If you use Signal, Discord, or any other messaging app and you DON'T want Google or Apple monitoring/reading/learning from your messages, follow these steps.

Android:
1. Open Google app
2. Tap your profile photo
3. Settings
4. Google Assistant
5. "Your Apps"
6. Choose the app (e.g., Signal)
7. Toggle "Let your assistant learn from this app" off

iPhone:
1. Settings
2. Apps
3. Choose the app (e.g., Signal)
4. Toggle Apple intelligence or Siri settings to off (β€œlearn from this app”)

Note that your Android instructions may differ depending on your model. Those worked for my Pixel, but please feel free to chime in with directions for other models.
@EnfysBook I'm just curious whether this applies if you have the Google app disabled on your Android phone. I already have it disabled. Does that mean I need to enable it to change these settings, or is it already not monitoring my activity because it's disabled?
@MLE_online No idea, I'd check if I were you to see if it's toggled on for those apps.

@MLE_online

@EnfysBook Ditto. I have both the Google and Assistant apps disabled on my Android phone, and I'm loth to re-enable them just to tweak a configuration option unless it's really necessary.

@only_ohm @MLE_online @EnfysBook You probably have to reenable then. The settings control tracking across many different google services, and I think very little of it is tracked by the Google app itself.
@only_ohm @MLE_online @EnfysBook
I had already disabled the assistant on my phone. I followed the instructions above to disallow the assistant to suggest each app, or to allow g asst. To use it for training.
@MLE_online @EnfysBook I would say, if assistant (the G app) is turned off, deactivated or deinstalled you don't need this settings. If you turn it back on, activate it or install it again, it could be that the setting is on again. So just leave the assistant off, then it cannot learn from you.

@r3vilo @MLE_online @EnfysBook I have never turned it on and all settings show it is not activated BUT I had to UNCHECK all of the apps it is "learning from"

So, yeah you have to opt out even if you never turned it on

@r3vilo @MLE_online @EnfysBook
I can confirm that. I haven't activated the assistant, and the setting was off already.
@MLE_online @EnfysBook maybe it depends on the Android version. I had already disabled Google Assistant and still could access that option per app
@EnfysBook
And remember to check those settings after every update as things tends to change.

@kaaswe @EnfysBook Ok, silly question. Since Google will likely just "oopsy-daisy" silently re-enable this AI oversight of apps like Signal in future Android updates, doesn't that really compromise Signal's integrity as a "private" app?

How "private" is an app like Signal really, considering it's default shoulder-surfed by Google's AI on ~95% of all Android phones, where the normies of the world *aren't* doing the locking-down (attempting to retain privacy - but isn't the horse already out the barn by that point?), as suggested in the OP?

#infosec #signal #android #google #privacy

@sbb

On stock #Android NOTHING is private.
Use a decent #CustomROM and you're fine.

@kaaswe @EnfysBook
#privacy #google

@sbb @EnfysBook
It’s not really something Signal can control, as you say it’s the OS. You have the same problem on iPhone too, or running Signal on your computer.

In this case I’d say for now, iPhone is more secure in concern for privacy if you disable Siri, tomorrow this could change.

On a computer. Run Linux. Don’t use windows.

@sbb @kaaswe @EnfysBook I imagine that Signal's messages being ALWAYS e2ee should prevent it, it's not lioke telegram and other messaging apps that have encryption off by default

@Devourer_ITA @sbb @kaaswe @EnfysBook Not necessarily. The Google assistant is accessing it on the end-client, where it gets decrypted. After all, it's "end-2-end" encryption, not "always encrypted". Else you wouldn't be able to read the messages yourself either.

If you can open it there, the OS itself can technically too. Be it officially intended that way or by some sneaky methods behind your back. So if you wanna be safe you need to ensure you can trust the OS not too.

@sbb @kaaswe @EnfysBook This is a point Naomi Wu has been making for years: any app like Signal is only as good as it's runtime environment. In HK and China a real problem is people installing third party keyboards onto their devices which leak data to the government. Better use education of these risks within #Signal would be valuable even if that's hard to do.

@nygren @kaaswe @EnfysBook I agree with you and Wu here. It's just that it dawns on me that there is little incentive to advocate #Signal any longer, as any alternative to say, #WhatsApp.

If you use #WhatsApp, #Meta spies on you. If you use #Signal, guess what, #Google/Alphabet or #Apple are the ones spying on you instead (with a small minority of users opting out - that is until an "oopsie daisy" re-enablement undoes this opt-out as mentioned).

What privacy advantage does Signal _really_ have any longer, when such privacy loss afflicts both these apps - one big corp doing it or another?

@sbb @nygren @kaaswe @EnfysBook At least it stops Meta spying on you directly.

@sbb @nygren @EnfysBook

Signal still has very much high value compared to say WhatsApp, because Signal is outside US, so the privacy for your account is much better.

Edit: This information is not correct. Signal is a US based company.

@kaaswe @sbb @nygren @EnfysBook Signal is not "outside US." The Signal Foundation is a US 501c3 nonprofit. The founders/CEO and board of directors are all US-based. And it is hosted on US-owned cloud computing platforms (e.g. AWS).

@mbrubeck @sbb @nygren @EnfysBook
Yes you are correct.

I'm sorry I don't know where I got that from.

@sbb @nygren @kaaswe @EnfysBook WhatsApp also lets the assistant access itself tho, so that one is double tracked (by both Google and Meta). So using Signal is still one big tracker less, and every bit counts when it comes to privacy & security.

But other than that. Signal itself is not unsafe, the OS is. The only solution for that is using a different OS. Signal is good privacy-wise, Android/iOS is not.

@sbb @kaaswe @EnfysBook Signal is great and I strongly support using it over others. But it's critical to understand your threat model and respond holistically. There's lots of really bad security advice going around right now, as always. No one solution will be appropriate for every situation. Sometimes the best solution is to keep things off electronic devices entirely.
@EnfysBook I strongly recommend simply disabling the Google app altogether. At least that was possible on my phone. In fact, I've disabled them all except the Play Store and Play Store Services. But only because I got tons of errors when I tried disabling those. πŸ˜…
@veronica @EnfysBook The Google app controls the tracking settings for other google services. If you disable the app, you are still being tracked, but you've disabled your only control panel for it.

@pianosaurus @EnfysBook I still have access to all those settings. They are under:

Settings > Google

Which is not the same as:

Google > Settings

Yes, they are bad at naming things.

@veronica
Thanks! I have an andriod 10 and this worked
@veronica @EnfysBook Huh. I'm not finding the app activity tracking settings there on my phone, but there definitely is a big overlap.
@pianosaurus @EnfysBook Well, if the app isn't enabled, you're not using it, so it is not collecting your activities in it. You can turn of the activities tracking on the account though, which can also be reached from the settings page. I'm pretty sure the account settings are just wrapping the online setting you will find from a browser. It certainly loads them differently on my phone.

@veronica @EnfysBook I'm pretty sure the app activities aren't tracked by the Google app itself, so I'm not sure about the "not collecting your activities in it" part. I'm curious though, so I'll try to do some experiments later.

You are right that the same settings are available online: https://myactivity.google.com/activitycontrols/webandapp

Welcome to My Activity

@pianosaurus Your activities in the app itself must naturally be reported by the app. Since I'm not using the app, and it is prevented from running, it's not collecting anything?

Activities tracking is of course a global Google "feature", which can be disabled from the account settings, which can also be accessed from the phone without the Google app.

I don't understand the issue.

@veronica I think we're not on the same page regarding what "the app" means, since we are talking about multiple apps interacting. And also, for me, words difficult with cave brain.

There's the Google app, and the app being tracked. The example from OP was Signal. The activities that are tracked as far as I can tell, are when Signal started and stopped, where it was installed from, and which device it was running on.

My untested assumption is that this tracking of Signal activity happens unrelated to whether or not the Google app is enabled, and that the activity itself is reported to google's backend by some other OS service.

@pianosaurus It was you who claimed that the Google app controlled the tracking, and my entire point is that I don't think disabling the Google app makes any difference to what tracking you can disable.

If the tracking is specific to the Google app, then I don't see why disabling the app should let it continue. All general settings are available without the app.

To be honest, I don't really know what the Google app does, because it's the first thing I disable on a new phone.

@pianosaurus Mind you, Google has been caught red-handed at tracking even when permission to do so has been revoked. So all I'm saying is that I can still access and globally turn off the activity tracking across their services, and I've done so a very long time ago. They are all off.

@veronica I claimed it controls the tracking _setting_ (not that it is doing the tracking), before you correctly pointed out that you can disable this via the web too. I think we are actually in full agreement then. I'm blame myself for not making myself understood.

The caveat is that the per-app setting for the assistant (that the original post was referring to) doesn't seem to be available on the web. At least, I cannot find it.

@pianosaurus Yes, I cannot find that either, so I was wondering if it is the Google app that does that. It is clear that the Google app does data collection too. But again, I have blocked it since I bought the phone in 2021, and I have no idea what they've done with it since.

I'm also missing all the AI stuff they claim to have added in notices I get from them, so disabling the Google app seems to take a bunch of stuff with it.

I'm also on Samsung, who replace some things. πŸ€·β€β™€οΈ

@veronica
@EnfysBook

Same as you.
And life is not bad without this app!  

@veronica @EnfysBook
The Google Play Store app can be replaced by Aurora.
You can find it and other great apps in #Fdroid ( https://fdroid.org)
And it's #FOSS
F-Droid - DΓ©pΓ΄t d'applications pour Android libres et open source

F-Droid est l'écosystème de distribution d'applications libres et open source (FOSS) pour Android, où votre liberté d'utilisateur est primordiale. Découvrez notre boutique d'applications pour explorer l'univers des applications libres et open source et [learn](https://f-droid.org/about/) sur nos autres outils de distribution d'applications open source.

@veronica @EnfysBook I hope you appreciate how much absolute evil permeates the services library. It *is* the big back door.
@EnfysBook or get rid of all the Google stuff and install Lineage OS on your Pixel
@EnfysBook can confirm it works for the Fairphone 4
@EnfysBook Wow, I've been on GrapheneOS for a while and didn't know that the Google Assistant app was doing this now. That's absolutely insane.

@alisynthesis Honest question: why use GrapheneOS if you're just going to install and use all the Google spyware?

@EnfysBook

@apicultor @EnfysBook I don't install and use the Google spyware. Although even if you do use some Google apps, e.g. Gmail or Google Maps, it's still sending waaaaay less data to Google than stock Android.

@alisynthesis Ah, it sounded like you had Google Assistant installed! I misunderstood.

@EnfysBook

@apicultor @EnfysBook I used it years ago, but no longer. πŸ™‚

@alisynthesis I was once young and stupid too! But I'm not so young anymore.

@EnfysBook

@alisynthesis @EnfysBook totally insane - though not surprising - and you can't just disable google assistant all together or toggle the setting off for all apps - they've made it cumbersome do to it ... argh

@doktorlond @EnfysBook graphene is really great!

Edit: you have to have a pixel to use it.

@alisynthesis @EnfysBook I've been dreaming about a de-googled phone for long - but in denmark it's not so easy because so much authorisation is bound up on ios and android specific apps - all kinds of interaction with authorities and banking and getting messages from your kids school and and and ... I just spoke to a neighbor who had to skip it and buy a standard android because one of these apps we not running - it's really mad - big tech must love the danish goverment!
@doktorlond @EnfysBook That sucks. Yeah, even in the best case, degoogling has to become a hobby for a while when you do it. They are really, really dug in.
@doktorlond @alisynthesis @EnfysBook I installed LineageOS with microG on my Fairphone 4 the other day and the only problem I haven't solved so far is with in-app purchases. Banking app (Merkur) and MobilePay works just fine. I don't use any of the government apps, so can't say whether they would work. But I'm generally quite impressed with how few problems I have.
@decibyte @alisynthesis @EnfysBook right - I guess you will have mitid installed ... which I've also heard should be working - my neighbors problem was with the app they use to comminicate with their kids school, aula i think it's called - never heard which os he tried out by the way ...
@doktorlond @alisynthesis @EnfysBook Nope. I live a decent life without the MitID app. The one time code generator is great: https://www.mitid.dk/en-gb/get-started-with-mitid/mitid-authenticators/mitid-code-display/
MitID code display

@decibyte @doktorlond @EnfysBook I feel like "I live a decent life without X app" should be some sort of modern mantra/affirmation
@decibyte @alisynthesis @EnfysBook ah that thingy - forgot about that one - alright cool
@decibyte @doktorlond @EnfysBook Nice, lineage looks really cool. I've had a few similar problems on graphene and have pretty much always just hit uninstall when I come up against that stuff. I've always found another way to do whatever I need to do, and if it's that invasive that I literally can't make it work on graphene, fuck em. (This is not to say that's an approach everyone can take. I know that there are requirements in life and sometimes they suck and are not fair!)
@decibyte @doktorlond @EnfysBook You can actually force graphene to do a lot of things that it doesn't do on the surface, although I do think lineage is probably a little more friendly to normal apps in general.
@alisynthesis @decibyte @EnfysBook yeah - sure - the problem is if all your surroundings assumes that everything works for you then suddenly it's not good enough checking your messages or whatever on a desktop in the evening because everybody assumes that you've gotten your messages instantly - stuff like that