I created a very basic React Expo application and compiled it to an Android APK. In the Google Play Store I stated that my application does not collect any user data. To be save I installed the APK on my Android device and searched for trackers with TrackerControl. I was shocked to see that the App is sending data to Amazon and Facebook, although I am 100% sure that I did not implement this!
Is there a way to get rid of this dammit sniffing? I can't put in all the effort to reimplement everything in another framework...
Update: Let me give a reproducible tutorial. First I created a simple expo navite application in Ubuntu 20.04 LTS with
expo init my-app
cd my-app
Then I build the APK with
expo build:android -t apk
This will print a web link to the console from where I can download the APK after about one hour. I Download it directly with my Android Phone and install it. Then I check which Tracker control and it recognized a lot of tracker software!
Translated to English: "Recognized tracker libraries:
- Amplitude
- Facebook Ads
- Facebook Analytics
- Facebook Login
- Facebook Share
- Google AdMob
- Google Analytics
- Google Firebase Analytics
- Google Firebase Analytics
- Google Play Install Referrer
- Segment "
And it immediately starts sending data to Amazon.com and Facebook.com:
It shows writes that sending data to Amazon.com is necessary (which it is not!) and the social tracker for Facebook which I also never installed! How can I remove all these trackers and at what point are they added? Maybe during the build process? Because it builds on some server where I lose control about the build process.