I think that is a feature of Google Assistant or some other Google product. It reads everything you have on your screen at any moment to give you "smart" help like easy opening of addresses or phone numbers.
also your keyboard might be leaking data too
That's why I disabled network access for my keyboard.
That doesn't prevent it. Keyboard is tied to many core OS processes that connect to Google servers and relay that information. I would recommend replacing it with OpenBoard which is based on Android Open Source Project.
If your referring to GBoard with network perms disabled, its highly unlikely that its using IPC as keylogger. There would be way too much useless data to store and not useful. Theoretically if they were to be a keylogger, the user would have to be in a super high threat model bracket for them to do this, but there no evidence of Google ever doing this.
Also OpenBoard hasn't been updated since August 2022. I recommend using the OpenBoard Fork.
There would be way too much useless data to store and not useful.
Not really. They have so much data about people's habbits and usage patterns that it's easy to discard bad data with machine learning. And I have no idea if they log everything, but there is no reason why they couldn't. That's enough of a risk factor to consider not using it.
There's no evidence of them actually doing this and if they were to do it, its most likely detectable via reverse engineering.
Keep in mind setting the internet permission on gboard then giving other google apps internet access is privacy theatre. This applies to Google certified devices as well because Google Play Services are privileged.
Well aware of that. Don't have Google Play Services on my phone.
Every other keyboard is awful by comparison. I've tried them all.
Assuming this is on an android phone with the normal Google Play Services on it then you should expect that Google can theoretically read anything that appears on it. It's probably not that sinister though, I don't imagine anything is being sent away and logged (though it theoretically could be!), there's probably just some process which reads every incoming notification and if it thinks it sounds like a task then it offers you the prompt. Is this some setting you haven't disabled in Google Assistant?
I believe signal uses google to push the notifications and if its giving you the option to add it to google keep the phone obviously know what it is the message content.
While Signal does use Google's notification system, my understanding is that they just use it as a way to wake up the app on the phone and have it check for new messages rather than sending any message content this way. The notification system that the operating system provides on the phone would still have access to the message data in the locally generated message notification with the actual content however, along with any apps that you give access to your notifications.
It may be something like Android System Intelligence or another similar service doing it: https://support.google.com/pixelphone/answer/12112173?hl=en
Notification management: Adds action buttons to notifications. For example, the action buttons could add directions to a place, help you track a package, or add a contact.
Very interesting thank you for the insight!
Does the message contents pop up in the new message notification?
Yes
yeah notification contents are not private, google tries to do fun stuff based on notification bubbles.
Turn off message contents in your notifications and the problem should stop
I don't have an answer but I can't imagine this isn't something Signal is aware of and would sound alarms if Google was collecting your message contents.
In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.
This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.
You can subscribe to this community from any Kbin or Lemmy instance:
Check out our website at privacyguides.org before asking your questions here. We've tried answering the common questions and recommendations there!
Want to get involved? The website is open-source on GitHub, and your help would be appreciated!
This community is the "official" Privacy Guides community on Lemmy, which can be verified here. Other "Privacy Guides" communities on other Lemmy servers are not moderated by this team or associated with the website.
Moderation Rules:
Additional Resources: