[scarface_74]

What “private data” can an app leak that a website can’t if you don’t explicitly give it permissions?

[komali2]

> if you don’t explicitly give it permissions

A lot of users don't understand that permissions are optional. They just tap to make the boxes go away. So the app developer stealing your data isn't insulated from being unethical just because they gave you a series of dialog boxes on installation.

So to answer your question: your contact list, location, connected Bluetooth devices, your photos, etc.

[scarface_74]

And there are now web standards for precise location (has been forever), Bluetooth, battery status, etc

[eep_social]

If the implication was that web fingerprinting has gotten really creepy too, then I agree. Unluckily, I don’t think I can do justice to the matrix of “depending on permissions” x mobile OS x valid but overly broad permissions in a comment. Apps can and do take anything you give them, active status, location, other installed apps, battery charge percentage, etc.

[scarface_74]

Location data is permission based and at least iOS has taken steps that prevent an app from seeing other installed apps.

There is also a battery status API for browsers. Safari doesn’t support it. But Android browsers do.