Android users accused of being deanonymized through trackers by Meta and Yandex
Revamped to Retain Your Trust
Idea merchants Meta (considered extremist in Russia and banned) and Yandex are stripping Android users of their anonymity via sneaky trackers, according to a finding magnified by the publication Ars Technica.
Researchers allege that Meta Pixel and Yandex Metrika trackers, present on a whopping 5.8 million and 3 million websites respectively, send unique identifiers to Facebook, Instagram (Meta's territory) and Yandex via local ports. This covert practice allows these trackers to identify users, even when browsing in secret mode.
Here's the shocking part: these trackers enable Meta and Yandex to bypass the beefy security measures of the Android operating system and the browsers deployed on it, impacting billions of Android users.
The study indicates that Meta commenced this underhanded tactic in September 2021, while Yandex started way back in 2017.
Google, the knight in shining armor here, has acknowledged that this behavior collides with Google Play policies and Android users' legitimate expectations of privacy. They have vowed to tweak their systems to lessen the impact of these invasive methods, initiated their own thorough investigation, and are directly engaging with the concerned parties.
On the Yandex front, they complied by stating that they stringently adhere to data protection standards and do not de-anonymize users. "This tool avoids collecting sensitive data and is merely employed for personalization within our apps. We have decided to dispense with this functionality and are already removing it from our apps. We are also in touch with Google to ensure full compliance with their app store requirements," Yandex's press service mentioned.
Meta chimed in by stating that they were in conversation with Google regarding this matter. "We have paused the function while we collaborate with Google to resolve the issue," Meta added.
As things stand, it's unclear whether personal data protection laws have been breached. The best shield against tracking by Meta Pixel and Yandex Metrika trackers is to abstain from installing Facebook, Instagram, or Yandex apps on Android devices.
Forging Ahead with Freedom
Curbing the influence of Meta Pixel and Yandex Metrika trackers on your Android privacy warrants a strategic approach, given that these trackers have exploited standard protocols to circumvent privacy safeguards:
- Opt for Privacy-First Browsers:
- Opt for browsers equipped with built-in tracking safeguards, such as DuckDuckGo or Brave. These browsers ward off tracking challenges from the get-go, effectively combating the exploitation of identifiers.
- Engage Tracking Protection Filters:
- Engage tools like AdGuard, which can block tracking scripts, including those utilizing localhost exploits. Ensure that the Tracking Protection filter is activated to neutralize Meta Pixel and Yandex Metrica.
- Activate Incognito Mode and Browse Smarter:
- Even though major browsers such as Chrome can't completely withstand this type of tracking, activating Incognito Mode can help limit the obscene amount of data accumulated. However, this doesn't provide an impenetrable shield since Meta and Yandex's techniques circumvent Incognito protections.
- Manage Native App Permissions:
- Restrict the permissions of native apps on your device. This won't put an end to the tracking, but it can reduce the amount of data apps are privy to.
- Wait for Browser Updates:
- Major browsers are engineering updates to wrestle with this issue. For example, Chrome is planning to deploy changes to thwart this type of tracking.
- Stay Tuned for Updates from Google and Other Browser Vendors:
- Google is investigating this violation, and working in collaboration with other market players to resolve the issue. Keeping abreast of updates from Google and other vendors can help ensure that any new protections are implemented promptly.
Adopting these strategies can bolster your defense against Meta Pixel and Yandex Metrika trackers on Android devices[1][2][3]. Remember, even though Meta and Yandex have voiced their intention to cease these practices as of June 2025, it's of utmost importance to remain vigilant and employ protective measures to shield your data in the future.
- To safeguard your cybersecurity and privacy on Android devices, consider using privacy-focused browsers like DuckDuckGo or Brave, which offer built-in tracking protection mechanisms.
- To further enhance your protection against Meta Pixel and Yandex Metrika trackers, consider utilizing tools like AdGuard, which can block tracking scripts, including those utilizing localhost exploits, by activating its Tracking Protection filter.
