If your app handles personal and sensitive user data, then you must ... Not sell personal and sensitive user data.
The rule also applies to third-party code. If you include third party code (for example, an SDK) in your app, you must ensure that the third party code used in your app, and that third party's practices with respect to user data from your app, are compliant with Google Play Developer Program policies... For example, you must ensure that your SDK providers do not sell personal and sensitive user data from your app.
https://support.google.com/googleplay/android-developer/answ...Isn't this abuse what we are supposed to be paying their 15% Play Store tax to stop?
Webloc is getting this data for free. And then reselling it, but it's outside the scope of Google then.
is there a list
Most apps will only be able to request location while running in the foreground.
Weather apps are unusual for having a reason to request background location access and so you should treat them with particular suspicion.
Instead our ownership and agency has been sacrificed on the altar of "but BigCo doesn't like it because users can lie."
The savvy crowd on HN hopefully already knows how to protect ourselves, but we can't really expect the mass public to do so. Especially when some younger people today are losing awareness of the very concept of the browser as they use dedicated apps for all their internet use.
If a service is sub-par in the browser I don't use it. Be ThE cHaNgE yOu WaNt To SeE. I hate that sentence but it kinda applies here.
Banks are relying on Play Integrity protection as well as SMS-based 2FA, neither of which are both safe and private.