Recent discussions and studies have raised concerns about Android devices potentially tracking users even before they sign in. This issue underscores the importance of understanding how device identifiers and pre-installed applications can impact user privacy.​

Non-Resettable Device Identifiers and Tracking

A study titled “On the (In)Security of Non-resettable Device Identifiers in Custom Android Systems” highlights that certain Android customizations introduce non-resettable identifiers accessible through system properties and settings. These identifiers can be exploited by third-party applications to track users without their explicit consent, even before they sign in to their devices. The study analyzed 1,814 custom ROMs and identified numerous system properties and settings storing such identifiers, many lacking adequate access control. ​

Pre-Installed Applications and Privacy Risks

Another study, “Should Users Trust Their Android Devices? A Scoring System for Assessing Security and Privacy Risks of Pre-Installed Applications,” examines the security and privacy risks associated with pre-installed applications on Android devices. These applications, present before user sign-in, often have extensive permissions and can monitor user behavior, posing significant privacy concerns. ​

Recommendations for Users

To mitigate potential tracking before signing in:

• Review Device Specifications: When purchasing a new device, research its privacy features and any known issues related to device identifiers or pre-installed applications.​
• Customize Privacy Settings: Upon initial setup, adjust privacy settings to limit data sharing and disable unnecessary services that could track your activity.​
• Consider Alternative ROMs: For advanced users, installing custom ROMs known for enhanced privacy controls can reduce unwanted tracking. However, this should be done cautiously and with a thorough understanding of the process.​

By staying informed and proactive, users can better protect their privacy and reduce the risk of unauthorized tracking on their Android devices.