how do I stop apps communicating with each other?

b3_k1nd_rw1nd

I was reading through the FAQs for graphene and came across this sentence on https://grapheneos.org/faq#non-hardware-identifiers

The advertising ID is a Google Play services feature not included in the baseline Android API, so it isn't an API included in GrapheneOS. The advertising ID is unique to each profile. It isn't unique to each app signing key like ANDROID_ID, but that makes little difference since apps within the same profile can communicate with each other with mutual consent.

So as it says, no amount of permission toggling can get between 2 apps talking to each other and sharing data short of apparently putting them in separate profiles.

Thing is, I tried to use profiles a while back when I was first setting up the Sandboxed Google Play store on my grapheneOS. But something that made me undo that is that, let's say I am in transit and I have google maps telling me where I am and I am trying to listen to something on spotify in another profile. the phone didn't seem able to accommodate that. it seems you can use only one profile at a time. I just want to clarify that that is indeed the case and a limitation of profiles and maybe there's another way to stop apps talking to each other or maybe profiles can do what I want, I just didn't know how to configure it correctly?

missing-root

Profiles are overkill. Poorly only two-dimensional, but Shelter (F-Droid) can activate and manage the work profile. There you can isolate apps nearly as well (maybe profiles will get different localhost networks in the future afaik) and this will not happen aymore.

Work profile is great. You can put the bad apps in there and deactivate them when not needed, all GUI.

GrapheneOS really needs to advertise these usability features. You can also install the sandboxed Play services only there and deactivate them like that.

You cannot have offline Google Camera with gcam service provider and gcam photo preview though, poorly, as the APP IDs are the same.