Can an app download my "my.activity.google"?
If an app is capable of downloading my browser history from chrome could it also download the history that is stored on my.activity ?
I downloaded a Chinese food delivery app called Fantuan courier. Initially I did not read the privacy agreement. It clearly states they collect data and share it with third parties.
"GrowingIO SDK is integrated in our App, which would collect user’s location data, search history, browsing history and product interaction for the purpose of conducting product analysis and improving user experience. Currently we collect neither IDFA nor IDFV data."
"Data collected: Device information, geographical location, and network information. Device information includes: Device identifiers, IMEI, IDFA, Android ID, GAID, MAC address, OAID, VAID, AAID, IMSI, MEID, UAID, hardware serial number information (device SN), ICCID, SIM card information. UAID (Uniform Anonymous Identifier) is a unified anonymous identifier introduced by telecommunications operators. Application information (such as application crash information, notification switch status, software lists, and related details), device parameters, and system information (device type, device model, operating system, and hardware-related information) are also collected."
https://fantuan.ca/agreement.html
I know Google Chrome self deletes after three months but I did not clear my.activity.google for quite some time. I didn't finish the sign up process for the app and can't remember if I granted it permissions, but this app seems like the data harvesting type that would just download things without permissions. If I granted it permissions I assume it could download or copy my.activity.google? If I didn't grant permissions do you think I'm in the clear?
I redownloaded the app to see if it asks for permissions. Upon start up it only asks for permission to run in the background. Then you need to sign in to proceed and I deleted my account. Maybe I should make a new account and get as far in the sign up process as last time and see if it even asks for permissions. Maybe it doesn't even start collecting data until after you complete your sign up. Thoughts?
