I'll wait for someone to do a network call audit before I trust something like this
I've been working on a small project running mitmproxy on a lot of 'privacy-focused' baby-tracking apps and only one of the ones I've tested doesn't send back a bevy of analytics data (none of which they openly promise to anonymize)
some of the worst culprits had things like the Facebook SDK and Google Ads installed and sending data in spite of literally promising not to generate an Ad ID and three (Baby+, Nanit, and Pregnancy+) straight up had Microsoft Clarity sending data (ie basically screen recordings and full input logs)
one open-source, locally hosted one (that's slightly inconvenient if you don't have a home server that can sync logs) - <a href="https://github.com/babybuddy/babybuddy" rel="nofollow">https://github.com/babybuddy/babybuddy
and a really obscure and clearly vibe-designed one (that still works fine) that only fired off a single Firebase call noting an install: <a href="https://play.google.com/store/apps/details?id=com.mimiapp.mimilog&hl=en_US&pli=1">https://play.google.com/store/apps/details?id=com.mimiapp.mi...
one caveat is that I haven't done anything like longterm use testing - just account setup and a handful of inputs like a specific feed time and amount, etc. if these apps are firing off data with delayed intervals, I wouldn't have captured it
re Nanit, yes, it sent a request to <a href="https://r.clarity.ms/collect" rel="nofollow">https://r.clarity.ms/collect with a 1.1KB payload after only a few seconds of use. everything I've read about MS Clarity and MS in general around their data practices makes me extremely wary that such a popular app collects this much data
paimapi · · focus · HN ↗
I've been working on a small project running mitmproxy on a lot of 'privacy-focused' baby-tracking apps and only one of the ones I've tested doesn't send back a bevy of analytics data (none of which they openly promise to anonymize)
some of the worst culprits had things like the Facebook SDK and Google Ads installed and sending data in spite of literally promising not to generate an Ad ID and three (Baby+, Nanit, and Pregnancy+) straight up had Microsoft Clarity sending data (ie basically screen recordings and full input logs)
Jimpulse · · focus · HN ↗
Also, surprised with Nanit, Microsoft Clarity was found on the phone app?
With the whole LG fiasco I wouldn't be surprised if the camera itself was doing network fingerprinting and data collection.
paimapi · · focus · HN ↗
and a really obscure and clearly vibe-designed one (that still works fine) that only fired off a single Firebase call noting an install: <a href="https://play.google.com/store/apps/details?id=com.mimiapp.mimilog&hl=en_US&pli=1">https://play.google.com/store/apps/details?id=com.mimiapp.mi...
one caveat is that I haven't done anything like longterm use testing - just account setup and a handful of inputs like a specific feed time and amount, etc. if these apps are firing off data with delayed intervals, I wouldn't have captured it
re Nanit, yes, it sent a request to <a href="https://r.clarity.ms/collect" rel="nofollow">https://r.clarity.ms/collect with a 1.1KB payload after only a few seconds of use. everything I've read about MS Clarity and MS in general around their data practices makes me extremely wary that such a popular app collects this much data
ahknight · · focus · HN ↗