Would like to be able to disable PII collection on Android

[ericblade]

Hi there!

We've noticed that Sentry is collecting a geographic location and a user identifier of some sort, on Android, even with all PII switches that we've been able to find turned off. We get no such reports on other platforms.

Is there any way that we can disable these? If not, could it get added to the existing PII disable, or something added to do it? thanks :)

[linear]

UNREAL-97

[tustanivsky]

@ericblade Any chance you set user explicitly by calling USentrySubsystem::SetUser? If so, do you also provide Id and IpAddress properties for it?

Disabling SendDefaultPii in the plugin settings should be sufficient to prevent the underlying Android SDK from collecting sensitive data. However, you can double-check the Logcat logs for captured event payloads to verify whether any of the information you mentioned is still being sent from the client side. If that’s the case, configuring a custom beforeSend handler can help remove specific context fields or tags before events are sent to Sentry.

Also, please check your Sentry project's Server-Side Data Scrubbing settings. Server-side SDKs that instrument incoming requests may automatically capture the IP address and geolocation from HTTP request data.

[ericblade]

In our current project, we are just using the default initialization (currently using 1.0.2-beta I believe, we have it on our todo's to upgrade), with the SendDefault off. The user geographic location and some sort of identifier number is still being provided on Android. In our previous project, we explicitly set all of that to empty strings in a custom initialization, and still received it on Android, using 0.6.0 I think.

Some Mergers and Acquisitions activities have brought this into question and now I'm tasked with finding a way to make it stop

[tustanivsky]

The user geographic location and some sort of identifier number is still being provided on Android. In our previous project, we explicitly set all of that to empty strings in a custom initialization, and still received it on Android, using 0.6.0 I think.

To scrub geodata (and potentially any other unwanted PII) you have to configure corresponding rules for your Sentry project settings ([Project] > Settings > Security & Privacy) as it's added to captured events after their server-side processing.

[ericblade]

Thanks, I'll check into that, there was an assumption that it is software side, because it's only happening on the Android side, and also that there is a user id added with it, so we were thinking it is something pulled from the device itself probably?