milliways f I'm signed into the Play Store under different Graphene OS user profiles, each with a different gmail account, is Google able to detect both are signed into the same device and therefore correlate the two gmail accounts?
I'm sure this has been covered before but I couldn't find a definitive thread on the subject.
What would count as "definitive"?
Somebody working at Google could in theory provide definitive evidence that this is possible, but that doesn't seem very likely. It would be difficult for anybody to provide definitive evidence that it's impossible.
milliways I'm assuming that the Android ID, Device attestation keys, IMEI, or some other low-level common identifier will reveal the shared device to Google, but I haven't been able to confirm that.
Personally my "favorite" candidate for suspicion would be the "media DRM i.d." (Issue #2314). But it's not clear to me that this is the heart of the matter.
If two profiles are on one device, but both profiles go to sleep and wake up at the same time, and both profiles are active on the same Wi-Fi networks at the same times, and both profiles have the same battery level at the same times, and both profiles have the same amounts of free storage at the same time, etc., they are probably on the same device even if hardware identifiers can't be sampled.