INFECTEDROM What your phone logs, and how to limit it

What phones log

35 kinds of record.

Sorted by category, then by sensitivity.

35 shown

Google Timeline / Location History

Location. Sensitivity 5/5. Goes to Google.

This feature builds a record of places you visit with your device. Following recent platform updates, this data is kept locally on the handset unless you choose to export it.

Records: gps coordinates, wi-fi signal data, cell tower identifiers, movement speed, timestamps.

Listed for 18 systems, for example Google Android 14, Google Android 15, Google Android 16, Samsung One UI 6.1.

Precise location given to apps

Location. Sensitivity 5/5. Goes to app.

Apps request exact satellite coordinates rather than an approximate town-level area. Third-party developers handle this data according to their individual privacy notices.

Records: gps coordinates, altitude, heading, speed, timestamps.

Listed for 25 systems, for example Apple iOS 17, Apple iOS 18, Apple iOS 26, Google Android 14.

Significant Locations

Location. Sensitivity 5/5. Goes to Apple.

Your device tracks the places you visit most often to provide tailored routing and system suggestions. According to Apple, this information is end-to-end encrypted and cannot be read by the company.

Records: frequent locations, visit times, transport methods, timestamps.

Listed for 3 systems, for example Apple iOS 17, Apple iOS 18, Apple iOS 26.

Wi-Fi and Bluetooth scanning for location

Location. Sensitivity 3/5. Goes to Google.

The operating system scans for nearby radios even when your main wireless toggles are turned off. This information is used to estimate device location indoors and in dense urban areas.

Records: bssid identifiers, bluetooth beacons, signal strength, timestamps.

Listed for 22 systems, for example Google Android 14, Google Android 15, Google Android 16, Samsung One UI 6.1.

Location-based Apple ads and suggestions

Location. Sensitivity 3/5. Goes to Apple.

This setting allows Apple to use your approximate geographical position to serve advertisements in the App Store and News. The company states that this data does not construct a permanent user profile.

Records: approximate location, search terms, app store interactions, timestamps.

Listed for 3 systems, for example Apple iOS 17, Apple iOS 18, Apple iOS 26.

App usage and screen time statistics

App usage. Sensitivity 3/5. Goes to Apple, Google.

The system tracks how often you open specific applications and how long you look at your screen. This information is primarily processed locally to generate wellbeing reports.

Records: app launch times, time spent in apps, notification counts, device unlocks.

Listed for 25 systems, for example Apple iOS 17, Apple iOS 18, Apple iOS 26, Google Android 14.

Keyboard learning and cloud typing suggestions

Keyboard. Sensitivity 4/5. Goes to Google, Apple, Samsung.

Your virtual keyboard learns frequently used words and names to improve auto-correct and predictive text. Depending on platform settings, some models use cloud processing to refine vocabulary models.

Records: typed words, custom dictionary terms, frequent phrases, typing cadences.

Listed for 25 systems, for example Apple iOS 17, Apple iOS 18, Apple iOS 26, Google Android 14.

Voice assistant recordings

Voice. Sensitivity 4/5. Goes to Google, Apple, Samsung.

Audio snippets are sent to server infrastructure when a wake phrase is detected on the handset. Some platforms allow human reviewers to listen to samples unless this option is switched off.

Records: voice recordings, transcribed text, assistant queries, device audio samples.

Listed for 21 systems, for example Apple iOS 17, Apple iOS 18, Apple iOS 26, Google Android 14.

Bixby voice and personalisation data

Voice. Sensitivity 4/5. Goes to Samsung.

Audio commands and textual transcripts are processed when triggering Samsung's integrated virtual assistant. Users can manage wake-word detection, inspect history, or clear associated voice records via account management.

Records: voice recordings, voice transcripts, device identifiers, app interaction history.

Listed for 3 systems, for example Samsung One UI 6.1, Samsung One UI 7, Samsung One UI 8.

Advertising ID

Advertising. Sensitivity 4/5. Goes to advertisers via the advertising ID.

The operating system generates a unique identifier that third-party ad networks use to connect activity across different apps. Users can reset this identifier or delete it entirely through device settings.

Records: pseudonymous identifier, ad clicks, app installs, device identifiers.

Listed for 22 systems, for example Apple iOS 17, Apple iOS 18, Apple iOS 26, Google Android 14.

Cross-app tracking requests

Advertising. Sensitivity 4/5. Goes to advertisers via the advertising ID.

Apple requires developers to request permission before linking your activity across apps owned by different companies. If refused, apps are denied access to the device identifier for advertisers.

Records: idfa identifier, app engagement, cross-service activity, purchase history.

Listed for 3 systems, for example Apple iOS 17, Apple iOS 18, Apple iOS 26.

Personalised ads from the platform vendor

Advertising. Sensitivity 3/5. Goes to Google, Apple, Samsung.

Platform vendors use your account history and app store habits to decide which advertisements you see inside their own services. Turning this off does not reduce the number of adverts shown.

Records: account profile data, app purchase history, content interactions, demographic estimates.

Listed for 21 systems, for example Apple iOS 17, Apple iOS 18, Apple iOS 26, Google Android 14.

Samsung marketing information and ads

Advertising. Sensitivity 3/5. Goes to Samsung, advertisers via the advertising ID.

This preference manages the delivery of promotional notices and tailored commercial material across native Samsung apps. Disabling the setting stops tailored promotions but does not remove non-targeted vendor announcements.

Records: advertising identifier, device identifiers, engagement with promotions.

Listed for 3 systems, for example Samsung One UI 6.1, Samsung One UI 7, Samsung One UI 8.

Xiaomi MSA system ads and recommendations

Advertising. Sensitivity 3/5. Goes to Xiaomi, advertisers via the advertising ID.

The MIUI System Ads background service coordinates the display of commercial banners within system tools like File Manager and Security. Users can revoke authorisation for the background package and turn off individual app recommendations.

Records: advertising identifier, device identifiers, ad impression logs, ip address.

Listed for 3 systems, for example Xiaomi HyperOS 1, Xiaomi HyperOS 2, Xiaomi HyperOS 3.

Google usage and diagnostics

Diagnostics. Sensitivity 2/5. Goes to Google.

This mechanism automatically transmits diagnostic metrics about battery life and system stability to Google. The vendor states that the gathered information is aggregated across devices.

Records: battery level, system activity, app performance, device model.

Listed for 18 systems, for example Google Android 14, Google Android 15, Google Android 16, Samsung One UI 6.1.

Apple device Analytics and Improvements

Diagnostics. Sensitivity 2/5. Goes to Apple.

Users can share daily diagnostic data with Apple during initial setup or through system settings. Apple states that this telemetry uses privacy techniques designed to prevent direct personal identification.

Records: hardware specifications, operating system metrics, performance data, usage patterns.

Listed for 3 systems, for example Apple iOS 17, Apple iOS 18, Apple iOS 26.

Contacts and call-log sync to cloud

Contacts and calls. Sensitivity 5/5. Goes to Google, Apple, Samsung.

Your address book and call history are continuously uploaded to your linked account storage. This keeps personal telephone details accessible across other connected tablets, laptops and handsets.

Records: contact names, phone numbers, email addresses, call history, timestamps.

Listed for 25 systems, for example Apple iOS 17, Apple iOS 18, Apple iOS 26, Google Android 14.

Caller ID and spam-lookup services

Contacts and calls. Sensitivity 4/5. Goes to Google, Samsung, Xiaomi.

Incoming and outgoing telephone numbers not in your contacts are queried against commercial directories. This process sends the number to the dialler provider to identify businesses or suspected nuisance callers.

Records: incoming phone numbers, outgoing phone numbers, call timestamps, lookup queries.

Listed for 21 systems, for example Google Android 14, Google Android 15, Google Android 16, Samsung One UI 6.1.

Cloud backup of apps, settings and messages

Cloud backup. Sensitivity 5/5. Goes to Google, Apple, Samsung.

System settings, text message archives and third-party app data are regularly archived to vendor servers. Security depends on whether your cloud provider implements standard or advanced end-to-end encryption.

Records: text messages, wi-fi passwords, app data, system settings.

Listed for 25 systems, for example Apple iOS 17, Apple iOS 18, Apple iOS 26, Google Android 14.

Photo cloud sync and metadata

Cloud backup. Sensitivity 5/5. Goes to Google, Apple, Samsung.

Images and videos captured with the camera are uploaded automatically to cloud storage along with embedded location metadata. Server algorithms can index these libraries for objects, locations and human faces.

Records: image files, video files, exif location metadata, facial recognition data, timestamps.

Listed for 22 systems, for example Apple iOS 17, Apple iOS 18, Apple iOS 26, Google Android 14.

Xiaomi Cloud sync

Cloud backup. Sensitivity 5/5. Goes to Xiaomi.

This cloud solution provides online storage and synchronization for private information generated on Xiaomi handsets. Its activation requires manual sign-in to a Mi Account and can be managed per data category.

Records: contact lists, sms records, photographs, browser bookmarks.

Listed for 3 systems, for example Xiaomi HyperOS 1, Xiaomi HyperOS 2, Xiaomi HyperOS 3.

Crash and bug reports sent to the vendor

Crash reports. Sensitivity 2/5. Goes to Apple, Google, Samsung.

When an application or operating system service fails, the phone compiles a report describing the failure. These files occasionally include brief memory contents that were active at the moment of failure.

Records: stack traces, memory state, device configuration, operating system version.

Listed for 25 systems, for example Apple iOS 17, Apple iOS 18, Apple iOS 26, Google Android 14.

Browser history and sync

Browsing. Sensitivity 4/5. Goes to Google, Apple.

This feature uploads browsing records and credentials to keep tabs and preferences aligned across connected hardware. It operates through the chosen browser account and can be paused or cleared in application settings.

Records: visited urls, saved bookmarks, browser tabs, saved passwords.

Listed for 22 systems, for example Apple iOS 17, Apple iOS 18, Apple iOS 26, Google Android 14.

Google Web and App Activity

Browsing. Sensitivity 4/5. Goes to Google.

This account-level mechanism records interactions across Google services and linked Android device tasks. Users may pause the collection or configure automated deletion periods within their account controls.

Records: search queries, app usage logs, location estimates, interaction timestamps.

Listed for 18 systems, for example Google Android 14, Google Android 15, Google Android 16, Samsung One UI 6.1.

Carrier-installed apps and network telemetry

Carrier and maker. Sensitivity 4/5. Goes to mobile carrier.

Firmware supplied by mobile network operators often includes system packages that report radio performance and connection events. Some elements can be disabled by the user, while underlying baseband telemetry remains mandatory for cellular operation.

Records: cell tower identifiers, signal strength metrics, device identifiers, installed carrier services.

Listed for 18 systems, for example Google Android 14, Google Android 15, Google Android 16, Samsung One UI 6.1.

Samsung Customization Service

Carrier and maker. Sensitivity 4/5. Goes to Samsung.

This framework analyses device interactions to adapt system suggestions and proprietary application content. The option requires an active Samsung account and offers granular sub-toggles for different data types.

Records: location history, app usage patterns, call metadata, music playback logs.

Listed for 3 systems, for example Samsung One UI 6.1, Samsung One UI 7, Samsung One UI 8.

Samsung diagnostic and usage data

Carrier and maker. Sensitivity 3/5. Goes to Samsung.

This telemetry service gathers operational reports and software stability details from One UI handsets. Consent is requested during the initial device configuration and can be altered in the settings menu.

Records: crash logs, device identifiers, feature interaction frequencies, battery statistics.

Listed for 3 systems, for example Samsung One UI 6.1, Samsung One UI 7, Samsung One UI 8.

Xiaomi analytics and user experience programme

Carrier and maker. Sensitivity 3/5. Goes to Xiaomi.

The User Experience Improvement Programme periodically transmits metrics about software interactions and device crashes. It is presented as an optional selection during the initial setup wizard on HyperOS and MIUI.

Records: device identifiers, application crash data, feature usage metrics, network performance.

Listed for 3 systems, for example Xiaomi HyperOS 1, Xiaomi HyperOS 2, Xiaomi HyperOS 3.

OnePlus system analytics and user experience

Carrier and maker. Sensitivity 3/5. Goes to OnePlus.

OxygenOS contains diagnostic mechanisms to report stability events and system feature adoption rates. Users are offered the choice to opt into this monitoring during the initial startup process.

Records: device identifiers, crash traces, feature usage counts, battery performance logs.

Listed for 3 systems, for example OnePlus OxygenOS 14, OnePlus OxygenOS 15, OnePlus OxygenOS 16.

Motorola device experience and analytics

Carrier and maker. Sensitivity 3/5. Goes to Motorola.

Motorola includes monitoring tools to track the health of its hardware components and launcher functions. Participation can be revised at any point through the system privacy settings.

Records: device identifiers, software crash reports, hardware performance metrics, system feature usage.

Listed for 2 systems, for example Motorola Hello UI (Android) 14, Motorola Hello UI (Android) 15.

Sony Xperia usage data and Xperia Services

Carrier and maker. Sensitivity 3/5. Goes to Sony.

Sony requests usage metrics to assess how Xperia applications and proprietary audio-visual software behave. The setting is optional and can be managed directly in the Xperia support menu.

Records: device identifiers, application usage frequency, system crash statistics.

Listed for 2 systems, for example Sony Android (Xperia) 14, Sony Android (Xperia) 15.

Nothing OS diagnostics and usage data

Carrier and maker. Sensitivity 3/5. Goes to Nothing.

Nothing OS includes telemetry options to monitor operating performance and system interface stability. Device owners can opt out during the welcome sequence or within system privacy controls.

Records: device identifiers, error logs, feature usage statistics.

Listed for 2 systems, for example Nothing OS 3, Nothing OS 4.

microG or sandboxed Play services data

Carrier and maker. Sensitivity 3/5. Goes to Google.

Re-implementations or isolated instances of Google Play Services allow standard apps to function without deep platform integration. Users can restrict background network access, toggle push messaging, or disable Google communication entirely.

Records: device identifiers, push token registrations, app package names.

Listed for 2 systems, for example GrapheneOS 2025 releases, /e/OS 2.x.

Connectivity checks and captive-portal pings

Network checks. Sensitivity 2/5. Goes to Google.

Android devices send lightweight HTTP queries upon joining an access point to verify whether an active internet connection exists. These transmissions reveal connection timing and the current public IP address to the platform servers.

Records: ip address, request timestamps, http response headers.

Listed for 22 systems, for example Google Android 14, Google Android 15, Google Android 16, Samsung One UI 6.1.

Network time, DNS and captive-portal queries

Network checks. Sensitivity 2/5. Goes to Google.

Privacy-focused custom distributions redirect or minimise default Android network verification calls. While essential network checks still occur to maintain time and internet connectivity, users can often modify the target endpoints.

Records: ip address, network query timestamps, server response codes.

Listed for 4 systems, for example GrapheneOS 2025 releases, LineageOS 21, LineageOS 22, /e/OS 2.x.