Questions about GSF

Titan

Hello everyone, I have been using GOS for a short time and I have read a lot about its operation and advantages, the truth is that I am very happy.

I have read in many forums about GSF services, but I have some doubts, maybe you can help me.

At the moment I only have a main profile, with the basic Aurora Store Apps. I have seen that some Apps require GSF services, specially the banking Apps.

I have some doubts...

If I install an App that requires GSF, for example Paypal, but I do not install the GSF in the main profile, if Paypal works fine, I understand that the Apps in the profile are in a Sandbox and Paypal can not communicate with other Apps or capture data from the phone... right?

Is it safe to install an App that requires GSF in the main profile, or better to create a separate profile for all of them?

I have read that even if in Aurora Store, an App indicates that it requires GSF, the default App already includes the libraries inside to work, these Apps can install some special Google service on the phone without us knowing it? And communicate with Google?

Thank you all very much and Happy 2024.

Dumdum

Titan Paypal can not communicate with other Apps

IPC is still a thing. As long as you use apps that aren't likely to communicate with PayPal (e.g. open source apps) you'll most likely be fine.

[deleted]

Providing that you gave any such app network access, it may perform some form of tracking but since you don't have Google Play Services installed and you are not logged in, it would track a random device. Since the collection of hardware IDs is made harder from upstream AOSP and GrapheneOS hardening, this will make any process of tracking harder. Now, there are supposedly some IDs that persist either between users or GOS installations (you might do a little search through the forum for threads that mention it) but the real risk of potential linkability with existing tracking records lies in entering personally identifiable information, giving apps with network permission too big access to your file system that may contain any such information available for collection and or Inter Process Communication (this issue is IMO over inflated). Many apps say they do require GSF in order to work, yet a lot of them will work fine without it. It is in your own interest to keep as tight grip as possible over permissions that you give apps to perform necessary tasks and if you are unable to do it safely or lose functionality, you should find an alternative if one exists to get the job done.

Hat

[deleted] Inter Process Communication (this issue is IMO over inflated).

I'm agree it's something interesting for companies with several apps published. And even if they share data probably it's not sensitive one.

However there isn't statistics about this, no report about the content traveling with IPC. The google's stuff reduce the cost for small app projects, and for most people it's impossible to know what information enter or leave the phone. Some users in this forum have reported ads on apps even without network permission.
I think the planned feature App Communication Scopes would be useful as long you don't need to deal with Google play services. For now separate profiles seem the best feature to increase app isolation.

So I wish for 2024 to all GOS users to find the right balance between ease of use and privacy.

Titan

Thank you very much for your answers, they have been very helpful.

There is an answer on Reddit from 2 years ago, in case you might be interested:

https://www.reddit.com/r/GrapheneOS/comments/psxesc/how_are_apps_that_require_google_services/

Best regards.