Study: Android and iOS transmit telemetry even when devices are idle or users opt out; Google collects 20x more data from Android than Apple from iOS
Academic research published last week looked at the telemetry traffic sent by modern iOS and Android devices back to Apple and Google servers … Source: School of Computer Science & Statistics, Trinity College Dublin .
Context & Ripple Effects
The study places operating-system telemetry alongside a longer record of data flows that users cannot fully control: an earlier investigation found Google apps retained location data even when Location History was paused, while later research reported iPhone usage data despite the iPhone Analytics setting being off. location data retained despite a paused setting and iPhone analytics traffic despite an opt-out make the platform-level finding more consequential.
The reported gap between Android and iOS also sits below the app layer. Related coverage found popular apps sending personal and sensitive data to third parties, including iOS apps transmitting identifiers after users opted out of tracking. iOS apps sending identifiers after tracking opt-outs
First-order effects
- Android users face substantially higher reported telemetry collection than iOS users in the study, including when devices are idle or users have opted out.
- Google and Apple’s opt-out controls are challenged by evidence that telemetry continues after users invoke them, with the study reporting a far larger volume from Android.
Second-order effects
- Apple’s privacy positioning faces scrutiny beyond third-party app tracking because the related coverage also identifies Apple-controlled iPhone analytics traffic after an opt-out.
- App-level privacy controls become less meaningful as a standalone safeguard when platform telemetry and third-party app transmissions can persist through separate data paths.
Third-order effects
- The pattern points to privacy governance shifting from individual settings toward accountability for the full stack: operating systems, first-party services, and embedded app data flows.
- If platform and app exceptions continue to accumulate, the competitive distinction will rest less on the existence of opt-out labels than on whether companies can demonstrate that those controls stop identifiable transmission.
The trend: Mobile privacy is moving from consent-interface promises toward scrutiny of the telemetry that operating systems and apps transmit despite those choices.