Per one tech forum this week: “Google has quietly installed an app on all Android devices called ‘Android System SafetyCore’. It claims to be a ‘security’ application, but whilst running in the background, it collects call logs, contacts, location, your microphone, and much more making this application ‘spyware’ and a HUGE privacy concern. It is strongly advised to uninstall this program if you can. To do this, navigate to 'Settings’ > 'Apps’, then delete the application.”

      • teohhanhui@lemmy.world
        link
        fedilink
        English
        arrow-up
        10
        arrow-down
        2
        ·
        1 day ago

        Please, read the links. They are the security and privacy experts when it comes to Android. That’s their explanation of what this Android System SafetyCore actually is.

      • loics2@lemm.ee
        link
        fedilink
        English
        arrow-up
        5
        ·
        1 day ago

        Have you even read the article you posted? It mentions these posts by GrapheneOS

    • kattfisk@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      34
      arrow-down
      3
      ·
      1 day ago

      To quote the most salient post

      The app doesn’t provide client-side scanning used to report things to Google or anyone else. It provides on-device machine learning models usable by applications to classify content as being spam, scams, malware, etc. This allows apps to check content locally without sharing it with a service and mark it with warnings for users.

      Which is a sorely needed feature to tackle problems like SMS scams

      • cley_faye@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        3
        ·
        23 hours ago

        You don’t need advanced scanning technology running on every device with access to every single bit of data you ever seen to detect scam. You need telco operator to stop forwarding forged messages headers and… that’s it. Cheap, efficient, zero risk related to invasion of privacy through a piece of software you did not need but was put there “for your own good”.

        • zlatko@programming.dev
          link
          fedilink
          English
          arrow-up
          4
          ·
          22 hours ago

          I will perhaps be nitpicking, but… not exactly, not always. People get their shit hacked all the time due to poor practices. And then those hacked things can send emails and texts and other spam all they want, and it’ll not be forged headers, so you still need spam filtering.

      • throwback3090@lemmy.nz
        link
        fedilink
        English
        arrow-up
        12
        arrow-down
        6
        ·
        1 day ago

        Why do you need machine learning for detecting scams?

        Is someone in 2025 trying to help you out of the goodness of their heart? No. Move on.

        • Aermis@lemmy.world
          link
          fedilink
          English
          arrow-up
          6
          arrow-down
          1
          ·
          1 day ago

          If you want to talk money then it is in businesses best interest that money from their users is being used on their products, not being scammed through the use of their products.

          Secondly machine learning or algorithms can detect patterns in ways a human can’t. In some circles I’ve read that the programmers themselves can’t decipher in the code how the end result is spat out, just that the inputs will guide it. Besides the fact that scammers can circumvent any carefully laid down antispam, antiscam, anti-virus through traditional software, a learning algorithm will be magnitudes harder to bypass. Or easier. Depends on the algorithm

          • throwback3090@lemmy.nz
            link
            fedilink
            English
            arrow-up
            4
            arrow-down
            3
            ·
            1 day ago

            I don’t know the point of the first paragraph…scams are bad? Yes? Does anyone not agree? (I guess scammers)

            For the second we are talking in the wild abstract, so I feel comfortable pointing out that every automated system humanity has come up with so far has pulled in our own biases and since ai models are trained by us, this should be no different. Second, if the models are fallible, you cannot talk about success without talking false positives. I don’t care if it blocks every scammer out there if it also blocks a message from my doctor. Until we have data on consensus between these new algorithms and desired outcomes, it’s pointless to claim they are better at X.

        • kattfisk@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          2
          ·
          7 hours ago

          Blaming the victim solves nothing.

          Scamming is a rapidly growing industry that is becoming more professional and specialized all the time. Anyone can be scammed.

      • desktop_user@lemmy.blahaj.zone
        link
        fedilink
        English
        arrow-up
        6
        ·
        1 day ago

        if the cellular carriers were forced to verify that caller-ID (or SMS equivalent) was accurate SMS scams would disappear (or at least be weaker). Google shouldn’t have to do the job of the carriers, and if they wanted to implement this anyway they should let the user choose what service they want to perform the task similar to how they let the user choose which “Android system WebView” should be used.

        • Aermis@lemmy.world
          link
          fedilink
          English
          arrow-up
          4
          ·
          1 day ago

          Carriers don’t care. They are selling you data. They don’t care how it’s used. Google is selling you a phone. Apple held down the market for a long time for being the phone that has some of the best security. As an android user that makes me want to switch phones. Not carriers.

        • kattfisk@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          1
          ·
          7 hours ago

          No, that wouldn’t make much difference. I don’t think I’ve seen a real world attack via SMS that even bothered to “forge” the from-field. People are used to getting texts from unknown numbers.

          And how would you possibly implement this supposed “caller-id” for a field that doesn’t even have to be set to a number?

    • throwback3090@lemmy.nz
      link
      fedilink
      English
      arrow-up
      4
      arrow-down
      9
      ·
      edit-2
      1 day ago

      graphene folks have a real love for the word misinformation (and FUD, and brigading). That’s not you under there👻, Daniel, is it?

      After 5 years of his antics hateful bullshit lies, I think I can genuinely say that word triggers me.

    • dan@upvote.au
      link
      fedilink
      English
      arrow-up
      4
      ·
      1 day ago

      So is this really just a local AI model? Or is it something bigger? My S25 Ultra has the app but it hasn’t used any battery or data.

      • Auli@lemmy.ca
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        1
        ·
        1 day ago

        I mean the grapheneos devs say it is. Are they going to lie.

        • throwback3090@lemmy.nz
          link
          fedilink
          English
          arrow-up
          5
          arrow-down
          1
          ·
          1 day ago

          Yes, absolutely, and regularly, and without shame.

          But not usually about technical stuff.

  • LotrOrc@lemmy.world
    link
    fedilink
    English
    arrow-up
    19
    ·
    2 days ago

    I just un-installed it

    Anyone know what Android System Intelligence does? Should that be un-installed as well?

    • starman2112@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      9
      ·
      2 days ago

      Jesus Christ they’re like bed bugs

      Is it too much to ask that my phone only contain the shit that makes it work, and not anything else?

      • A_Random_Idiot@lemmy.world
        link
        fedilink
        English
        arrow-up
        7
        arrow-down
        1
        ·
        edit-2
        2 days ago

        Its a classic example of using “BUT THE CHILDREN” to be invasive dickheads.

        And it immediately reminds me of the story of the guy whose kid had a rash in the diaper area during covid, and the pediatrician requested pictures to remotely diagnose and treat, which google flagged as child pornography and called the cops on him, and banned/locked him out of everything (phone number, emails, pictures, etc etc) because he had everything on google.

        and no amount of the police, or even doctor, insisting the pictures were medical necessity and not child pornography would convince google to restore his acount or even let him recover his number/email/pictures/etc.

        • starman2112@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          2
          ·
          1 day ago

          The fact that Google refused to restore his account even after the police that they called said there was no child porn pisses me off to no end. They are officially allowed to close your account for no reason other than they don’t like you.

          • A_Random_Idiot@lemmy.world
            link
            fedilink
            English
            arrow-up
            4
            ·
            edit-2
            1 day ago

            not only refused to restore the account, but still insisted he was a pedophile producing child pornography despite the cops and doctors and every other authority involved insisting he wasnt, and that the images were medically necessary, and refuse to even give/let him get a backup of all his family pictures, emails, etc.

            and theres gonna be a lot more of it once this stupid invasive spyware rolls out and gets going.

            If our parents and grandparents photos were digitized, they’d all probably be labled child porn producers, because almost every parent/grandparent/etc has some picture of their newborn getting a sink bath or some other completely harmless, and otherwise normal photo.

            and I think its so they can artificially inflate their numbers. They arent doing shit to stop actual child exploitation, so they hammer hard on this shit so they can make a big show of “cracking down and stopping” it.

    • Kilgore Trout@feddit.it
      link
      fedilink
      English
      arrow-up
      4
      ·
      1 day ago

      You can safely uninstall System Intelligence if you don’t need it. My phone has worked fine without it in the past year.

  • Event_Horizon@lemmy.world
    link
    fedilink
    English
    arrow-up
    11
    ·
    2 days ago

    It didn’t appear in my apps list so I thought it wasn’t installed. But when I searched for the app name it appears. So be aware.

      • Ledericas@lemm.ee
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 days ago

        you can look it up on your app managment settings too, search for it there.

      • viking@infosec.pub
        link
        fedilink
        English
        arrow-up
        2
        ·
        2 days ago

        Play Store, it doesn’t show in local search results, but they list it as installed.

        • A_A@lemmy.world
          link
          fedilink
          English
          arrow-up
          3
          ·
          edit-2
          2 days ago

          Even worse, i found this comment in the app store and it did the same on my device :

          Installed automatically without my knowledge, no notification, only found it because of a friend’s post, and even then, you only see it through a link, it doesn’t come up in your app list or a search of the Google play store. I thought it felt like my battery was draining a little quicker too, which is apparently also something noticed in connection to having this app. Uninstalling.

          The app can be found here :
          https://play.google.com/store/apps/details?id=com.google.android.safetycore
          .

          • viking@infosec.pub
            link
            fedilink
            English
            arrow-up
            2
            ·
            1 day ago

            Oh right, maybe I noticed because of Storage Isolation, that’s an app which allows you to restrict folder access of other apps, and it prompts me to select actions for every newly installed app. So it casually prompts me whenever google pushes a new, hidden installation.

          • Ledericas@lemm.ee
            link
            fedilink
            English
            arrow-up
            2
            ·
            2 days ago

            i was able to find it on my oneplus, and i also noticed, why is my oneplus 12r draining so fast?

  • Bieren@lemmy.world
    link
    fedilink
    English
    arrow-up
    8
    arrow-down
    2
    ·
    2 days ago

    Google harvesting all your data for profits. I’m shocked. Shocked I say.

  • Wren@lemmy.world
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    6
    ·
    2 days ago

    Seriously…. Why do people continue to buy their products? They’re seemingly one of the most invasive security risks one could be involved with.

    • null@slrpnk.net
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      4
      ·
      2 days ago

      Most people don’t really know what that actually means, and they don’t feel they have anything to hide from some nebulous corporate entity.

    • WhyJiffie@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      8
      arrow-down
      1
      ·
      2 days ago

      why, what do you recommend?

      I mean you have just disclaime the whole android ecosystem, and the only other alternative is Apple, which is questionable if it’s better.
      and this would have even applied to my fairphone!
      would have, if I didn’t get rid of google services the day I got it.

      • Wren@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        10
        ·
        edit-2
        1 day ago

        I don’t have to recommend anything just because I’m asking why people are buying spyware tech.

        Just like I may not know the proper way to safely jump out of an airplane, but I do know a parachute is involved.

        A person asking why people do a thing that seems stupid isn’t obligated to solve the problem.

      • Wren@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        5
        ·
        2 days ago

        I don’t have to recommend anything just because I’m asking why people are buying spyware tech.

        Just like I may not know the proper way to safely jump out of an airplane, but I do know a parachute is involved.

        A person asking why people do a thing that seems stupid isn’t obligated to solve the people.

  • YarHarSuperstar@lemmy.world
    link
    fedilink
    English
    arrow-up
    10
    ·
    2 days ago

    What about the “Android System Intelligence” app that someone else mentioned here? I just realized I have that one. It sounds like it has the capabilities to spy and maybe even more.

      • YarHarSuperstar@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        20 hours ago

        I saw that, that’s what I meant by “it sounds like it has the capabilities to spy”, something that can do all those things must have lots of access and could provide perfect cover for any number of undesirable processes.

      • YarHarSuperstar@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        edit-2
        2 days ago

        What do you mean by that? What I meant is that the functions, capabilities, and permissions it has could enable it to do so.

        • catloaf@lemm.ee
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          1
          ·
          edit-2
          2 days ago

          Yeah, so do the rest of the system apps, and the OS itself. Why is everyone freaking out about this one all of a sudden? If you don’t trust the Google software running on your phone, you shouldn’t be using it in the first place.

    • Raiderkev@lemmy.world
      link
      fedilink
      English
      arrow-up
      17
      ·
      2 days ago

      Thanks. Uninstalled. Not that it matters, they already got what they wanted from me most likely.

    • x4740N@lemm.ee
      link
      fedilink
      English
      arrow-up
      1
      ·
      13 hours ago

      Apparently I’m a beta tester for it, don’t recall signing up for beta tests with it

    • lka1988@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      7
      ·
      2 days ago

      Thanks. Uninstalled and reported. Hopefully they’ll get the hint. I love my Android, but this is pushing me towards Graphene/Calyx.

    • hector@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      38
      ·
      2 days ago

      Thanks for the link, this is impressive because this really has all the trait of spyware; apparently it installs without asking for permission ?

      • Ledericas@lemm.ee
        link
        fedilink
        English
        arrow-up
        3
        ·
        2 days ago

        yea i found it as soon as this article said it was on your phone spying on you, ALSO many people, like myself noticed the battery draining pretty fast too, this is probalby the cause, if it installs without your knowledge, i doubt the app is excluded from your "app battery usage logs to, like it doesnt show up how much power its using.

      • Moose@moose.best
        link
        fedilink
        English
        arrow-up
        30
        ·
        2 days ago

        Yup, heard about it a week or two ago. Found it installed on my Samsung phone, it never asked for permissions or gave any info that it was added to my phone.

  • SavageCoconut@lemmy.world
    link
    fedilink
    English
    arrow-up
    118
    ·
    2 days ago

    Google says that SafetyCore “provides on-device infrastructure for securely and privately performing classification to help users detect unwanted content. Users control SafetyCore, and SafetyCore only classifies specific content when an app requests it through an optionally enabled feature.”

    GrapheneOS — an Android security developer — provides some comfort, that SafetyCore “doesn’t provide client-side scanning used to report things to Google or anyone else. It provides on-device machine learning models usable by applications to classify content as being spam, scams, malware, etc. This allows apps to check content locally without sharing it with a service and mark it with warnings for users.”

    But GrapheneOS also points out that “it’s unfortunate that it’s not open source and released as part of the Android Open Source Project and the models also aren’t open let alone open source… We’d have no problem with having local neural network features for users, but they’d have to be open source.” Which gets to transparency again.

    • FauxLiving@lemmy.world
      link
      fedilink
      English
      arrow-up
      10
      ·
      2 days ago

      Graphene could easily allow for open source solutions to emulate the SafetyCore interface. Like how it handles Google’s location services.

      There’s plenty of open source libraries and models for running local AI, seems like this is something that could be easily replicated in the FOSS world.