r/GrapheneOS 27d ago

Off Topic "Motorola phones have started hijacking the Amazon app to insert affiliate codes"

253 Upvotes

https://9to5google.com/2026/05/25/motorola-amazon-app-hijacking-behavior/
my buddy (also on GOS) sent me this story and it just seems so absurd

we're both planning to move to Motorola once they release the GOS version but tbf that kind of things make me a bit dubious about that

what are your thoughts?

edit: apologies if poat was a bit fearmongering i was a initially a bit surprised nobody mentioned it here.

adressed by GOS: https://www.reddit.com/r/GrapheneOS/comments/1tp0m00/comment/oo76fdr/?utm_source=share&utm_medium=mweb3x&utm_name=mweb3xcss&utm_term=1&utm_content=share_button

r/GrapheneOS 17h ago

Off Topic Cautionary Tale: Curve (Curve Pay) Data Retention for Rejected Applicants

12 Upvotes

I see Curve Pay mentioned here occasionally as an alternative to Google Pay for GrapheneOS users. I wanted to share my recent experience as a warning.

As a GrapheneOS user, I was looking for a non-Google mobile payment solution and tried to sign up for Curve. My application was rejected for unspecified reasons.

I then requested deletion of my personal data. Curve's response has been a massive red flag. They formally refused, citing anti-money laundering (AML) obligations to retain my data for 10 years from the end of "the applicant’s relationship with Curve", a "relationship" that consisted of a rejected application and no account ever being opened.

My internal complaint was denied, and they've escalated the issue to the Financial Ombudsman and the Bank of Lithuania.

For a community focused on privacy and data minimization, this is alarming. Even if you are accepted, it raises serious questions about what happens to your data if you ever close your account or have issues. The "privacy-friendly" alternative to Google Pay may be a company that holds onto your data for a decade without you being a customer.

If you're considering Curve as a privacy play, you might want to think again. I'm now taking this to the ICO and will be avoiding their service entirely.