Cybernews has discovered that, even when GPS is turned off, Google may still monitor users’ whereabouts every fifteen minutes. Concerns over user privacy and data security have been raised by the Cybernews research team, who claim that data from the new Pixel 9 Pro XL is being transferred to Google’s servers continuously.
Cybernews conducted the test by rooting a brand-new Pixel 9 Pro XL with a fresh Google account and default settings. This allowed them to intercept and decrypt the data being sent to Google. They found that every 15 minutes, the Pixel 9 Pro XL transmitted data packets containing location, email address, phone number, network status, and other telemetry data to Google. This data was sent to various endpoints, including Device Management, Policy Enforcement, and Face Grouping.
Even more troubling is that location data was shared even when GPS was disabled. Instead of using GPS, the phone relied on nearby Wi-Fi networks to estimate the user’s location. This revelation highlights the sensitivity of location data and the potential privacy risks associated with such tracking.
The Cybernews team noted that the phone also reached out to Google servers to download and execute new code periodically, which could open up security risks. While there is no direct evidence of vulnerability to third-party code, this practice raises concerns about the potential for sophisticated attackers to exploit these communications.
Cybernews also found that the gadget interacted with services—like the Google Photos app—for which users had not provided express approval. The Pixel 9 Pro XL made touch with the Face Grouping feature of Google Photos even though they didn’t launch the app or snap any pictures.
Transparency is the primary issue, even if certain data collection would be required to provide capabilities like Car Crash Detection. Users need to be made fully aware of the types of data being gathered and why. The research from Cybernews emphasizes how crucial it is to comprehend how much power users actually have over their personal data and how much of that control is still held by internet behemoths like Google.
