According to Cyphers, while Android Q has new restrictions on non-resettable device identifies, it will allow unrestricted access for its own tracking identifier [called “advertising ID”]… “Facebook and other targeting companies allow businesses to upload lists of ad IDs that they have collected in order to target those users on other platforms,” he wrote… “On Android, there is no way for the user to control which apps can access the ID, and no way to turn it off. While we support Google taking steps to protect other hardware identifiers from unnecessary access, its continued support of the advertising ID — a “feature” designed solely to support tracking — undercuts the company’s public commitment to privacy,” he wrote…
Cypher also noted that while Apple’s iOS has similar identifiers for advertisers that contradict with its privacy campaign, it does enable users to turn off the tracking.
In fact, Android Q also ships with an “opt out of ad personalization” checkbox where users can indicate that they don’t want Google’s identifier to track them, Cyphers reports — but “the checkbox doesn’t affect the ad ID in any way.
“It only encodes the user’s ‘preference’, so that when an app asks Android whether a user wants to be tracked, the operating system can reply ‘no, actually they don’t.’ Google’s terms tell developers to respect this setting, but Android provides no technical safeguards to enforce this policy.”