Is there a way to stop in apps trackers like Google analytics and similar?

dlb

Many apps have inbuild trackers. Is there a way to stop them from collecting your data?

Please post some suggestions. Thanks

guerrillas

dlb
Don't use those apps and use apps that respect your privacy or use DNS based blocking.

[deleted]

dlb deny them network access and isolate them from others that do. If it affects their intended functionality, look for PWA alternative in browser with buil-in tracker/analytics blocking capabilty. If that is not available, look for an alternative app that doesn't contain "proven" trackers and has a good track record. Redirect and obfuscate your internet traffic. Everything comes at a cost of functionality or ease of use. For example you could get a weather forecast through your trusted built-in weather app, connected directly to your ISP or like me via open source weather app connected through Tor or you can view it anonymously on Startpage. Results near enough the same, but the metadata completely different.

robovoice

dlb Before i install an app i check this site

https://exodus-privacy.eu.org/en/

How many trackers are built in and which ones are listed.

User2288

dlb

Ad blocking apps that occupy the VPN slot can do what you want. NetGuard for example allows it per app. It also allows you to see every connection the app is making (I've heard, I haven't used this app yet).

There are also other similar DNS blocking apps, but not all of them have the per app option. There are others like Adguard, Blokada, etc.

Your other options as others mentioned are using an adblocking DNS server, as well as using NextDNS. Mullvad and Adguard and a few other DNS providers provide ad-blocking DNS servers.

dlb

guerrillas it is difficult to function today without WhatsApp for example. It has Google Analytics inbound

[deleted]

I just want to say thanks to everyone for your thought provoking discussions and links to certain resources I possibly would not find on my own. Keep going! Also I want to thank creators of an OS where for the first time I think that I am the one in charge of what I want the world to know about me. I wish them many successes and a lot of support in making our mobile devices which are our first port of call when it comes to building our knowledge about the world more secure. It is a pity that so many people though simply do not care about how the data they are providing are handled. And it is a shame that saying "piss off" to Google and [insert a name of service here] with their intrusive data harvesting policies along with trying to build relationships with others in this hostile environment in turn just identifies you as more of a target. There is no privacy without security, but with GOS I have the security box more or less checked. Time to work on my privacy. I will be watching from the back row now. Good luck to all of you!

[deleted]

dlb
Yet, a lot of people function quite well without it.
I still do not understand this approach about this kind of apps, when you know they are up to no good and still you still try to find a way... It is like laying the newspapers on your carpet, because you know that the thief that "visited" your home many times before will come again and again, so the newspaper would at least keep your carpet clean... WinWin?

When even a co-founder of WhatsApp warns against using the app after Facebook took over, it is a no brainer. Those Google analytics in WhatsApp would be the smallest issue with this app.

OpenSource-Ghost

Use AdGuard DNS servers ("dns.adguard.com" for DNS over TLS, "94.140.14.14" and "94.140.15.15" for plaintext, "https://dns.adguard.com/dns-query" for DNS over HTTPS). They block all Google Analytics domains.

dlb

OpenSource-Ghost thanks for the tip. But you gave me to much Information at once. Could you further explain do i use all of that you written or what in what conditions etc.. as I saw I can only add one DNS link in settings.

f13a-6c3a

OpenSource-Ghost I dont know if the DNS server you posted was used in the past or if it still ok to use today but, according to the AdGuard site, public DNS server is dns.adguard-dns.com

dlb

OpenSource-Ghost "https://dns.adguard.com/dns-query" for DNS over HTTPS

This one I can't add to my private dns

f13a-6c3a dns.adguard-dns.com

This one works.. So theoretically this will block trackers in WhatsApp? Or it will definitely

zehyani

There is an app called Tracker Control. I had tried it and it seemed to work. I cannot give more advice about it as I do not know. It does seem to identify and block (i hope) trackers.

OpenSource-Ghost

dlb

In Android Network Settings, find Private DNS Server option, and input "dns.adguard.com" without the " " into it. Make sure the dot is ticked for "dns.adguard.com" line, not for Disabled or Automatic line. You can use "dns.adguard-dns.com" as well. They both link to secure AdGuard DNS servers.

If you use a good browser, like Bromite, then you can find Secure DNS options there and input https://94.140.14.14/dns-querty , but that affects only Bromite browsing, not other apps, not WhatsApp.

if you use a VPN app that allows you to input your own DNS server settings, then input: "94.140.14.14" and/or "94.140.15.15" in VPN app settings.

AdGuard DNS servers filter out Google Analytics domains, as well as, some other WhatsApp tracking domains, such as dit.whatsapp.net (a domain for De-Identified WhatsApp Telementry). Blocking those domains doesn't prevent government from tracking you over WhatsApp... WhatsApp is a subject of live tracking by authorities via "Issuance of an order for a pen register or a trap and trace device". Not even a VPN can help you when whichever service itself spies on you... Stick to Signal.

OpenSource-Ghost

f13a-6c3a
The best way to use DNS over HTTPS is via IP - https://94.140.14.14/dns-querty. That client doesn't have to resolve DNS server domain itself over plaintext initially, forcing even initial connection to be encrypted.

OpenSource-Ghost

f13a-6c3a

dns.adguard.com still works for me...

[deleted]

To return back to the original question, it is very difficult to stop apps/websites from collecting and relaying data unless you use a very specific and complex set of tools. Whatever mechanism employed to block/disable these from fulfilling their function will always be one step behind the opponent since new methods of harvesting and analyzing user data is constantly being developed. So the only thing that makes sense is to reduce the attack surface (and only use services that are absolutely necessary). Unfortunately I do not have time to elaborate on my statement but I will try in the future.

Some reading for you today:
https://ico.org.uk/for-organisations/guide-to-pecr/guidance-on-the-use-of-cookies-and-similar-technologies/

https://research.aimultiple.com/floc/

pixel6a

You can use Netguard (Pro) to prevent tracker links via blacklist procedure. This means that all connections are blocked first. After that, only the connections of an APP are allowed in use, which are absolutely necessary for the function fulfillment - Done!

dlb

pixel6a so this actually works as you said? Or it writes like that on their website

Does this occupy my VPN slot?

User2288

dlb Does this occupy my VPN slot?

Yes it does.

You can use something like NetGuard and also use an Adblocking DNS server at the same time. The DNS blocks ads for you, while NetGuard works like a firewall and allows you to block even more connections per app.

However you wont be able to add a VPN if you use something like NetGuard because it occupies the VPN slot.

If you need to have a VPN and the VPN's adblocking is not enough for you, then I think your only other option is to have the VPN and use an external DNS blocker such as NextDNS. NextDNS will block custom addresses but can't do it per app.

Resurr

OpenSource-Ghost How does proton vpn net shield work in this case.?
What vpn providers allow custom dns, as I have understood proton and mulvad with cash payments are the right way to go

OpenSource-Ghost

Resurr

I don't know about ProtonVPN or other VPN providers, but NordVPN definitely allows users to set custom DNS server addresses and has built-in settings for it. Since NordVPN uses Google Analytics (and is quite transparent about it in its policies), using it with AdGuard DNS (to block Google Analytics and other tracking domains) makes a lot of sense. AdGuard DNS operates from Cayman Islands and as such, offers plenty of privacy. Most of its traffic is encrypted.

uid0gid0

Resurr

All of them do - if you set it up correctly.
Just don't use their (cr)app, install the native Wireguard/OpenVPN client and import the configs.
That way if the provider's official app has some shady tracking in it, such as the case with all those
NordVPN/SurfShark/PIA, you won't be affected since you are just using the tunnel, not the app.