what information can an app get on my phone with minimal permissions given?

b3_k1nd_rw1nd

Hello,

If I were to install an app from a company known for harvesting data, let's say something Facebook related but I don't give it any permissions besides "Network", what data can it harvest on me?

I assume it can't access my call logs, contact, locations, etc.

But what can it access/glean about me/my phone besides what I do in the app itself?

Is the answer to this documented anywhere?

other8026

b3_k1nd_rw1nd this section of the website can answer your question: https://grapheneos.org/faq#non-hardware-identifiers

b3_k1nd_rw1nd

other8026 thanks for the link.

apps within the same profile can communicate with each other with mutual consent

do you know if there is a way to tell if 2 apps have given each other mutual consent to communicate?

other8026

b3_k1nd_rw1nd not that I know of without reading an app's code.

b3_k1nd_rw1nd

other8026 then unless I am missing something, if I were to (for example) install facebook messenger or facebook onto my grapheneOS phone and only give it access to "Network", it seems like facebook can't really harvest any user-specific data from my phone on me to sell to third-parties, no?

the only data it would have on me is what I do in the app itself.

other8026

b3_k1nd_rw1nd yes, and also things listed here: https://grapheneos.org/faq#non-hardware-identifiers