XPrivacyLua

It requires root, but you can block/spoof this with an LSPosed[1] module such as XPrivacyLua[2]. I hear there's also the closed-source AppOps[3], but I've never used it. [1]: https://lsposed.org [2]: https://github.com/M66B/XPrivacyLua / https://github.com/0bbedCode/XPL-EX [3]: https://appops.rikka.app

Hell yeah, fake data should totally be an option! This could be achieved with something like Xposed, a cool project is https://github.com/M66B/XPrivacyLua. I actually made a "clone" with the option to generate data per permission as a school project, good times

On Android you should be able to create new user accounts on the phone which are completely separated and can be quickly switched between. I used to create one with just WhatsApp installed for instance. Alternatively if you are rooted Xprivacy[0] does what you asked, allowing you to grant apps permissions but then feeding them fake data as configured. No idea about iOS though. EDIT: There seems to be an app called Insular[1] which also works like Xprivacy, but doesn't require root at all and comes with a couple of extra features like the ability to have multiple instances of an app installed. Haven't tried this one though and I have no idea if it even runs on newer versions of Android. [0] https://github.com/M66B/XPrivacyLua [1] https://secure-system.gitlab.io/Insular/

XPrivacyLua has the ability to feed fake data to apps. https://github.com/M66B/XPrivacyLua Requires rooted Android + Xposed though.

I heard that there is indeed an option to do that, with help of some apps. You keep your real contacts list in these apps. Presumably this also means that you have special dialer and sms apps integrated with this contact list app, since otherwise you can't just tap a contact to dial or message, and would have to copy-paste phone numbers around. Dunno what to do about messengers and such, which integrate with the contact system to show their correspondents in e.g. the ‘share’ menu. Not sure if these contacts are available to other apps—but if they are, it seems impossible to hide them. Also there's e.g. a plugin for the (non open-source) Xposed ‘framework’, to feed fake data to apps that want to access the location and other such info. Seems to be able to fake the contacts, too, but afaiu requires a rooted phone: https://github.com/M66B/XP

It's still possible to use XPrivacyLua (https://github.com/M66B/XPrivacyLua) with passing SafetyNet. It's a cat-and-mouse game, but the community is still ahead. You can achieve this with latest Magisk (v24+, https://github.com/topjohnwu/Magisk), enabled Zygisk and following modules: - LSposed Zygisk (https://github.com/LSPosed/LSPosed, fork of Xposed) - Universal SafetyNet Fix (https://github.com/kdrag0n/safetynet-fix) - Shamiko [optional, more hiding but needs configuration] (https://github.com/LSPosed/LSPosed.github.io)

https://github.com/M66B/XPrivacyLua I haven't kept up with it, it needs a rooted phone and Xposed Framework, and some apps don't like that and stop working. But in an older version of this app, you can set it to prompt you for any activity the app wants to do, e.g. read clipboard or phone status, where you can say "Allow/deny always, allow/deny for 10 minutes" etc.

... and M66B developed XPrivacyLua: https://github.com/M66B/XPrivacyLua it spoofs and restricts Android API calls made by apps.

I use XPrivacyLua. It provides what you are asking privacy wise on android. https://github.com/M66B/XPrivacyLua

Ok, how to fix fingerprinting: - for web, stop using chrome, install firefox (or firefox mobile) and in about:config set privacy.resistFingerprinting on true then add following addons: https://addons.mozilla.org/en-US/android/addon/canvas-finger... https://addons.mozilla.org/en-US/android/addon/audioctx-fing... https://addons.mozilla.org/en-US/android/addon/webgl-fingerp... https://addons.mozilla.org/en-US/android/addon/font-fingerpr... They will not only prevent fingerprints but also screw with the data (add random noise to audio/webgl sample, return random fonts,...). - the most important rule, don't use applications like tiktok, fb,.. if your phone is not rooted, with xprivacylua (https://github.com/M66B/XPrivacyLua, for added kicks https://github.com/M66B/NetGuard) installed and you have basic understanding what you allow there (disal

'Obfuscation' - feeding fake data to privacy-violating apps - is a promising solution for everyone who does not want to miss out on apps like whatsapp, or become the digital equivalent of a prepper with only self-compiled OSS or hobbyist software. On Android, XPrivacy and the newer version XPrivacyLua use this approach, but they require the Xposed framework to run. I wish this approach would be more common: https://github.com/M66B/XPrivacyLua/blob/master/README.md

Install NetGuard https://github.com/M66B/NetGuard (no root needed) and block them. I am also using XPrivacy Lua (you need rooted phone) https://github.com/M66B/XPrivacyLua to give applications fake details like android id, gps coordinates, contacts etc. For a nice addition, uninstall all google software and use microg instead.

> Honest question : Can you expand on how this would work please? Such a thing is already possible today. Some require root, some require breaking PlayStore's terms of use. One such example is: XPrivacyLua [0] by the creator of NetGuard. It helps fake location data, hide contacts and calendar, fake device-id, IMEI, MAC addresses etc on a per-app basis. Another example is how VPN in Android [1][2] is widely used to block trackers and ads. A third example would be how the accessibility service APIs are (ab)used to temporary grant permissions to apps [3]. A fourth would be reversing engineering tools like Frida [4] that help with inspecting apps, and even change their behaviour. A fifth is repackaging APKs with advertisement and tracking code removed, like with YouTube [5]. I am attempting to build an app with most of these features combined

> to run these Apps in a VM like container? That's what Xposed Framework does exactly. > allow it access a dummy, empty folder to read from That's what Xposed XPrivacyLua plugin does exactly. https://github.com/M66B/XPrivacyLua