DEV Community

Cover image for Every app wants your data now. I built four that don't.
Akhouri Anmol Kumar
Akhouri Anmol Kumar

Posted on

Every app wants your data now. I built four that don't.

Description: "Telemetry, bloatware and accounts-for-everything have become the default. A look at how we got here, how to check for yourself, and four small Windows apps that ask for nothing."

Last week I opened a calculator.

Not a banking app or a social network. A calculator, a program whose whole job is turning 7 × 8 into 56. And before it let me do that, it wanted me to sign in, accept a privacy policy and "improve my experience".

I'd like you to remember that feeling of wait, why? for the rest of this post.


How we got here

Nobody woke up and decided software should spy on people. It happened gradually, one reasonable-sounding decision at a time.

1. "We just want to understand how people use it."
Usage analytics sounds harmless. Then it becomes session recording, then device fingerprinting, then a profile attached to a persistent ID. The feature that began as "which button do people click?" ends as "everything you do, forever."

2. The business model changed.
When software was a thing you bought, the customer was you. When it's free, or a subscription that needs "engagement", the customer is whoever pays for the data or the attention. Your behaviour becomes the inventory.

3. Bloatware is the same story.
Preinstalled trials, "recommended" apps, background updaters that exist to keep a vendor's service in front of you. Each one has its own startup entry, its own process, its own network calls. None of them were your idea.

4. Accounts became the default.
Something that could work offline with a file now needs a login, because a login is a relationship, and a relationship is a funnel.

The result is software that's heavier than it needs to be, slower than it should be, and constantly talking to servers you never chose.


What it costs you

  • Performance. Every background updater and telemetry thread takes RAM, CPU and disk, all to report on a tool that was supposed to just do its job.
  • Attack surface. Every network connection is something that can break, be intercepted, or be misconfigured. Software that never phones home can't leak what it never sent.
  • Dependence. If the app needs a server to work, it stops working when the company changes direction or shuts down.
  • Trust. The worst cost. You can no longer assume that a tool is working for you.

Don't take my word for it, check

I could write a paragraph about how private my apps are, but that's just a claim. Here is how to check any app, mine included. It takes about five minutes.

1. Block it at the firewall.
Create an outbound block rule for the .exe in Windows Defender Firewall. If the app still does everything it claims to, it didn't need the network.

2. Watch it work.
Open Resource Monitor (resmon), go to the Network tab, and use the app normally. Look at "Processes with Network Activity" and "TCP Connections". An offline tool should show nothing.

3. Look at what it starts with Windows.
Task Manager → Startup apps. A tool you opened on purpose shouldn't have registered itself to launch at boot.

4. Look for accounts.
If you can't use it without signing in and it isn't a service by nature, ask why.

If an app of mine fails any of these, I want to hear about it.


The Akhouri Systems apps

I built these with one rule: the software does the job and nothing else.

No telemetry. No analytics. No account. No bundled extras. No "sign in to continue." (yeah in my APIC Web tool sign up is needed but just because I want to track my users count that's it but rest all desktop apps have no sign-up or any extra stuff)

ATLOCK v5, security suite

File and folder locking, a password vault, recovery shares, and public-key encrypt and sign, built on Argon2id and AES-256-GCM. It has a --selftest with 41 checks and a --fuzz mode so you can see it hold up.

An honest note: ATLOCK does have a few network features, and I'd rather tell you than let you find them. Each one is something you switch on. The vault can check a password against Have I Been Pwned, and only the first 5 characters of a hash ever leave your machine (k-anonymity), never the password. There's an optional VirusTotal lookup that uses your own API key, and an optional Telegram alert that uses your own bot token. Nothing runs on its own. There is no analytics code in it.

ANOTE v1, notes

Notes that stay on your machine. (password protection, multi-tab, coding mode, meme canvas mode, built in 15+ different language translation support)

APIC v1,

(a image editing tool with compress, convert, advanced edit, resize feature all packed in 1 single image editing desktop suite)

ACALCU v3, calculator

A calculator. It calculates.(each button is customizable, 29 pre-built themes available, also you can create your own, add images in each button, add gifs in each button, add random text in each button making it one of the most customizable calculator you've ever seen)


Downloads

All are zipped Windows .exe files.

App Download
ATLOCK v5 ATLOCK_v5.zip
ANOTE v1 ANOTE.zip
APIC v1 APIC.zip
ACALCU v3 ACALCU.zip

They're unsigned, so Windows SmartScreen may warn you. That's a fair thing to be careful about with any unknown .exe. So, its all up to you but from my side I've checked all 4 apps are safe. no worries but still its your PC, you spend money to bought it so I've no rights to convince you.


What I'd love to argue about

  1. Is telemetry ever acceptable? Crash reports that you opt into seem different from silent usage tracking. Where do you draw the line?
  2. Would you pay for software that promises to do less? The "we collect nothing" model has no obvious revenue. Is that a bug or a feature?
  3. What's the most absurd data request you've seen from a simple app? I'd like to read your examples.
  4. What's your fastest "is this app spying on me?" test? I gave mine above. Tell me what I missed.
  5. Does "no telemetry" mean anything without a source audit? What would you need to see before believing it?

Also if you want to follow me in on GitHub then please do so: 👇https://github.com/Akhouri-Anmol-Kumar

Tell me what you find. If I missed a connection, I'd rather hear it from you than from someone else.

Top comments (31)

Collapse
 
akhourianmolkumar profile image
Akhouri Anmol Kumar •

@effessdev
bro you are Indian too, what is your opinion on India lol.

Collapse
 
effessdev profile image
EffessDev •

"mixed" 😂

Collapse
 
akhourianmolkumar profile image
Akhouri Anmol Kumar •

lol, mine too.

Thread Thread
 
akhourianmolkumar profile image
Comment deleted
Thread Thread
 
effessdev profile image
EffessDev •

Yep! Now it works 👍

Thread Thread
 
akhourianmolkumar profile image
Akhouri Anmol Kumar •

yeah I thought I've to fix the auth bruhh but yeah now I'm happy now try it.

Collapse
 
akhourianmolkumar profile image
Akhouri Anmol Kumar •

bro @effessdev
have you tried this?
apicweb.vercel.app/

Thread Thread
 
effessdev profile image
EffessDev •

Cool 😲

Thread Thread
 
akhourianmolkumar profile image
Akhouri Anmol Kumar •

you liked it?

Thread Thread
 
effessdev profile image
EffessDev •

I thought you were against making people sign in. But I can't sign in anyway 😂:

I have also gotten this exact error countless times on MmOrganized. It's REALLY annoying!

Thread Thread
 
akhourianmolkumar profile image
Comment marked as low quality/non-constructive by the community. View Code of Conduct
Akhouri Anmol Kumar •

bro akhouri systems have only 1 web app and I want to track the user count by gmails that's why I need you to sign up.
so yeah akhouri systems is against sign-ups but just for tracking in APICWeb only.
and whattt sign up issue?
let me check. you try one more time.

Thread Thread
 
akhourianmolkumar profile image
Comment deleted
Thread Thread
 
effessdev profile image
EffessDev •

Ok...

Thread Thread
 
effessdev profile image
EffessDev •

Comment got deleted 🤔

Thread Thread
 
akhourianmolkumar profile image
Akhouri Anmol Kumar •

yeah that comment broke the code of conduct of dev.to I didn't deleted it.

Thread Thread
 
effessdev profile image
EffessDev •

But that link works! You should add this link to OAuth too.

Thread Thread
 
akhourianmolkumar profile image
Akhouri Anmol Kumar •

yeah I will.

Thread Thread
 
effessdev profile image
EffessDev •

Ok tried it. THIS IS REALLY GOOD.

Thread Thread
 
akhourianmolkumar profile image
Akhouri Anmol Kumar •

yeah and it's privacy first(yeah gmail signup required but the removal object AI is on client side no extra 3rd party come in between APIC and a user) MI-GAN

Thread Thread
 
effessdev profile image
EffessDev •

BG removal is not good yet. But we can improve it!

After removing BG:

Thread Thread
 
akhourianmolkumar profile image
Akhouri Anmol Kumar •

oh.. I see and remove object? it is good I think.

Thread Thread
 
effessdev profile image
EffessDev •

What? I didn't get it... 🤔

Thread Thread
 
akhourianmolkumar profile image
Akhouri Anmol Kumar •

bro you tested remove background not remove object.

Thread Thread
 
effessdev profile image
EffessDev •

Yeah. Should I test remove object?

Thread Thread
 
akhourianmolkumar profile image
Akhouri Anmol Kumar •

yeah bro it's the thing for which I'm proud about also you tested all?

Thread Thread
 
effessdev profile image
EffessDev •

Why does it draw dots instead of lines?

Thread Thread
 
effessdev profile image
EffessDev •

It distorted everything. Probably because i wasn't patient enough to paint it properly 😂

Buy the way, how did you build something this big?

Thread Thread
 
akhourianmolkumar profile image
Akhouri Anmol Kumar •

bro paint it more and also I can't see what are you trying to remove.
like that labelled text?

Thread Thread
 
effessdev profile image
EffessDev •

Really sorry, I want to go to bed 😪

I'll test it tomorrow for SURE (on my phone). I hope it works on phones.

Please tell me how you built it... 🥹

Thread Thread
 
akhourianmolkumar profile image
Akhouri Anmol Kumar •

@effessdev bro, no need to say sorry you all are not like me, lol I'm night wolf but because my 2 bros xulingfeng and the lazy girl said to not sleep so late now I'm trying to make myself sleep till 12:00am for guaranteed.
btw I built apic web: ------------------------------
APIC is justt a basically a single HTML file, no big framework, just plain HTML, CSS and vanilla JS. All the editing stuff (filters, resize, compress, convert) runs on the Canvas API, and I export with toBlob so nothing ever gets uploaded to a server.(that's why privacy first but yeah just signup is not privacy part but still bro I said it's because user count....)

For the AI part (bg remover etc) I used ONNX Runtime Web, so the models run inside the browser using WASM/WebGL. The inpainting one is MI-GAN which I pull from HuggingFace.
which makes it privacy first (that's why I call myself I build what others forgot to fix)
Thats all the reason it works fully private, your image never leaves ur device.

For login and saving user data I used Firebase (Auth + Firestore) with Google Sign-in, and also i TRIED to intergrate automatic Email setup thank you gmail but I failed to do it so I Gave up usually I don't gave up but for this I do so but also 1 more reason I thought I should send hand written mails of thank you to make user feel more connected to company(founder personally) &
Fonts are Space Grotesk, Inter and JetBrains Mono, and the whole thing is hosted free on GitHub Pages. Also added SEO stuff like OG tags and schema markup so it shows up properly when shared. but still in SEO I didnt seen any good outcome lol orgnically 0 signup all because of marketing pure marketing...
bruhhh, still let's see what is future of APIC-web
it's the only web based tool I've built under akhouri systems and it's web version and upgraded version of APIC v1 desktop .exe app.

good night and thanks for testing my apps and website.
you are acting like my CTO like mustafa ERBAY he is my experienced bro I met him in dev.to he always gave my suggestions, feedbacks and more.
although he is too busy or maybe doesn't like to talk to a 13yr boy a lot because he doesn't always comment in my posts as you can see lol.
thanks for being my active CTO.
mustafa ERBAY & you both CTO in POV of me.

Thread Thread
 
akhourianmolkumar profile image
Akhouri Anmol Kumar •

whatt? bro in mobile are you doing?
but when I tested and used it is working fine bro hold the paint and drag it rub it around the object.

Some comments may only be visible to logged-in visitors. Sign in to view all comments.