Android’s quiet photo scanner: what it is and how to shut it down
Android’s hidden privacy risks include a background photo scanner, AI assistants that log your driving and audio, and cloud backups that silently copy app data, all of which you must actively configure if you care about control over your personal information.
Google has slipped a system service called Android System SafetyCore onto millions of phones through Google System Updates and Play Services, without a visible install prompt or user opt-in. SafetyCore works as an on-device content classifier that other apps, mainly Google Messages, use to scan images and flag nudity or other sensitive content, then blur it with “Sensitive Content Warnings”. While the scanning is on-device and adults have it off by default, the fact that a content‑scanning service was quietly installed is a red flag for anyone who values explicit consent.
If you want the Android photo scanner out of your life, you have two lines of defense. First, disable Sensitive Content Warnings in Google Messages so it stops calling SafetyCore: open Google Messages, tap your profile picture, go to Messages settings, then Protection & safety, tap Manage sensitive content warnings, and toggle Warnings in Google Messages off. If you decide you do not want SafetyCore on your phone at all, open Settings, go to Apps, tap See all apps, open the three‑dot menu, choose Show system apps, find Android System SafetyCore, then tap it and hit Uninstall.
Gemini in Android Auto: always-on AI in your car and how to tame it
Gemini has replaced the old assistant in Android Auto and that swap has serious privacy consequences. This AI now rides along in your car, with an always‑on microphone listening for “Hey Google” and logging where you drive. That combination of constant location data, Android Auto access to calls and texts, and AI analysis is more than most people signed up for when they plugged in their phones.
You cannot remove Gemini from Android Auto entirely, but you can claw back control with targeted Gemini privacy controls. Start by limiting how often it listens: turn off “Hey Google” so the AI is not constantly waiting for wake words. On your phone, go to Settings > Apps > Android Auto > Permissions and decide what Android Auto can access, including location data on Android, contacts, and microphone. The less you grant, the less Gemini can observe.
Next, decide what gets stored. Open the Gemini app, tap your profile picture, then go to Gemini Apps Activity. From there you can toggle off Keep Activity to stop future logging, or turn it off and delete everything already saved. According to one report, “Gemini logs where you drive and has an always-on microphone” in Android Auto—if that makes you uncomfortable, these settings are not optional; they are the minimum.
Android app backups: per‑app control so your secrets stay off the cloud
For years, Android app backups have been an all‑or‑nothing deal: turn backups on and Google quietly copies supported app data to your account, whether or not that data is sensitive. This made phone upgrades painless but left privacy‑minded users with a harsh choice—disable backups entirely or accept that everything from chat logs to niche app data might be mirrored in the cloud.
Google is finally fixing this by testing per‑app backup controls in the Android beta, moving a step closer to giving users more control over their data. The new interface adds separate backup toggles for each installed app, so you can decide which ones are included in your device backup instead of relying on a single master switch. Each app having its own on/off switch makes Android app backups much more flexible without making them harder to use.
When this reaches your phone, treat it as a critical Android privacy setting, not a niche feature. Turn backups off for any app that holds highly sensitive content—secure messaging, authentication apps, or anything with medical or financial data—so they never auto‑sync to the cloud. Leave backups on for everyday tools and games where convenience matters more than secrecy. Until the rollout expands, keep an eye on your system updates so you can adopt this control as soon as it appears.
Photo Picker and location data: fine‑grained controls or a new leak?
Android’s Photo Picker was originally a win for privacy: it limited which photos apps could see and stripped location data from any image you shared. That meant even if an app got a picture of your home or workplace, it could not read the embedded GPS coordinates. For users worried about location data on Android, this default behavior made the Photo Picker a safer way to share memories.
Now Google is working on more granular Photo Picker location controls. Code in a recent system update shows strings like “Include location” and “Location sharing enabled,” suggesting a toggle in the Photo Picker UI that lets you choose whether shared images include location data. In other words, you will be able to opt to include location data with shared images for apps that need it, instead of having it stripped every time.
This is a double‑edged update. On one side, it finally solves problems for apps that legitimately rely on location EXIF data to function. On the other, it introduces a new way to leak your movements if you tap the wrong option or forget a one‑time choice. When the toggle arrives, treat “Include location” as an exception you use sparingly, not a new default. Your photos are already a window into your life; adding precise coordinates makes that window wide open.
From background scanners to AI copilots: build your own privacy baseline
The pattern is clear: Android keeps adding background services and AI features that expand what the system can see and infer, often without a blunt, up‑front consent screen. A background service now silently monitors phones for unwanted content like nudity, a content‑scanning service was pushed to millions of devices through a silent update, and Gemini in Android Auto can access calls, texts, and precise driving logs. Even when features are opt‑in on paper, your phone’s default settings are already a privacy concern.
The good news is that Google also appears to hear the backlash and is moving closer to giving Android users more control over their data. Gemini privacy controls let you throttle activity logging and permissions, per‑app backups let you keep sensitive apps off the cloud, and Photo Picker toggles promise more nuanced control over location data. These Android privacy settings are not cosmetic; they are direct responses to growing user concerns about AI assistants and background data collection.
Your next step is to set a personal baseline: disable or uninstall SafetyCore if you do not accept a silent Android photo scanner, trim Gemini’s powers in Android Auto, and decide which apps deserve backup and which must stay local. Privacy now requires homework, not blind trust. The more you assume defaults are safe, the more you gift your data to services you never explicitly invited.
