[darkwater]

Even if I hate ads and I think one should be able to ban them forever on their devices, Android could just add an "Internet access" permission that only counts for Internet access required outside the Ads API, so they would keep their ads and users could be a bit safer on the "this app is snooping my data" side.

[wongarsu]

That would only work if they open up the Ads API to work with any ad network. Otherwise it would basically kill any competition in the Android Ad space, which would probably lead to EU and US regulators coming down hard on Google.

[bostonvaulter2]

They could instead expand the permission system to group various ad api's so that each api is considered a distinct permission. Honestly would be good to do that in addition (i.e. separate from) the general internet permission.

[aargh_aargh]

I agree that it would be nice to separate the privileges if it were possible.

I suspect that allowing internet access even in the form of ads opens the possibility for data exfiltration in principle. But I'm not familiar with the Android case at all.

[wizzwizz4]

It allows for expensive, obvious data exfiltration. (Expensive in the sense that somebody else could take the data, unless you're the highest bidder for those categories – assuming Google Ads still shows ads with a bid of 0, which I'm not confident in.)

[kelchqvjpnfasjl]

> outside the Ads API

Presumably these Ad APIs would be for access to Google Ads. That would seem like an anti-trust issue.

[UncleMeat]

Could you imagine the complaining for treating different ad libraries differently?