[snazz]

I’m pretty sure it would be somewhere within the Google Play Services blob. You should be good if you build your own AOSP, although binary hardware drivers might have the ability to do shady things.