Most likely the website you pirated your movies from stored cookies in your browser which then were picked up by Google/YouTube.
That's not how that works. There were likely ads on the page which brings in Google cookies and shows the page the user is on.
OP make sure all third party cookies are blocked. They're not needed anymore.
No, they don't: https://www.youtube.com/watch?v=xtfU9AsUmc4
Again, no, they don't: https://gizmodo.com/these-academics-spent-the-last-year-testing-whether-you-1826961188
If you don't trust a 4 minute YouTube video or an independent (?) study, try a Reddit comment: https://www.reddit.com/r/Android/comments/q1u71q/comment/hfhynid/
A phone can notice when it’s in the hands of a security expert and start acting normal. Before dieselgate, Volkswagen cars had been emissions tested for years without finding anything suspicious. Turned out VW used the car’s sensors to detect when it was being tested.
Yet again, someone mistakes an anecdote for evidence. And evidence is also not the plural form of anecdote.
I'm sure we have people here who are tech-savvy enough to have actually examined the kinds of data that their phone is sharing.
If you have something like Google Home or Amazon Alexa, then yeah, those would be sending voice data back, and yeah, they could probably use it for advertising. But as far as I know, there is no evidence that phones are "always listening" and "always sending information back" when they're idle.
This may be a simple coincidence. Maybe you had similar YouTube suggestions in the past but you didn't pay attention because they come at random times. Like if you drive a Honda Civic, you tend to spot all the Honda Civic in the street.
There would be an interesting experiment to make though:
- Take a snapshot of your YouTube recommandations
- Choose a subject that has nothing to do with any of the recommandations, let's say "travel to the Bahamas"
- Hold a conversation with someone with both your phone's present, mention several time going to the Bahamas.
- Check YouTube again, si if the topic of Bahamas is appearing.
- Choose another topic not covered by your recommendations, let's say collecting stamps
- Put your phones away, have a conversation about collecting stamps
- Check YouTube recommandations
The problem comes is the suggestion of travelling to destination X (in your case, the Bahamas) doesn't just pop up out of thin air - friends may have travelled there recently, perhaps there has been a recent advertising push, etc.
Another family member looking up some destinations to travel, then speaking with you later - same external IP of the home wifi being reported, bam you get advertised the destinations they looked at the most.
Choosing a "random" topic again also doesn't come out of thin air.
No, your phone doesn't listen to you 24/7. With that out of the way, there are a number of places where youtube may have gotten that info. One possibility is that someone in your household looked up the movie and maybe checked if stuff ripped from netflix is indeed full HD. And since everyone in your family is using the same NAT IP, then it's easy for youtube to target recommendations at everyone in that household.
I don’t doubt you, but it’s worth asking if your reasons for stating that our phones don’t listen to us 24/7 haven’t changed since you first formed the opinion.
Lots of things are meso-facts (a true fact at rhetorical time we learn it, but no longer true later). Tech moves quickly. It’s worth not assuming anyone is right here, & asking: under what conditions could our phones be listening (enough to produce what OP experienced)?
Watchdog groups have been monitoring these services for years now and have yet to find the "your phone is listening 24/7" smoking gun.
First off, if you're concerned about phone privacy, consider a custom OS for your phone that respects privacy such as GrapheneOS.
It's easy to figure out that your device isn't listening to a constant audio stream 24/7, since that would drain battery and send a lot of noticeable data over the network. However, it is entirely possible to listen for certain keywords as you mentioned, and send them encrypted with another seemingly legitimate packet. There's no way to be 100% certain, but it is possible in theory without draining too much battery.
The steps you took are good, making sure that apps don't have any permissions they don't need. Privacy is a spectrum, so it's not "all or nothing". As I mentioned before, if you're seriously concerned about mobile privacy and want a solution, you can get a custom operating system that can remove any privacy invasive elements. GrapheneOS also allows you to disable the camera and microphone system-wide (although this functionality is present on some other Android builds).
If it eases you any, a lot of these advertisements happen to be coincidence and trigger confirmation bias. It could be that those ads happened to show up by coincidence, or that advertisers managed predicted your interests, or that you got tracked by some other means while downloading the movie. The possibilities are nearly endless.
You should install Rethink and see how much garbage your phone constantly transmits and receives. And this is not even a kernel-level firewall, so who knows how much data Google actually exfiltrates...
I don't know about a constant audio stream, nor about keywords, but I noticed that Google Keyboard sends out some data every time you type anything. It's not even that subtle.
If anything, I love GrapheneOS for its "Network" permission toggle. It's nice knowing that my keyboard (or any other unnecessary apps) can't phone home.
GrapheneOS is certainly on my wishlist too, but Pixels are quite pricey. I guess Rethink is the poor man's version. Just a per-app firewall.
Maybe Divest/Lineage could be an option instead. Although you have to choose a device wisely (and even among supported ones, some have trouble unlocking the bootloader), there is a chance you'd find a suitable cheaper one.
Personally no regrets spending $300 on a Pixel 7a but still painful to hand over this much.
Listening to audio would be the least effective and most expensive method of data collection for advertisers. It's not happening. They already have literally over a million data points on you, there's nothing useful for them to glean from your audio that they don't already have ad nauseum.
You see thousands of ads and recommendations every day. You finally found one that was relevant to you. It's not that deep.
The youtube algorithm determined the following: people who watch the kind of videos in your history, are also interested in recording netflix shows. And it was right, because you are in fact interested in that (general) topic. This is another possible explanation.
I’ve gotten ads for things I’ve just thought about. Never said anything out loud about or did any searches related to. It was something in a video I’ve watched dozens of videos about in the past. But on this occasion, I happened to think that I kind of want one for the first time. And I just so happened to start getting ads for them right after, also for the first time. They know way more about you than you think and don’t need to listen to you.
- A family member might have searched it
- An ad network might have reported on your piracy (especially now with privacy sandbox)
- Your media player might just be doing some tracking and/or insecure searching for metadata
- Siri or something might have popped open
- You googled to get to the piracy website
- You may have just looked up the movie, and the movie was popular with pirates
Don't get too paranoid
And how often. have you said stuff that you have not received advertising for? You will notice it when you get a positive match but not on a negative.
Data collecting companies can predict/rate your behavior for more then 20 years based. Since then. it has been perfected. They know that you are interested in those topics without having the need to waste resources on recording and analyzing every single audio stream.
Reporter: [REDACTED]
Reason: BS
Maybe I should have removed this post, because it is ridiculous.
In addition to all the GrapheneOS recommendations, there are also faraday bags. Drop the phone in while at home or wherever.
That doesn't really help unless the bag is also soundproof; it could just as easily store what you say and send it off later.
Here’s a fun little experiment you can try. Make a list of random topics and have a discussion about each of them on separate days. Make sure each topic is something that could result in creepy suggestions or ads on YT. If even one of these topics produces the expected result, you could be on to something.
Fun, sure, but not an experiment that would actually be meaningful.
The data from your phone's microphone doesn't magically appear in Google's advertising servers. It would have to go through a lot of steps before it gets there, and one of the first steps is in your home (if you're on WiFi). One can analyze the traffic/data that leaves their phone.
It's good to be cautious, but worrying about your phone's microphone is potentially like worrying about your windows while leaving your front door open.
I'll second the recommendation for GrapheneOS. One of the available options I use is to keep mic, camera, and location off at all times until I need them. That simple toggle ability changes your privacy stance greatly.
Privacy
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)