<?xml version="1.0" encoding="utf-8"?><feed xmlns="http://www.w3.org/2005/Atom" ><generator uri="https://jekyllrb.com/" version="3.10.0">Jekyll</generator><link href="http://blog.geckocode.pl/feed.xml" rel="self" type="application/atom+xml" /><link href="http://blog.geckocode.pl/" rel="alternate" type="text/html" /><updated>2026-08-23T20:38:12+00:00</updated><id>http://blog.geckocode.pl/feed.xml</id><title type="html">Grzegorz Czernatowicz | GeckoCode Blog</title><subtitle>Writing about programming and tech</subtitle><author><name>Grzegorz Czernatowicz</name></author><entry><title type="html">Privacy First Apps</title><link href="http://blog.geckocode.pl/2026/08/23/privacy-first-apps.html" rel="alternate" type="text/html" title="Privacy First Apps" /><published>2026-08-23T00:00:00+00:00</published><updated>2026-08-23T00:00:00+00:00</updated><id>http://blog.geckocode.pl/2026/08/23/privacy-first-apps</id><content type="html" xml:base="http://blog.geckocode.pl/2026/08/23/privacy-first-apps.html"><![CDATA[<p>title: “Proving your Android app respects user privacy without source code”
date: 2026-08-23
—</p>

<h3 id="living-in-the-slop-era">Living in the slop era</h3>

<p>Publishing source code of the app you worked on for months or years might not be the best idea in the age of AI and slop.
What’s stopping bots and agents from forking your work and spinning up their own version? Nothing. 
We have to use something different to prove that our app won’t send any user data to your server, some cloud or advertising platform.</p>

<p>On Google play there is a section talking about privacy and how user data is processed. The problem is that this section is just a declaration.
There is no substance behind it, Google is not and can’t verify this.  It’s just a promise and there is no reason to trust it.
So how to actually prove that the app doesn’t send any data in a way anyone can verify?</p>

<h3 id="proving-privacy-first-principle">Proving privacy-first principle</h3>

<p>How a program can share user data with anybody developers wants? Using a some kind of transportation protocol suite, like an Internet. 
You probably can see where I’m going with this:</p>

<p>If the app CANNOT access the internet, it can’t exfiltrate any data.</p>

<p>WIP</p>]]></content><author><name>Grzegorz Czernatowicz</name></author><summary type="html"><![CDATA[title: “Proving your Android app respects user privacy without source code” date: 2026-08-23 —]]></summary></entry></feed>