Smartphones

Pre-Installed Apps on Smartphones Pose Significant Data Privacy Risks, Study Finds

A new analysis by cybersecurity firm Surfshark (https://surfshark.com/) indicates that smartphones arrive with a substantial number of pre-installed applications, many of which collect user data from the device's initial activation.…

September 29, 2026
3 min read

A new analysis by cybersecurity firm Surfshark (https://surfshark.com/) indicates that smartphones arrive with a substantial number of pre-installed applications, many of which collect user data from the device’s initial activation. The study highlights notable differences in the volume of preloaded apps, the flexibility to remove them, and the extent of data collection across leading manufacturers.

While the average smartphone user reportedly manages 60 to 90 applications, with only a fraction used regularly, 60% to 70% of apps often remain dormant in the background. Surfshark’s research reveals that this “bloatware” begins with the manufacturer, with some devices featuring close to 90 preloaded applications.

Manufacturer Comparison: App Count and Removal Flexibility

The study identifies Samsung devices as leading in pre-installed applications, logging 88 user-facing apps. Of these, 57% were deemed safe to remove without affecting phone functionality by the Universal Debloater Alliance Next Generation project. These applications collect an average of 13 data types.

In contrast, Apple iPhones ship with approximately 50 pre-installed apps. Users in the European Union have the flexibility to remove up to 98% of these, while users in other regions can remove 88%. iOS apps evaluated in the study collected an average of 8 data types.

Smartphones

Xiaomi smartphones featured 61 preloaded user-facing apps, with 57% considered safe for removal. These apps collect an average of 16 data types. Google smartphones, according to the analysis, had 71 preloaded apps, but offered the least flexibility, with only 38% identified as safe to remove. Google’s pre-installed apps disclosed an average of 13 data types.

Data Collection Practices and Privacy Implications

The research underscores concerns about data collection, particularly from third-party applications often preloaded by manufacturers. For instance, the study noted that apps like Facebook and Instagram, when pre-installed on Samsung devices, gather 37 out of 38 listed data types. Other third-party apps, including Netflix, Microsoft OneDrive, and Link to Windows, also collect various data points.

Tomas Stamulis, Chief Security Officer at Surfshark, commented on the findings: “Data collection practices by popular applications, particularly social media platforms and chatbots, raise privacy concerns. While certain data points are necessary for basic operational functionality, entities may harvest information for targeted advertising or may even share it with undisclosed third parties. As a result, users are highly recommended to audit installed applications, review permissions, and remove or disable unused apps. Even never-used applications can gather personal data and link to your device.”

Data types collected include various forms of location data (approximate location, precise location, physical addresses), behavioral data, user-generated content, and sensitive information. On both Google and Xiaomi devices, Google Gemini and the core Google app were identified as the most data-intensive, each collecting 29 of 38 data types. However, both manufacturers also include apps that claim to collect no data, such as Password Manager on Google devices and Weather on Xiaomi devices.

Stamulis further suggested that while linking data to a single ecosystem offers convenience, users prioritizing privacy should consider third-party alternatives. “Relying entirely on pre-installed applications can affect your privacy, as apps don’t always protect user data as you might expect. Shifting to third-party alternatives that are privacy-focused can help minimize data collection, limit overall exposure, and reduce unwanted targeted ads. It can also mitigate the risks associated with potential data breaches as your personal data is not stored in a single database,” he added.

This study adds to ongoing discussions in the tech sector regarding digital privacy and consumer control over their devices, a topic frequently covered on platforms like TechnoSports (https://technosports.co.in/). The findings emphasize the importance for users to review and manage the applications on their smartphones to better safeguard their personal data.

Follow us on Google News Get real-time updates & exclusive tech coverage
Follow

Leave a Reply

Your email address will not be published. Required fields are marked *

wp_enqueue_script('jquery', false, [], false, true); // load in footer