Android is going to be adding developer ID verification for any developer that wants their app to be sideloaded onto more than 20 devices.

You might be wondering: how are they going to track that? Well it turns out they already have been. Google Play Protect is sending the hashes of the apps you install back to Google's servers.

Your unique device identifier, your account info, and the apps you run are stored on Google's servers, even for a local install of a sideloaded app.

Imagine you live in a country with an authoritarian government and you are a dissident using @torproject. Congrats, the government now has the ability to find you by forcing Google to comply with a legal order for information about all people that have Tor on their phones.
@Savagejen @torproject does fdroid get around this? My guess is no, but I thought I'd ask.
@quinn @torproject No. You need a degoogled phone, or a phone without play services. Fdroid alone doesn't solve the issue. They are trying to fight it legally though.

@Savagejen
what's the difference between degoogled and without play services?

@quinn @torproject

@ari @Savagejen @quinn @torproject
Degoogled means removing ALL of Google-only stuff, not just Play Services.