Meta Suspends Android Localhost Tracking After Privacy Researchers' Exposure

Meta has been sued and criticized after researchers revealed that it covertly tracked Android users' web browsing activity by exploiting the localhost feature on mobile devices, linking browsing data to users' Facebook and Instagram profiles without consent. This method bypassed Android's permission system and browser privacy controls, including incognito mode, by having Meta's apps listen on fixed local ports and communicate with tracking scripts embedded in millions of websites. Yandex was also found to be using similar techniques, raising broader concerns about privacy violations on Android devices. Following the exposure, Meta paused the functionality of its Pixel tracking script and is in discussions with Google to resolve potential policy violations, as Google confirmed the tracking violated Play Store terms and Android privacy expectations. Researchers and browser developers are working on technical defenses against such tracking methods to better protect user privacy. Meta has not yet provided detailed comments on the ongoing discussions or the lawsuit filed in California.