Menu
EN

Privacy Sandbox on Android and how it will affect you

AdGuard always keeps a close eye on industry news that affects privacy issues. Google recently introduced the Privacy Sandbox which will largely determine the future of privacy of Android users. And we certainly need to comment on it. This article is a brief overview of the situation made by Andrey Meshkov, CTO and co-founder of AdGuard. Now we are continuing to explore the topic, and a large research article will be published soon. Follow our blog and social media so you don't miss its release.

Google has announced a new suite of technologies called Privacy Sandbox that should (at least theoretically) make Android devices better in terms of privacy. But at the same time, Google is making it clear that they'd like advertisers to keep as many options as possible — and this is a tough balance to strike. Have they managed to do it?

Privacy Sandbox includes several separate technologies. You can dive deep into the matter yourself, but I'll try to describe the key points about each of the new initiatives here.

SDK Runtime

This is an extremely useful technology that will definitely have a positive effect. This SDK — which stands for Software Development Kit — creates a dedicated environment for third-party SDKs to run in.

How it was before

It used to be kind of a lawless land. Developers would insert third-party libraries in their apps (think Facebook, Google), and those libraries would inherit all the permissions that the app itself was granted. For example, let's say that the app has access to the device's location — the library has it too now. Needless to say, libraries' vendors were abusing this scheme left and right, collecting all sorts of data. And this wasn't the only trouble — should some kind of a problem occur with the library, the app was at risk of suffering the consequences too ([1], [2]).

This diagram shows that the SDK-calling code, along with the SDKs that receive the calls from this code, all reside in the app's process.

What Google suggests

With the introduction of SDK Runtime, third-party libraries will operate in a separate, thoroughly monitored and regulated virtual "sandbox", hence the name. The developer will be able to manage the access rights for each of such libraries, including restricting them.

This diagram shows that, in the app's foreground process, the SDK calling code communicates with SDK interfaces. These interfaces then cross a process boundary into the SDK Runtime process to call into the SDKs themselves.

Since all those libraries will be running in a "sandbox" that's detached from the rest of the app's processes, the app won't crash in cases when something goes wrong with one of them.

And last but not least, these libraries will be distributed via a special store that (presumably) will have its own review guidelines.

Read more about SDK Runtime:
https://developer.android.com/design-for-safety/ads/sdk-runtime

Topics

This is the same technology that Google is going to introduce in Chrome. The main idea behind Topics is that the device itself will monitor which apps its owner is using. Based on this data, every week the device will calculate five topics that will have interested the user the most that week.

Apps will be able to get access to some of this data, and different apps will receive different data. This, according to Google, will minimize the risk of using Topics to fingerprint users.

But let's illustrate it with an example:

  1. You have several apps installed on your phone that you use regularly: Facebook, WhatsApp, Instagram, etc.
  2. Each of them receives some part of your topics for the week.
  3. The apps collect this information and use it to supplement your online profile.
  4. Week after week, your profile grows and accretes data.

It's not clear to me why Google has decided that it's OK to share my interests without my consent. Make no mistake, large publishers like Facebook/Meta will not just use this information once and then forget it. They will aggregate it, combine it with other data, and so on.

And that's not the end of it. Lots of apps use SDKs developed by a small pool of companies (you guessed it, Meta is one of them). These companies will receive information streams about you coming from dozens of different apps. From that point, it doesn't take much to construct an excruciatingly detailed profile that has all imaginable data about you.

Read more about Topics for Android:
https://developer.android.com/design-for-safety/ads/topics

FLEDGE on Android

FLEDGE is a mechanism that is meant to be used locally on your device. You will soon see that from a data safety standpoint it compares favorably to the existing alternatives.

How it was before

Currently, ad retargeting is mostly based on the lists of "audiences" that publishers upload. They are often made up of user IDs, or sometimes even straight up emails. This allows publishers to reach these users with ads that they consider relevant to the people from that list.

What Google suggests

When FLEDGE comes into full effect, apps will create such lists themselves with the help of a special API (Application Programming Interface). The key difference is that these lists will be stored locally on the device. The advertising networks will know the names of these lists, and they will upload ads that target specific lists. The process of selecting the ad to display to the user will happen entirely within the device, based on the lists (stored on the same device) and the advertisments uploaded by the ad networks.

Read more about FLEDGE:
https://developer.android.com/design-for-safety/ads/fledge

Attribution Reporting

This is a technology for counting clicks and measuring conversions. Advertisers want to know how their ads perform, and Google suggests doing all the measurements right on the device. Ad networks' SDKs will be able to request an aggregated report, which will, however, be presented with a certain delay. The delay is very important as it greatly complicates potential attempts to identify the user. And the entire mechanism is generously sprinkled with encryption and additional verifications.

The overall design of how the Attribution Reporting API works looks quite complicated. To better understand the topic, open the link we've posted below.

Read more about Attribution Reporting:
https://developer.android.com/design-for-safety/ads/attribution

Conclusions

In general, all these initiatives (excluding Topics) can be described as improving users' privacy in the context of the ad market. But with one very important condition — ONLY those mechanisms should be used.

As for Topics, it reflects the (completely understandable) desire to keep the ability to utilize information about users' interests for targeting purposes. But this technology further expands the scope of that information instead of reducing it.

But even the good ones still leave a bitter aftertaste: de facto Google will become the single entity to control which ads users see on their Android devices. It was partially true before, but only within Google's own advertising network. Now they are looking to directly influence all other ad networks too, and we know that monopolies rarely end up being good for the consumer. We kind of know what is going to be happening on our smartphones now, and there's no guarantee it will stay that way.

This is the trend that we've been seeing for a while now — advertising networks slowly but steadily moving into our devices. Thinking about buying a new phone? Be ready to get your hands on a highly specialized tool for showing ads instead.

Liked this post?
18,421 18421 user reviews
Excellent!

AdGuard for Windows

AdGuard for Windows is more than an ad blocker. It is a multipurpose tool that blocks ads, controls access to dangerous sites, speeds up page loading, and protects children from inappropriate content.
By downloading the program you accept the terms of the License agreement
Read more
18,421 18421 user reviews
Excellent!

AdGuard for Mac

AdGuard for Mac is a unique ad blocker designed with macOS in mind. In addition to protecting you from annoying ads in browsers and apps, it shields you from tracking, phishing, and fraud.
By downloading the program you accept the terms of the License agreement
Read more
18,421 18421 user reviews
Excellent!

AdGuard for Android

AdGuard for Android is a perfect solution for Android devices. Unlike most other ad blockers, AdGuard doesn't require root access and provides a wide range of app management options.
By downloading the program you accept the terms of the License agreement
Read more
18,421 18421 user reviews
Excellent!

AdGuard for iOS

The best iOS ad blocker for iPhone and iPad. AdGuard eliminates all kinds of ads in Safari, protects your privacy, and speeds up page loading. AdGuard for iOS ad-blocking technology ensures the highest quality filtering and allows you to use multiple filters at the same time
By downloading the program you accept the terms of the License agreement
Read more
18,421 18421 user reviews
Excellent!

AdGuard VPN

74 locations worldwide

Access to any content

Strong encryption

No-logging policy

Fastest connection

24/7 support

Try for free
By downloading the program you accept the terms of the License agreement
Read more
18,421 18421 user reviews
Excellent!

AdGuard Content Blocker

AdGuard Content Blocker will eliminate all kinds of ads in mobile browsers that support content blocker technology — namely, Samsung Internet and Yandex.Browser. While being more limited than AdGuard for Android, it is free, easy to install and still provides high ad blocking quality.
By downloading the program you accept the terms of the License agreement
Read more
18,421 18421 user reviews
Excellent!

AdGuard Browser Extension

AdGuard is the fastest and most lightweight ad blocking extension that effectively blocks all types of ads on all web pages! Choose AdGuard for the browser you use and get ad-free, fast and safe browsing.
18,421 18421 user reviews
Excellent!

AdGuard Assistant

A companion browser extension for AdGuard desktop apps. It offers an in-browser access to such features as custom element blocking, allowlisting a website or sending a report.
18,421 18421 user reviews
Excellent!

AdGuard DNS

AdGuard DNS is a foolproof way to block Internet ads that does not require installing any applications. It is easy to use, absolutely free, easily set up on any device, and provides you with minimal necessary functions to block ads, counters, malicious websites, and adult content.
18,421 18421 user reviews
Excellent!

AdGuard Home

AdGuard Home is a network-wide software for blocking ads & tracking. After you set it up, it’ll cover ALL your home devices, and you don’t need any client-side software for that. With the rise of Internet-Of-Things and connected devices, it becomes more and more important to be able to control your whole network.
18,421 18421 user reviews
Excellent!

AdGuard Pro for iOS

AdGuard Pro has much to offer on top of the excellent iOS ad blocking in Safari already known to the users of the regular version. By providing access to custom DNS settings, the app allows you to block ads, protect your kids from adult content online, and safeguard your personal data from theft.
By downloading the program you accept the terms of the License agreement
Read more
18,421 18421 user reviews
Excellent!

AdGuard for Safari

Ad blocking extensions for Safari are having hard time since Apple started to force everyone to use the new SDK. AdGuard extension is supposed to bring back the high quality ad blocking back to Safari.
18,421 18421 user reviews
Excellent!

AdGuard Temp Mail

A free temporary email address generator that keeps you anonymous and protects your privacy. No spam in your main inbox!
18,421 18421 user reviews
Excellent!

AdGuard for Android TV

AdGuard for Android TV is the only app that blocks ads, guards your privacy, and acts as a firewall for your Smart TV. Get warnings about web threats, use secure DNS, and benefit from encrypted traffic. Relax and dive into your favorite shows with top-notch security and zero ads!
Downloading AdGuard To install AdGuard, click the file indicated by the arrow Select "Open" and click "OK", then wait for the file to be downloaded. In the opened window, drag the AdGuard icon to the "Applications" folder. Thank you for choosing AdGuard! Select "Open" and click "OK", then wait for the file to be downloaded. In the opened window, click "Install". Thank you for choosing AdGuard!
Install AdGuard on your mobile device