Most people believe an app asks before it uses the network. It doesn't.
On Android, INTERNET is a normal permission. It's granted at install time, it never shows a prompt, and there is no toggle for it in Settings. Camera, location, contacts - those interrupt you. Network access never does.
I spend my working day on enterprise firewalls. On a corporate network nothing talks outbound unless a rule says it can, and every session is logged. Then I go home, and the most personal device I own runs the opposite policy: allow any, any, any.
The part people get wrong
The usual answer is "I have nothing to hide." But outbound traffic isn't only about content. On a firewall, the useful signal is almost never the payload - it's who talks, to where, and how often. A device that beacons to the same endpoint every ninety seconds tells you something whether or not you can read a single byte of it.
Your phone does this all day, screen off, in your pocket.
What AI changed
A year ago, "where does this app send data" had a fairly short list of answers: the vendor, an analytics SDK, an ad network. Now apps ship AI features, and whatever you type into that polite little assistant box can leave the device and reach a model provider.
Here's the thing: that is not a new permission. Nothing on the install screen changes. It's a new destination under a permission the app already had, and the permission model has no vocabulary for it.
What you can actually do
You don't need root, and you don't need to trust a VPN provider:
- Block individual apps from Wi-Fi and mobile data separately. Plenty of apps work fine with no network at all - a calculator, a torch, an offline notes app.
- Filter at DNS level, so ad, tracker and known-threat domains don't resolve.
- Look at the outbound log before you decide anything. Opinions about privacy are cheap; the log is not.
Then re-check a week later. Apps update, SDKs get added, and a quiet app does not stay quiet forever.
The question
I'm genuinely curious about other people's results, because the first time you look at that log it's rarely what you expect.
Which app on your phone surprised you most when you actually watched its traffic?
Disclosure and links. I build the tool I described, and it's free:
- TACUNS Firewall on Google Play: https://play.google.com/store/apps/details?id=com.tacu.nsfwzerotrust
- Website: https://www.tacuns.net/
- Vibe Aegis, my open-source security scanner for AI-built apps: https://github.com/Tacuns/vibe-aegis
No root, no account, and the traffic log stays on your phone.
Top comments (0)