Per one tech forum this week: “Google has quietly installed an app on all Android devices called ‘Android System SafetyCore’. It claims to be a ‘security’ application, but whilst running in the background, it collects call logs, contacts, location, your microphone, and much more making this application ‘spyware’ and a HUGE privacy concern. It is strongly advised to uninstall this program if you can. To do this, navigate to 'Settings’ > 'Apps’, then delete the application.”

  • Xanza@lemm.ee
    link
    fedilink
    English
    arrow-up
    8
    arrow-down
    2
    ·
    13 hours ago

    Seems to be innocuous, but there’s no harm in removing it. Next update, it’ll be returned, so the better solution long-term will be (if you’re rooted) is to use an application to freeze it, which effectively disables it and it should survive and update. If you delete the app, a new update will put it back.

      • Nobilmantis@feddit.it
        link
        fedilink
        English
        arrow-up
        2
        ·
        4 hours ago

        Who would have thought the best security practice would turn out to be having devices too old to be updated with spyware? No jokes

      • Xanza@lemm.ee
        link
        fedilink
        English
        arrow-up
        2
        ·
        12 hours ago

        If you freeze via non-room methods, updating the apk will re-enable it. So it’s the same situation as just removing the apk–it’ll basically re-enable itself.

        • jayandp@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          2
          ·
          11 hours ago

          I’ve never had an app frozen through ADB get auto-updated by the Play Store or Google Services and get re-enabled because of it. An app with an update available will even disappear from the Update list if disabled, and in order to update it you have to enable it first.

          • Xanza@lemm.ee
            link
            fedilink
            English
            arrow-up
            4
            ·
            11 hours ago

            Freezing an app in an non-root fashion doesn’t do anything special. It’s moved to a different location and is effectively “removed” from a runnable state. The OS shows it as disabled/removed, but the files are still there. Newer versions of android (14+) will recognize applications it thinks are necessary (like this one, from Google) are moved/disabled and will pull a new apk during the upgrade process. It effectively re-installs the app.

        • jayandp@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          5
          arrow-down
          1
          ·
          12 hours ago

          Using ADB:

          adb shell pm disable-user --user 0 com.google.android.safetycore 
          

          If you have Shizuku and aShell/ShizuShell installed, then just run this command in aShell:

          pm disable-user --user 0 com.google.android.safetycore 
          

          Alternatively, for a GUI method, setup Shizuku and then use an app like Hail or Ice Box

    • A_Random_Idiot@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      2
      ·
      13 hours ago

      or just disable play store and use an alternative store like aurora.

      Then it’ll never get installed in the first place.

      • Xanza@lemm.ee
        link
        fedilink
        English
        arrow-up
        1
        ·
        12 hours ago

        This is incorrect. It’s installed silently via a background OTA. It’s never installed purposefully through the google play store.

        • Kilgore Trout@feddit.it
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          1
          ·
          9 hours ago

          It’s not installed with OTA, but through Play Services. I use microG and never will have any issue with apps auto-installing.