As part of the T2 Panic effort, I’ve recently been diving deep into the issues of sharing location. It is unfortunately looking really bad, with many services, including Google, frequently sharing location as plain text over the network. I’ve started to write up some of the issues on this blog.
As part of this, I’ve put together an experimental Android app that aims to act as a privacy filter for all ways of sharing location. Mostly, that means it accepts all sorts of URLs from location services, and tries to parse the location from the URL, then rewrites it into a
geo: URI, which is the standard way to share location in Android (and hopefully soon all others). As of ChatSecure v14.1.0, these
geo: URLs are also clickable.
Many URLs are not parsable, like
http://goo.gl/maps/Cji0V. LocationPrivacy then goes online and to try to fetch the location. This should happen over Tor, but it does not yet. You have been warned! Otherwise, it changes the URL to
HTTPS on services that support it.
Or from Google Play:
Report issues here:
Please do not rely on this app for strong privacy, it is still very much a new, beta app.