Four Android advertising software development kits (SDKs) can collect or transmit a device’s location by default once the host app has location permission, according to an August 2026 investigation by the Electronic Frontier Foundation (EFF). The finding leaves app teams responsible for data flows they may not have knowingly enabled.
Because Android treats an app and its embedded code as one permission holder, an ad library can inherit location access granted for another feature. A shipping build can therefore transmit coordinates even when its consent flow and Google Play Data safety listing say nothing about third-party location sharing.
Andr…
Read the full article at TECHREPUBLIC.COM
