Cross-profile app finger printing

gos_user11

Scenario:
An app is downloaded through Playstore(logged in) from owner profile, then disabled in owner profile and used in a second user profile(with Playstore disabled and play services enabled for FCM, NOT logged in).
Can that app possibly retain some fingerprint from when it was installed in owner? and can it possibly know which Gmail account(Playstore in owner) it was downloaded from?

other8026

gos_user11 there's some data that you can get from pm. I'm not sure if any special permissions are required to access the data, though. Besides some timestamps (which don't matter anyway if an app is keeping track of other installed apps), there's nothing there that I can find that wouldn't already be publicly available about the app anyway, so it's not really what I'd consider sensitive information.

Some of the app info that you see in Settings comes from these two:

gos_user11 can it possibly know which Gmail account(Playstore in owner) it was downloaded from?

gos_user11

maybe this has been discussed before? I could not find it using the forum search tool.

gos_user11

I was worried that maybe Google Play Store attaches some ID to apps which the apps can then use to identify my Gmail, even in other user profiles. But I guess that is not how it all works.
Thank you other8026!

missing-root

No afaik.

Apps have APP_ID's that are cleared even on reinstall, and for sure not kept when installing the APK (that is the static part of the app that doesnt change, is read-only and signed by devs) on another profile.

They could track you via your local network though, just not retain any data. I think the "surrounding devices" permission is needed for this

p338k

There is the Media DRM ID.

https://github.com/GrapheneOS/os-issue-tracker/issues/2314

gos_user11

p338k
This seems like a much more serious issue than I was worrying about.