

Did… did people not know this?
I mean, I guess this is a study of how widespread it is, but this shouldn’t be news to anyone.
Apps have been doing this for about a decade, either more precisely determining your location when GPS location is on, by checking it against known stationary wifi and bluetooth things that come into range, or even just guessing your location with GPS off via the same thing.
Most people just blindly give every app every permission it asks for, just like most people don’t read ToS.
You can either deny unnecessary permissions for each app, or just have wifi/location/bluetooth off if you’re not actually using them, and/or keep reseting your ‘advertising id’… or just run in airplane mode as a kind of ‘do not disturb’ mode.
Of course… if apps are actually circumventing those above methods of mitigation, permissions management etc, … well then they are malware.
Apparently 19% of the apps use methods that are so explicit that they probably violate the Google Play Store’s TOS, but 86% of them use methods that are basically allowed.
EDIT: Err, 86 - 19 = 67% use ‘allowed’ methods, a total of 86% use any method from their closed source, built in SDKs.
All malware imo, hooray for closed source proprietary software (the sdks built into the apps are closed source), you can totally trust them lol.
Not a VPN, but you may also want to look into I2P.
https://i2pd.website/
https://proprivacy.com/privacy-service/guides/i2p-guide
https://youtube.com/watch?v=FNp0TRDG0BQ
Basically, a p2p protocol for the entire internet.
Its considerably more complicated to set up than most modern VPNs, where nowaday’s its usually as simple as install an app with a GUI, verify some settings and you’re good to go, and i2p is also quite slow…
… but its totally free, and you can torrent over it, and as far as I know, if you’ve set it up properly, it is basically undetectable by ISPs, due to how it uses ‘garlic’ routing: basically, a whole bunch of users net requests are encrypted, anonymized, and then smashed into a big packet… so an ISP would have to untangle all of that for every packet, and afaik, none of them have figured out how.
I2P would obviously be horrible for watching streaming content though, snail speed.