I want to preface this by saying that yes, I know that Instagram is bad. I am planning to get rid of it in the future but as of now I have to keep it for communication with people who are only on that platform.

So I have grapheneOS, use protonvpn (free version), use mull as my browser, and do not have google play services enabled on my phone. I do have some apps downloaded through aurora store such as Instagram, whatsapp, mychart, and mint mobile, but the rest came from f-droid.

I have noticed multiple times that after having private conversations on matrix, I get Instagram content in my feed that is scarily accurate to the conversation I had on the other platform immediately after. I know that things discussed in Instagram direct messages and group chat will give suggested content based on those conversations, but I get stuff that that is very specific to what I have ONLY discussed on matrix and didn’t look up via my browser.

So my question is how is Instagram doing this and what can I do to mitigate the spying it’s doing on my other apps. Thanks.

  • umami_wasabi@lemmy.ml
    71·
    3 months ago

    Probably because your friends search about it when they are not having things separated and based on the social graph that IG thinks you’re interested in it too?

      • umami_wasabi@lemmy.ml
        11·
        3 months ago

        That can be your friends’ friend/family doing the search. The social graph is never being 1 degree only.

    • some_guy@lemmy.sdf.org
      1·
      3 months ago

      Plus if you were in the same location they probably lean harder on the things that overlap. They have so much data about you that this is easy for them to do.

  • wowwoweowza@lemmy.ml
    111·
    3 months ago

    Just read most of the comments here and I feel nauseous about this.

    My job encourages instagram use.

    I think the only way around having our devices spy on our spoken face to face conversations is to have a mobile device with a removable battery. Who remembers the HTC EVO and all the phones like those? Anyone know of a good phone that offers the removable battery?

    • The Cuuuuube@beehaw.orgEnglish
      3·
      3 months ago

      I only know about Fairphone and Teracube. Having owned a Teracube I recommend not getting a Teracube

        • The Cuuuuube@beehaw.orgEnglish
          3·
          3 months ago

          Hardware specs were too constrained for regular daily use. The software updates are always way behind schedule, and the company is too small to support their warranty (I really do think they’re doing their best to do what’s right, but they’re just super slow on turnaround for support)

  • dwindling7373@feddit.itEnglish
    10·
    3 months ago

    It happens to me as well, in my instances it’s most likely the social network they tied me to. Some friends of mine are heavy Instagram users and whenever I hang out with them I get almost real time relevant ads on my isolated Instagram.

  • Zak@lemmy.world
    6·
    3 months ago

    I don’t think Instagram can read your Matrix conversations, but may be able to predict your interests with fancy algorithms or buying information from data brokers, even if it’s related to things you did on another device.

    If you want to be more sure it’s not spying on your phone, uninstall the app and use it through your web browser.

    • countrypunk@slrpnk.netOP
      1·
      3 months ago

      I might just have to do this, although having a VPN and accessing it on desktop might flag my account and/or lock it. Would having Instagram on my old phone and taking it off my current one help?

      • Zak@lemmy.world
        1·
        3 months ago

        Phones also have web browsers, and Instagram is usable that way (several years ago, it was not). It is possible that privacy protections will look like automated behaviors to their systems.

        Using an app on a device that’s used for little else and has minimal data stored and apps installed on it also limits the potential for data leaks, though probably not as effectively as the browser, particularly when your browser is Mull.

  • chirospasm@lemmy.ml
    5·
    3 months ago

    Is IG on a completely different profile in GrapheneOS, or is the app installed on the primary profile where you use your other apps? GrapheneOS’s profiles completely isolate from one another.

      • chirospasm@lemmy.ml
        1·
        3 months ago

        Use the user profiles feature of grapheneos to make a “social” profile and only use that to access Instagram / facebook.

        You’ll want to consider isolating IG from your primary profile, to start. The above user’s suggestion hits the nail on the head.

        Once the profile ks created, and you’ve installed IG, you’ll want to deselect the option in your Manage Profiles settings on GrapheneOS to ‘Allow running in the backgroud.’ This way, you can ensure the app is entirely stopped until you want it open.

        Another consideration may be to turn off your Bluetooth when it’s not in use, as well: BT emits an ‘address’ of sorts that, if another IG user has enabled BT access on their IG app, may be able to detect your phone and track a conversation knowing you are in the other user’s vicinity.

      • biscuitswalrus@aussie.zone
        1·
        3 months ago

        This will be able to do cross site (apps) information collection within other sites (apps) in this profile. The way this works is one of many, and complicated so: https://blog.mozilla.org/en/products/firefox/cross-site-tracking-lets-unpack-that/

        The idea of profiles is to stop this behaviour and other behaviours through isolation. Along with other practices makes up a privacy-in-depth (layered) approach. It doesn’t solve everything.

        For example if you are in the same house sharing an internet connection, it is possible to say “at least one outstation in this house (IP) are interested in ‘x’ and therefore I should target everyone in that house because people who live together are interested in similar things”. Even if you isolate, you could still teach a data hoarding company like meta you like something simply by them by necessity needing your IP to communicate.

        Some people try to say ‘I’ve got a VPS with a VPN to communicate all traffic through’ but that doesn’t add any privacy, your exposed VPS with its IP is an IP only for you and still all collected information about you would be able to be thumbprinted to that IP across many services (eg instagram whatsapp and Facebook). A public VPN provider in this case adds a layer of obfuscation since you can change your IP rapidly and it’s an IP that’s shared with other unrelated users. Which is exactly why many services like reddit are banning access from them under the guise of “oh training data leaks from VPN, and we want to sell it” bs.

        Anyway it’s a tough world out there to be private. I’m at an age where after 10 years without Facebook and I never had instagram, everyone knows I’m contactable via sms. It’s not secure, it’s barely private, but I don’t really “chat” except at the pub. So that’s where they ask me to visit. Lol.

  • rhymepurple@lemmy.mlEnglish
    71·
    3 months ago

    Its really hard to tell from a technical perspective, especially without having closely monitored all of your digital activity (and those that you have been in close contact with) in the days/weeks leading up receiving the ads. Some things that Meta could have done (in varying degrees of realism) include:

    • read anything you downloaded from your Matrix client, like file attachments
    • read your notifications if they contain any contents of the conversation
    • read your clipboard if you copy/pasted anything into/out of a Matrix client
    • actively participating in the room and associated your Matrix ID to your Meta account(s)
    • scraped the contents of the room if it is public and unencrypted
    • others in the Matrix room saved your Matrix ID in your contact information within their contacts
    • Meta is recording your screen outside of Meta’s apps
    • a Meta library is used in another app/service on your device that is sharing information back to Meta
    • read an attachment that you downloaded elsewhere then shared on Matrix
    • Meta read screenshots you or others took of the conversation
    • Meta has a back door in the Matrix server or client software used
    • the administrators of your Matrix home server (or the administrors of any other home server in the room) are sharing non-encrypted information to Meta to offset hosting costs
    • Meta is running a home server of a user in the room
    • you or someone you are associated with clicked on a link shared in the Matrix room that contained a tracker or led to a site that contained a tracker

    Its really hard to comprehensively and conclusively avoid all “spying” that Meta/Instagram could do to you. The best thing that you could do is something that many people aren’t capable or willing to do - not install any Meta software, don’t use any Meta services, block any Meta IP addresses and/or domain names, and advocate that those around you do the same.

    Realistically, the best advice that youre going to get has already been said. Use the web browser instead of the app as much as possible, ideally in a different browser and/or user profile. If you must have the app installed, keep it in a separate profile and kill the app and/or profile whenever it is not in use. Review all of your security and privacy settings in all Meta apps. Review any apps/services you allowed Meta to connect to/from (and the security/privacy settings of those apps). Reduce the amount of information that you enter/share on Meta platforms. Review the other users that you are connected with on Meta’s platforms.

  • Pasta Dental@sh.itjust.works
    4·
    3 months ago

    If you want to be extra safe I guess the best way would be to use the web version of Instagram with ublock origin installed. If you can find a way to use Firefox containers on Android as well it could really restrict what they can access.

  • Atelopus-zeteki@kbin.run
    172·
    3 months ago

    whatsapp is owned by Meta. I did a quick DDG search to see if I was correct and got this:

    “Meta owns several companies, including Facebook, Instagram, WhatsApp, Messenger, Threads, Meta Quest, Horizon Worlds, Ray-Ban Stories, Mapillary, Workplace, and Portal (discontinued).”

    I’ve been working to get the people I communicate with on Signal.app, instead. Other more informed individuals may be able to make additional suggestions.

  • Orbituary@lemmy.worldEnglish
    813·
    3 months ago

    I have to keep it for communication with people who are only on that platform.

    This is always the excuse. Same one people use for FB.

    Drop it. If you want to keep talking to them, get their number. I’d they don’t give it to you, they’re not your friend and not someone you need to talk to.

    Stop feeding the platform that feeds your addiction.

    • GolfNovemberUniform@lemmy.ml
      52·
      3 months ago

      If you want to keep talking to them, get their number. I’d they don’t give it to you, they’re not your friend and not someone you need to talk to.

      From my experience this is completely false unfortunately.

          • Wilzax@lemmy.world
            21·
            3 months ago

            If you can lose a friend over putting your foot down about what platforms you want to message them on, they’re not a good friend.

            It’s the kind of sad situation where you have regrets no matter what you do. If they’re unwilling to find a different way to contact you when you leave Instagram, they’re probably unwilling to do a lot of things for you. You would regret relying on them when something actually hard happens and they leave you hanging.

            • GolfNovemberUniform@lemmy.ml
              21·
              3 months ago

              Such case is possible but I saw different. Maybe I am wrong here idk. The thing is you not willing to stay on the platform they want to stay on actually makes you a bad friend for those that don’t know anything about privacy but it’s besides the point.

            • countrypunk@slrpnk.netOP
              1·
              3 months ago

              I think I can get them to switch when I leave Instagram, which is why I said I’ve only got to keep using it for a set amount of time. The issue is really that these are aquantinces that will become friends once I move and get to hang out with them IRL.

    • countrypunk@slrpnk.netOP
      102·
      3 months ago

      Dude, you don’t know anything of my situation. Why are you being so judgmental when I just asked a question. I’m not asking for lectures like this, which is why I made extra sure to clarify that I already know that Instagram is bad and I have to use it for a set amount of time.

      • Ilandar@aussie.zone
        32·
        3 months ago

        Best to just block people who use the “if you don’t use MY messaging platform of choice, you’re not my friend” argument. They are completely deranged and not living in the same world as the rest of us.

      • Orbituary@lemmy.worldEnglish
        48·
        3 months ago

        Because it’s everyone’s answer. Always.

        “I hate it, but I use it to talk to people.”

        • countrypunk@slrpnk.netOP
          2·
          3 months ago

          People are important. It’s necessary for mental health to balance privacy and being able to have a life.

  • tomalley8342@lemmy.world
    372·
    3 months ago

    You probably discussed it because you were aware and interested in it, and your awareness and interest showed through in your other trackable habits outside of your chatroom. You only notice when they guess your interests correctly.

    • PetroGuy@lemmy.ca
      181·
      3 months ago

      this is the real answer. unless you gave the app a bunch of permissions it shouldn’t have, they cannot see what you do/say in matrix. but they don’t need to. you willingly feed them enough information through location/posts/comments/private messages/friends/contacts/+a very long list of things for them you figure out your interests and serve you tailored ads.

      • Guntrigger@sopuli.xyz
        15·
        3 months ago

        I’m not so sure. I’m interested in this thread because I had a recent issue like this. I barely use Instagram, hadn’t booted the app for a month or something, only have it to support my SO’s art account. Never comment/DM, just likes. Had a lengthy in person conversation about tattoos and the idea of getting them at current location. I didnt do any searches on my phone or any other device for that matter. Don’t have any tattoos, or ever look at that content on insta (only follow art and wildlife photography accounts). Booted up Instagram that day and was getting purely adverts for local tattoos studios on my feed. Checked my permissions, all disabled. The only explanation I have is that it’s somehow still listening. That can’t possibly be a coincidence.

        • noodlejetski@lemm.ee
          15·
          3 months ago

          The only explanation I have is that it’s somehow still listening.

          or the other person participating in the conversation had looked them up.

          • Guntrigger@sopuli.xyz
            44·
            3 months ago

            I had considered that, but that would mean they are collating and amalgamating data coming from a single IP, which is almost as bad as listening to my microphone. Both are data gathering without my permission.

            • noodlejetski@lemm.ee
              15·
              3 months ago

              they are collating and amalgamating data coming from a single IP

              lol no shit. of course they’re aggregating location data, this is how, among other examples, some therapists ended up having their patients recommended as Facebook friends in the past.

              if they see someone being frequently in the same location you are and at the same time you are, they will leverage your relationship to serve you ads based on their (and, presumed by the algorithm, shared to some extent) interests.

              • Guntrigger@sopuli.xyz
                4·
                3 months ago

                Well how do you combat that if you are in a household or shared network with others who aren’t privacy conscious?

    • countrypunk@slrpnk.netOP
      52·
      3 months ago

      It’s more likely than not that, but I would like to err on the side of caution and figure out a way to fix it just in case my suspicion is true.