← Operating System
D

OneUI (Android Skin)

Serious concerns
Samsung · 🇰🇷 South Korea
PolicyApp PermissionsNetwork TrafficFirmwareRegulatory
Technical details
App: com.samsung.android.oneui
Manufacturer: Samsung

⚠️ The bottom line

Researchers at Trinity College Dublin bought a Samsung phone, went through setup, and unchecked every single data sharing option. Then they watched what the phone actually sent. It sent telemetry anyway — your phone's unique ID, your list of installed apps, analytics data. The researchers' conclusion was blunt: "there is no opt-out." Samsung's opt-out toggle is a placebo. 600 million Galaxy owners have a button that does nothing. Samsung calls it "Customisation Service" like it's doing you a favour. In reality, it reads your text messages, scans your contacts, logs your call history, checks where your photos were taken, records what music you listen to, and tracks every website you visit in Samsung Internet. It's enabled the moment you create a Samsung account. Even if you find the buried toggle to turn it off, Samsung keeps everything it already collected. You have to separately beg them to delete it through their privacy website. And they don't let you opt out of Health data or calendar collection at all.

Legal jurisdiction
🇰🇷 South Korea (headquarters)
PIPA read more →
Strict data protection — fined Google, Meta. But National Intelligence Service has broad surveillance powers
🇺🇸 United States (data storage)
CLOUD Act read more →
US govt can demand your data from this company even if stored overseas
FISA §702 / PRISM read more →
NSA collects stored emails, photos, messages without individual warrants
Geofence warrants read more →
Police can demand location data for everyone near a crime scene
Spying
4/4 EXTREME
Is someone spying on me?
Data Sharing
4/4 EXTREME
Who gets my data?
Kids at risk
Security
4/4 EXTREME
Is it actually secure?
Kids at risk
Honesty
4/4 EXTREME
Can I trust what they say?
REPLACE Extreme risk. Look for alternatives or lock down hard.
Use Linux Mint instead
Zero telemetry, rejected Snap, community-funded
See report →
12Contradictions
3Critical
6High
3Medium
9Sources
Findings by concern
Spying 4/4 EXTREME 5 findings
⚠️ criticalmarketing claims vs third party research
Samsung calls Knox "defense-grade security." In 2022, hackers stole 190 gigabytes of Samsung's source code — including the code for TrustZone, the component that handles your fingerprint and face unlock. Six months later, a second breach exposed the personal data of potentially more than half of all US Samsung customers. Then Samsung discovered a UK breach that had been leaking customer data for three years without anyone noticing. Three breaches in two years is not defense-grade anything.

What they claim: Samsung advertises Knox as "defense-grade security" that protects user data on Galaxy devices.

What we found: Three data breaches in two years: Lapsus$ stole 190GB of source code including TrustZone biometric security components (March 2022); US customer breach potentially affecting over half of all US Samsung consumers with PII exposed including names, dates of birth, demographics (August 2022); UK online store breach went undetected for over three years, leaking customer data from July 2019 to June 2020 (discovered November 2023).

⚡ highmarketing claims vs regulatory findings
The Texas Attorney General called Samsung's data collection a "mass surveillance program." Samsung's Smart TVs were capturing everything on your screen — every show, every game, every HDMI input — and selling that data to advertisers. Samsung buried the consent in a wall of legalese nobody reads. Texas forced Samsung to actually ask permission. Your Samsung Account links your TV watching data to your phone data, building one massive profile across every Samsung device in your home.

What they claim: Samsung says it is "clear about how it collects, uses, discloses, transfers, and stores information" across its ecosystem.

What we found: The Texas Attorney General sued Samsung (December 2025) for collecting Automated Content Recognition data from Smart TV users without informed consent, calling it a "mass surveillance program." Samsung settled in March 2026, agreeing to rewrite privacy prompts and implement opt-in consent. Samsung had been burying ACR consent in lengthy Terms of Service. Cross-device Samsung Account links TV viewing data with phone telemetry data.

⚡ highpolicy claims vs regulatory findings
Samsung's Gallery app scanned your face every time you opened your photo library. Nearly 50,000 people in Illinois said Samsung never asked permission to collect their biometric data. Samsung demanded each case go to individual arbitration instead of a class action — then refused to pay for the arbitration it insisted on. A federal judge had to force Samsung to participate in its own legal strategy. That's 50,000 faces scanned without consent, and a company that won't even show up to defend the process it chose.

What they claim: Samsung's Gallery app provides convenient photo management features for Galaxy users.

What we found: Nearly 50,000 Samsung Galaxy users filed Illinois BIPA claims alleging Samsung collected facial biometric data through the Gallery app without informed consent. Samsung pushed for individual arbitration for all claimants, then refused to pay its share of arbitration costs. A federal judge had to order Samsung to engage in the arbitration proceedings it had demanded.

⚡ highmarketing claims vs firmware analysis
Samsung markets Knox to governments and corporations as "defense-grade" security. Israeli researchers found they could break into the Knox container and read everything inside it. A separate vulnerability let attackers remotely install any app with full permissions. The clipboard leaked data between the "secure" container and the regular phone. Knox Guard — the remote lock feature — could be bypassed by changing the clock. These aren't theoretical risks. They're published CVEs with working exploits.

What they claim: Samsung Knox provides "defense-grade" containerization protecting sensitive enterprise and personal data from unauthorized access.

What we found: Multiple published CVEs demonstrate Knox vulnerabilities: remote code execution via smdm:// protocol handler allowing malicious APK installation with arbitrary permissions (Galaxy S4/S5/Note 3/Ace 4); CVE-2016-1919/1920/3996 allowing attackers to access Knox-protected data or intercept all traffic inside and outside the Knox container; clipboard data leaks between Knox and personal containers; Knox Guard bypass via system time manipulation (pre-Dec 2023); Knox AI privilege escalation (pre-Sep 2023).

⚫ mediumpolicy claims vs network analysis
If you own a Samsung phone, a Samsung TV, and a Samsung watch, Samsung knows what you watch, where you go, who you call, what you say to Bixby, what apps you use, what websites you visit, and your heart rate — all tied to one Samsung Account. There's no single place to see everything Samsung knows about you. Each device has its own settings buried in different menus. Samsung calls this an "ecosystem." It's actually a surveillance network you pay to build in your own home.

What they claim: Samsung claims to be transparent about cross-device data practices and gives users meaningful control over their Samsung Account data.

What we found: Samsung Account links data across phones, tablets, watches, TVs, and appliances. Smart TV ACR data (everything displayed on screen) flows through the same account as phone telemetry. The Customisation Service builds profiles from all connected devices. Users who own multiple Samsung products face compounding data collection with no unified dashboard showing what data is collected from which device or how it is combined.

Data Sharing 4/4 EXTREME 3 findings
⚠️ criticalpolicy claims vs app permissions
Samsung calls it "Customisation Service" like it's doing you a favour. In reality, it reads your text messages, scans your contacts, logs your call history, checks where your photos were taken, records what music you listen to, and tracks every website you visit in Samsung Internet. It's enabled the moment you create a Samsung account. Even if you find the buried toggle to turn it off, Samsung keeps everything it already collected. You have to separately beg them to delete it through their privacy website. And they don't let you opt out of Health data or calendar collection at all.

What they claim: Samsung's Customisation Service "provides an enhanced user experience" with user control, and users can "opt out at any time."

What we found: The Customisation Service builds advertising profiles from contacts, call logs, text messages, photo metadata (location/time), browsing history, music habits, precise GPS location, and installed app lists. Samsung does not allow opt-out from collection of Health data, calendar events, app usage, or photo metadata. Disabling the service does not delete already-collected data — users must separately request erasure through Samsung's privacy website.

⚡ highpolicy claims vs firmware analysis
You paid $1,200 for a Samsung Galaxy S24 Ultra. Samsung pre-installed Facebook on it — not just the app, but three additional Facebook services running in the background. You can't uninstall them. You can disable them, but your carrier's next software update might re-enable them. Samsung collected money from Facebook to put tracking software on a phone you already paid full price for. That's not "user control" — it's a phone that serves two masters, and neither of them is you.

What they claim: Samsung claims users can control their data and choose what to share on their Galaxy devices.

What we found: Samsung Galaxy devices ship with 127-132 pre-installed apps (documented on Galaxy Note 10+ and S20) that cannot be uninstalled, including Facebook, Facebook App Installer, Facebook App Manager, and Facebook Services installed via revenue-sharing agreements. Each app operates under its own data collection policies. Carrier software updates can re-enable previously disabled bloatware without user consent.

⚫ mediumpolicy claims vs third party research
Your Samsung phone broadcasts its IMEI — a permanent hardware ID that's basically your phone's fingerprint — to Samsung's servers along with a complete inventory of every app you've installed. Researchers pointed out that an app list alone reveals intensely personal information: a fertility app suggests you're trying to get pregnant, a Grindr install reveals sexual orientation, a Quran app reveals religion. Samsung collects this from every phone, and the IMEI means they always know exactly whose list it is. You can't change your IMEI. You can't opt out.

What they claim: Samsung says it protects user data and follows privacy best practices across its Galaxy device ecosystem.

What we found: Trinity College Dublin researchers found Samsung phones collect and transmit long-lived hardware identifiers (IMEI, hardware serial numbers) that persist across factory resets and cannot be changed by users. All Samsung phones also transmit the complete list of installed apps to Samsung servers — an app list that can profile medical needs, political leanings, religion, and sexual orientation.

Security 4/4 EXTREME 2 findings
⚡ highpolicy claims vs network analysis
Samsung says Bixby only listens when you tell it to. What they don't emphasise is what happens after: your voice recordings get sent to third-party companies, combined with data from your other Samsung services, and used to build an advertising profile. Common Sense Media — the organization parents trust for child safety ratings — gave Bixby a "Warning" for privacy. Samsung won't clearly say how long they keep your voice recordings or when they delete them.

What they claim: Bixby Voice Privacy Notice states Samsung will "only collect voice information if you activate Bixby" and gives users control over their voice data.

What we found: Bixby transmits voice recordings and device identifiers to third-party service providers for speech-to-text processing. Samsung's privacy policy permits combining Bixby data with data from other Samsung services and third-party sources for user profiling. Common Sense Media rated Bixby's privacy as "Warning" — citing data sharing with third-party ad networks, unclear encryption practices, and no clear data retention or deletion policies.

⚡ highpolicy claims vs app permissions
Samsung makes you create an account to use basic features of the phone you already bought — downloading apps from Galaxy Store, finding your lost phone, even changing your wallpaper theme. The moment you create that account, the Customisation Service starts profiling you. Then Samsung got breached — twice in 2022 — exposing the personal data they shouldn't have been collecting in the first place. A CCPA lawsuit said exactly that: Samsung should never have required this information.

What they claim: Samsung requires a Samsung Account for "a better experience" and claims users control their data.

What we found: The CCPA lawsuit (Seirafi et al v. Samsung) alleged Samsung "should never have collected the information in the first place" by requiring account registration for basic device features (Galaxy Store, Find My Mobile, themes). Creating an account triggers Customisation Service enrollment and links all device data to a single identity. Two data breaches in 2022 then exposed this unnecessarily collected personal information.

Honesty 4/4 EXTREME 2 findings
⚠️ criticalpolicy claims vs third party research
Researchers at Trinity College Dublin bought a Samsung phone, went through setup, and unchecked every single data sharing option. Then they watched what the phone actually sent. It sent telemetry anyway — your phone's unique ID, your list of installed apps, analytics data. The researchers' conclusion was blunt: "there is no opt-out." Samsung's opt-out toggle is a placebo. 600 million Galaxy owners have a button that does nothing.

What they claim: Samsung states it collects diagnostic data "with the user's consent" and users can opt out of data sharing at any time.

What we found: Trinity College Dublin researchers conducted a peer-reviewed study proving Samsung phones send telemetry (IMEI, serial numbers, installed app lists, analytics) even when users explicitly opt out of all diagnostic data sharing during setup. The researchers concluded: "there is no opt-out" and "this data collection occurs even though privacy settings are enabled."

⚫ mediummarketing claims vs app permissions
Your Samsung phone comes with two app stores you can't remove: Google Play and Galaxy Store. Both track what you download, what you search for, and what you browse. Samsung isn't offering you choice — it's doubling the number of companies monitoring your app habits. Samsung gets paid when Galaxy Store pushes apps to you, which means the apps Samsung recommends aren't necessarily the best for you — they're the most profitable for Samsung.

What they claim: Samsung promotes Galaxy Store as a curated, safe app marketplace that gives users choice.

What we found: Galaxy Store ships pre-installed and cannot be removed. It duplicates Google Play Store functionality under Samsung's separate data collection policies. Samsung uses Galaxy Store download data as part of its analytics pipeline. Users have two irremovable app stores collecting data about usage, preferences, and download history — doubling the tracking surface with no option to remove either.

What happened to real people
Documented incidents involving Samsung products and user data.
Lapsus$ stole 190GB of Samsung source code including biometric unlock algorithms and bootloader source. Potentially compromises security of every Galaxy device. [source]
What your data is worth to governments
Jurisdiction: KR (Korean National Intelligence Service Act).
Documented: Lapsus$ stole 190GB of Samsung source code including biometric unlock algorithms and bootloader source. Potentially compromises security of every Galaxy device.
Sources