other questions, we are here from 10am to 10pm PST GMT -8
and we do offer free phone support if you are unable to get the job done through the Threads.
Take Care, Chris Bryant (prokennexusa)
Any suggestions for a work around the contacts.app? I can't work with any of my contacts (even whatsapp) without being annoyed with the Amazon login request...
Contact Manager - Skype
nakedtruthishere said:
Any suggestions for a work around the contacts.app? I can't work with any of my contacts (even whatsapp) without being annoyed with the Amazon login request...
Click to expand...
Click to collapse
I use Skype, which manages my contacts. Another option is cCloud.
Skype is installed, but not an option to manage my about 150 contacts imported from Outlook.
The point is, I imported all existing contacts to dw contacts, but I'm not able to change anything. When I try to, Amazon calls for a login...
There must be a way around, either with an alternate contacts.app or a fake login.
Any suggestions will be highly appreciated.
How to: Fake Register the Kindle Fire HD 7"
nakedtruthishere said:
Skype is installed, but not an option to manage my about 150 contacts imported from Outlook.
The point is, I imported all existing contacts to dw contacts, but I'm not able to change anything. When I try to, Amazon calls for a login...
There must be a way around, either with an alternate contacts.app or a fake login.
Any suggestions will be highly appreciated.
Click to expand...
Click to collapse
Let me get a little more information so I can help you. You want to "Fake Register" the Kindle due to not having
a credit card, is this the case? If yes, I have great news, we Developers have Fake Credit Card Numbers (IT IS LEGAL)
that can be used when you run into a company that forces you to use a credit card. Let's face it, not everyone has a
card! In order to install apps on your Kindle Fire you will need an American credit card. In order to install Free apps at
all you need to have an American credit card setup under your 1-click settings in your Amazon Account. Amazon
will check if the credit card you have in your account is an American Credit card, but not charge it when you add
it to your account or download a free app.
Below is a list of test card numbers used by developers for validating check out processes when building web
stores – and guess what, they can be used with Amazon ☺. I have of course not checked all numbers but I
am sure you will find one you can use on the list.
Expiration Date has to be a valid date in the future (use the mmyy format). Also make sure to use a US address
(just Google for one, but make sure you don’t ship any purchases to this address). These cards will NOT allow
you to make a purchase, they are use for testing purposes ONLY. There is nothing illegal about doing this as
long as you do not use this in an attempt to defraud a company. These numbers are Publicly known and are
posted on several development websites, this is where I found the information quite a long time ago.
Please send us a PM, we will respond with the numbers to be used for development purposes only.
Huh, thanks a lot for that much information, but I think, you got me wrong...
The KFHD hardware itself (and the price payed) is perfect for my needs, but I do not trust very much in Amazon's way to handle my data. Therefor I'd like to use the KFHD as an ordinary Android tablet with those apps I like. This worked so far, the device is rooted, Google Market and Go Launcher are installed and most Amazon pre-installed apps were replaced by others - except the above mentioned contacts.apk. I couldn't find a working replacement and all other email or social network applications try to access these contacts, but unfortunately all attempts are denied “You have to login to your Amazon account first“.
Thus no need to play around with fake credit card numbers or so...
Anyway, thanks for your help (although it was not the final solution for my "problem").
Follow Up - Feedback
nakedtruthishere said:
Huh, thanks a lot for that much information, but I think, you got me wrong...
The KFHD hardware itself (and the price payed) is perfect for my needs, but I do not trust very much in Amazon's way to handle my data. Therefor I'd like to use the KFHD as an ordinary Android tablet with those apps I like. This worked so far, the device is rooted, Google Market and Go Launcher are installed and most Amazon pre-installed apps were replaced by others - except the above mentioned contacts.apk. I couldn't find a working replacement and all other email or social network applications try to access these contacts, but unfortunately all attempts are denied “You have to login to your Amazon account first“.
Thus no need to play around with fake credit card numbers or so...
Anyway, thanks for your help (although it was not the final solution for my "problem").
Click to expand...
Click to collapse
nakedtruthishere,
I was not sure, so I wanted to offer you the same solution we offer several hundreds that use
the Kindle Fire overseas. These users are just plain stuck due to the Amazon's geographic
rules. So when we sell the Kindle Fire to people overseas this is there solution. It is not
playing with credit card numbers, it is a simple solution to a known problem with Amazon
and it is 100% legal. We have a large corporation with several attorneys who are retained
by our firm, we discussed this with them before publishing this information. Now that I
understand your problem, I can drill down the applications. Do you have Google Play
installed on the Kindle Fire? If yes, search for "Contact App" or "Contact Manager"
you will find quite a few to replace the Kindle Address Book.
prokennexusa said:
...search for "Contact App" or "Contact Manager" you will find quite a few to replace the Kindle Address Book.
Click to expand...
Click to collapse
I tried several - none of them worked well.
Now I have DW contacts installed. I have got some contacts imported to DW with another app. So far, so good.
When I want to add a contact to the list or try to change any of them, the old song plays: Please login to your Amazon account...
When I renamed or deleted the OEM contacts.apk, DW contacts prompts "not supported by your system".
Maybe you guys could have a deeper look into it?
Thanks again for any help.
Contact Manager
nakedtruthishere said:
I tried several - none of them worked well.
Now I have DW contacts installed. I have got some contacts imported to DW with another app. So far, so good.
When I want to add a contact to the list or try to change any of them, the old song plays: Please login to your Amazon account...
When I renamed or deleted the OEM contacts.apk, DW contacts prompts "not supported by your system".
Maybe you guys could have a deeper look into it?
Thanks again for any help.
Click to expand...
Click to collapse
nakedtruthishere,
Good idea, I will ask one of my developers to do a little research, send us a PM
requesting a "Good Address Book for the Kindle", then I will forward to my
dev team. Thanks!
Address Book Upgrade for the Kindle Fire HD and 2 Series of Tablets
nakedtruthishere said:
I tried several - none of them worked well.
Now I have DW contacts installed. I have got some contacts imported to DW with another app. So far, so good.
When I want to add a contact to the list or try to change any of them, the old song plays: Please login to your Amazon account...
When I renamed or deleted the OEM contacts.apk, DW contacts prompts "not supported by your system".
Maybe you guys could have a deeper look into it?
Thanks again for any help.
Click to expand...
Click to collapse
nakedtruthishere,
I know this has taken a while but in the end we found 2 solid Address Book Upgrades for the Kindle Fire HD and 2 Series of Tablets. Here they are with the Features:
Smartr Contacts from Xobni
Description
What if you had a magic address book that automatically identified the name and contact information for everyone you'd ever communicated with?
Smartr Contacts brings you that magic. This is the only app that automatically creates rich profiles for all your contacts, including communication history and updates from Facebook, LinkedIn and Twitter.
Life is about people, and Smartr Contacts brings them to you - Automatically.
Key features of Smartr Contacts:
- Automatic. Finds all the people you know from your email or calendar history.
- Personal. Puts a face to every name and email address.
- Insightful. Detects and assigns phone numbers automatically.
- Socially aware. Pulls in Facebook, LinkedIn and Twitter updates.
- Fast. Search by first, last, company name or phone number to quickly find anyone.
- Integrated. Easily compose emails to multiple contacts with a single click.
- Relevant. Ranks contacts by importance, not alphabetically, so the most important people are at the top.
Here are some ways you can use Smartr Contacts for your personal and professional life:
- Keep track of all the people you've ever communicated with - automatically
- Know who you're communicating with - see photos and recent communication history
- Call, email or SMS someone with a single tap
- Stay up to date with Facebook, LinkedIn and Twitter updates
- See your shared shared connections
- Bring all your contacts from Android, BlackBerry, Gmail and Outlook into one place
- Protect your contacts in the cloud - if you lose your phone, all your contacts are safe and secure
Press and user feedback:
- 4/5 stars - PC World
- Smartr Contacts by Xobni turns your phone into the ultimate social organizer. - PC World
- @richdemuro - This app is so hot! Should be default android addressbook app >> Check out "Smartr Contacts"
- @aWisseh - xobni.com @xobni your app for #Android is ridiculous (in a great, organized and efficient way) keep up the outstanding work.
Safe and secure: View our privacy policy here - http://www.xobni.com/legal/privacy
Get Pro to connect all your contacts across Gmail, Android, Outlook, BlackBerry and iPhone
Product requirements:
- A Xobni account is required to use this app.
- A Gmail account or Xobni for Outlook is required for Smartr Contacts to work properly.
Corporate Addressbook from Vivek M. Lyer
Description
Want to lookup your colleague's information in Exchange but find your Android phone lacking?
Unfortunately the Global Address List (GAL) lookup currently available in Android is limited in functionality. It only looks up email addresses and does not return anything more. This could be frustrating when you are trying to use your phone to look up your colleague's phone number or office location.
This application looks up the GAL contact database, and returns ALL data corresponding to the contact that is available on the server. It also allows you to save the contact information retrieved to your phone for easy access.
This app supports GAL lookups on
- Exchange 2003
- Exchange 2007
- Exchange 2010
- Google Apps for Business/Education
- Zimbra
Thanks to the people assisting with translations:
- jgoldhammer (DE)
- hourglass69 (FR)
This app is NOT ad-supported and is completely free and open-source.
See http://code.google.com/p/corporateaddressbook/
FAQ
- Why does the app need so many permissions?
Once the app looks up a name, there are links next to the phone numbers that allow you to call or send a text to the number. In order to make these links work, the app needs the permissions to make calls and send text messages. Also in order to save the search results to your address book, the app needs to be able to access the accounts on your device and add contacts to the accounts.
- Is this app ad supported or paid?
Nopes, the app is completely free (both like beer and speech). There are no ads, and the source code is available on Google Code (http://code.google.com/p/corporateaddressbook/).
- Why are you asking for my credentials? Are you trying to steal my identity
Unfortunately there is no way to access your account information that is configured on your device. The information you enter in the app stays on the device. Please feel free to audit the code if you are still worried.
- This doesn't work, how can I report an issue?
Please feel free to email me, or report an issue at http://code.google.com/p/corporateaddressbook/issues/list
- Why is the app not available in my language?
The developers are, unfortunately, not versed in several languages - but you can help! Please join the translatioon effort at http://crowdin.net/project/corporate-addressbook/.
I have tried both address books and found the first one Smartr Contacts to be the best, although they are both solid products - try them both, they are free.
I got my N4 a couple of days ago. It's my first foray in the Android world.
The requirements that I am hoping to meet are pretty simple:
1) I want to be able to call contacts and send text messages
2) I don't want Google tracking my contact list
3) I don't want Google tracking my location
4) I don't want Google tracking my browsing history
5) I want to be able to use the Play store to download 3rd party apps. I didn't buy an N4 to use it it like a dumbphone. Logically, the Play store shouldn't require constant access to my contacts, location or browsing history.
I am making this post to get help meeting the above requirements. Despite seeming really basic, I'm running into trouble, and I think I will need frequent help. This thread can act as a journal that hopefully other people can follow.
What I did so far is immediately flashed the N4 to AOKP, and applied the OpenPDroid patches (though I've yet to use OPD). From a blank slate start, I declined to create an account, disabled location access, etc, during the startup wizard.
Adding a contact round 1
I was able to create a local, unsynced contact.
Using the Play store
I was forced to sign up for a gmail account, which is normal. I declined to "keep this phone backed up with my Google Account". I then went in Settings > Account and disabled sync for everything, including Contacts. I also disabled background sync in the power controls.
Adding a contact round 2
I am now unable to add a contact without being forced to sync it with my BS gmail account. When I click "Add Contact" in the phone app, a dialog says "Your contact will be synced with [email protected]" and my choices are either "OK", "Add other account", or to cancel out by clicking Back.
So I'm already stuck. Once a Play account is created, I am now unable to do something as basic as adding a contact without sending it to Google. Can someone tell me how to get past this obstacle?
That's how Google makes their money! Your only options are to either start using the amazon app store only or side loading apps if you don't want Google involvement. Good luck.
Sent from my Nexus 7 using xda premium
Why? Like they don't have all your information already? You freely give your information to everyone when you use the internet. Congratulations. You are not that special.
Sent from my Nexus 4 using xda app-developers app
Eurotrash: always in this sort of discussions there's people like you who essentially advocate shutting up and taking it. "That's how things are" is not an acceptable solution to my problem, or I would not have made this post. There IS a way around the creeping, and someone knows it. My last resort is blocking every Google service from accessing the Internet except Play. I'm asking here because I'm hoping there's a less extreme solution that other people can use.
Gotzadroid: I will hold out for a better solution. Amazon appstore will likely be limited. Sideloading is not possible because many devs don't provide APKs
I know you can get an app to block individual permissions of other apps: https://play.google.com/store/apps/details?id=com.stericson.permissions
It requires root. Not sure about the contacts and other stuff you wanted to block, im assuming you've disabled location services.
Why not try flashing like cm10 and not flashing gapps so no Google apps? Then just manually downloading the apps apks and sideload the ones you need?
Sent from my Nexus 4 using Tapatalk 2
Didn't think my post lacked clarity, so hopefully this will be clearer:
My ONLY problem right now (we'll leave the rest for later) is that the Phone app, an essential app if I want to use my phone for making calls, an app that isn't even part of Gapps, doesn't let me add a local contact without sharing it with Google. That's it. Forget everything else in my post.
So my simple question is, how do I add my friend Bob to my contact list, locally in phone memory or on the SIM card or whatever, without telling Google I'm friends with Bob and giving them his phone number?
MachinTrucChose said:
Didn't think my post lacked clarity, so hopefully this will be clearer:
My ONLY problem right now (we'll leave the rest for later) is that the Phone app, an essential app if I want to use my phone for making calls, an app that isn't even part of Gapps, doesn't let me add a local contact without sharing it with Google. That's it. Forget everything else in my post.
So my simple question is, how do I add my friend Bob to my contact list, locally in phone memory or on the SIM card or whatever, without telling Google I'm friends with Bob and giving them his phone number?
Click to expand...
Click to collapse
As previously mentioned, try flashing a rom without gapps
OK, try this. Make a dummy gmail account for the play store only. Get all the apps you want and then sign out of gmail. Only sign back in when you want another app. That should keep Google from syncing all your info.
Sent from my Nexus 7 using xda premium
Michealtbh said:
As previously mentioned, try flashing a rom without gapps
Click to expand...
Click to collapse
The Phone app is not a part of gapps. It came on the stock ROM before I flashed gapps on it. I didn't try it before adding gapps, are you saying it will change behavior and no longer prompt me to sync when I try to add a contact?
I gotta go to sleep, I'll do more tests tomorrow evening to test this (and wait for your reply to the above question in case you misread my posts).
If the answer to the above question is yes, this would immediately beg another question: how do I install 3rd party apps from Play without flashing gapps?
gotzaDroid said:
OK, try this. Make a dummy gmail account for the play store only. Get all the apps you want and then sign out of gmail. Only sign back in when you want another app. That should keep Google from syncing all your info.
Sent from my Nexus 7 using xda premium
Click to expand...
Click to collapse
That's what I did in the OP (2nd bolded step). I created a dummy account cause Play requires it. That became my main Google account on this phone (since I declined to set up an account prior to that). That's the account Google tries to sync my contacts to when I try to add a contact.
I looked in the Gmail app, there's no way for me to sign out. All I can do is add more accounts.
A similar thread from the galaxy nexus forums: http://forum.xda-developers.com/showthread.php?t=1589367
However, I'd also be interested in a deeper insight on why you're trying to do this. Fear of the big brother? Or just proving a point?
We know before buying an android phone that everything is tied to that Gmail address; now you want to cut that tie but maintain full functionality. Well, that probably doesn't work. And if it at the end does, why going through all that trouble? If a different platform offers all that then..
Why you bought an android phone in the first place? Just curious
Sent from my Nexus 4 using Tapatalk 2
You can try downloading or side loading the app "contacts+" then sign out of your dummy gmail account. You can get a sim to USB hub online and plug your sim into the hub and into PC to add contacts directly to sim. I don't know if there's a way to export contacts to sim anymore unless I'm guessing developers somehow add that feature. So look into CM or another well built ROM and ask some questions.
Good luck
Sent from my SCH-I605 using xda premium
MachinTrucChose said:
The Phone app is not a part of gapps. It came on the stock ROM before I flashed gapps on it. I didn't try it before adding gapps, are you saying it will change behavior and no longer prompt me to sync when I try to add a contact?
I gotta go to sleep, I'll do more tests tomorrow evening to test this (and wait for your reply to the above question in case you misread my posts).
If the answer to the above question is yes, this would immediately beg another question: how do I install 3rd party apps from Play without flashing gapps?
Click to expand...
Click to collapse
Stock rom comes with gapps already loaded.
Most custom roms come without them and they must be flashed separately. If you choose not to flash them you aren't even given an option to sign into your Google account at first boot, so there will obviously be no option to sync your contacts.
Your phone will be crippled and you'll have to find workarounds for many things. I don't think you'll be able to use Maps for example. To install apps you'll have to download and install the apks or use an alternative app market like SlideMe or Amazon
What's there to hide? They're just contacts
Sent from my Nexus 4
Google doesn't care what your Aunt Bertie's phone number is. All they use the data for is to customize ads for you, and if you're going to be seeing ads anyways they might as well be relevant to you.
Sent from my Nexus 4 using xda app-developers app
It's disappointing that the thread is taking the direction of Google advocacy rather than finding a technical solution to my problem, hopefully this post answers your questions and we can stop arguing about this.
Drakkula4 said:
You can try downloading or side loading the app "contacts+" then sign out of your dummy gmail account.
Click to expand...
Click to collapse
How do I sign out of my dummy gmail account?
Vangelis13 said:
A similar thread from the galaxy nexus forums: http://forum.xda-developers.com/showthread.php?t=1589367
However, I'd also be interested in a deeper insight on why you're trying to do this. Fear of the big brother? Or just proving a point?
We know before buying an android phone that everything is tied to that Gmail address; now you want to cut that tie but maintain full functionality. Well, that probably doesn't work. And if it at the end does, why going through all that trouble? If a different platform offers all that then..
Click to expand...
Click to collapse
Nope, not full functionality. I can avoid using all gapps. The only required Google service is the Play store, which is the primary gateway to non-Google apps. I would use Email over Gmail, Navfree over Maps, etc.
The next paragraph is meant as a reply to the 5 posts essentially saying "tinfoil hat, trust Google!".
This is supposed to be an open phone, allowing the user to do what they want, compared to the big bad iOS. That's why I bought it. Now I find out Google is insisting on taking something extremely private (my social graph) even when I don't want to give it to them. I respect my friends' privacy, and I don't want an intersection of my online and offline lives being made by some 3rd party with intentions I don't trust. The insistence is starting to creep me out. You can provide convenience and still respect basic privacy, look at Mozilla with Firefox Sync: even they don't see the data you sync. I'm not even asking for that much, just respect my wish to draw the line at real-life stuff. I guess I shouldn't be surprised, this is the company banning people using pseudonyms on Google+.
The most disappointing thing in all this, is that you have 5000 custom ROMs being developed, which mainly differ in pointless GUI BS like scroll animation speed. Not a single one of those projects thought to provide a way to make the phone usable without giving up extremely private data. AFAIK only 3 guys are working on privacy stuff, and even those guys' patches and apps don't protect you from the Eye of Google.
chrisrozon said:
Google doesn't care what your Aunt Bertie's phone number is. All they use the data for is to customize ads for you, and if you're going to be seeing ads anyways they might as well be relevant to you.
Sent from my Nexus 4 using xda app-developers app
Click to expand...
Click to collapse
What if I don't want tailored ads? Or what if I only want tailored ads by tracking the online activity I'm willing to submit to them, and I feel it should be my my right to draw a line? Many people are not comfortable seeing an intersection of online and real life activity. I am one of those people.
MachinTrucChose said:
Didn't think my post lacked clarity, so hopefully this will be clearer:
My ONLY problem right now (we'll leave the rest for later) is that the Phone app, an essential app if I want to use my phone for making calls, an app that isn't even part of Gapps, doesn't let me add a local contact without sharing it with Google. That's it. Forget everything else in my post.
So my simple question is, how do I add my friend Bob to my contact list, locally in phone memory or on the SIM card or whatever, without telling Google I'm friends with Bob and giving them his phone number?
Click to expand...
Click to collapse
Simple question deserves simple answer, only thing I can think of, go to settings > accounts > google > tap your account email address > and uncheck the things you don't want synced with google.
Hopefully it works and you will just have a local copy of everything then.
Again just flash like cyanogen mod since you have to flash gapps separate. Then don't flash gapps and your phone will have nothing to do with google.
Sent from my Nexus 4 using Tapatalk 2
Please include the option for Local Account in Contacts and option for Display only contacts with numbers option. These are the very basic ANY ROM should have.
Thanks!
Android doesn't have it by default with AOSP contact app. You have to use an alternate contact app.
dadaz007 said:
Android doesn't have it by default with AOSP contact app. You have to use an alternate contact app.
Click to expand...
Click to collapse
most of them are paid apps.
psychem said:
most of them are paid apps.
Click to expand...
Click to collapse
Yes but you choose the one adnd you pay it once !
You know that devs need to live, eat, drink too, right?
Kéno40 said:
Yes but you choose the one adnd you pay it once !
You know that devs need to live, eat, drink too, right?
Click to expand...
Click to collapse
yes but thats just digression.
a contacts app is like the engine of the phone. if devs are busy doing hifi stuff like uber and caf and viper and layers and whatever else at least first get the basics right with a proper contacts app.
Or you could have your Google account organized to have a group with mobile contacts only. And then select to display only that group (or another one you might want). I have that so I don't need that option. You probably have everything mixed up (emails and mobile numbers)
migueldbr said:
Or you could have your Google account organized to have a group with mobile contacts only. And then select to display only that group (or another one you might want). I have that so I don't need that option. You probably have everything mixed up (emails and mobile numbers)
Click to expand...
Click to collapse
if google provided a way to sort contacts by phone number i would have done it. it just gives option to sort by first or last name.
Since I bought my very first Android phone back in 2011 (Samsung Galaxy Ace if I correctly recalled), I never stored my contacts list in local storage/SIM card anymore, because it's simply not safe and can be lost anytime. It's better to sync your contact list to your primary Google account and you can have it on any phone you own.