A few weeks ago I did something embarrassingly simple: I pointed my Android phone's DNS at NextDNS, turned on logging, and just left it alone. No apps opened, no browsing, phone face-down on the desk. I wanted to see what my phone talks about when I'm not the one talking to it.
Turns out my phone has a lot to say. And almost none of it was to me.
What actually showed up in the logs
Within the first hour, before I'd touched a single app, the query log was already scrolling. Analytics pings. Crash reporting handshakes. Push notification services checking in like clockwork. By the time I had a real sample size, close to a third of all outbound DNS queries from a phone that was, by any reasonable definition, just sitting there — were getting flagged and blocked as ads or trackers. Not "I was scrolling Instagram" traffic. Idle traffic. Screen off, no interaction, sitting on a desk being a small glowing brick.
And here's the part that actually got under my skin: the single biggest source of that traffic, by a wide margin, wasn't some sketchy third-party SDK I'd never heard of. It was Google. Analytics, Ads, DoubleClick, Crashlytics — the whole in-house stack, running quietly underneath apps that had nothing to do with search or ads at all. Then a handful of the usual push-notification and analytics middlemen behind that. My phone runs Android. Of course a chunk of that traffic is Google's own OS talking to Google's own servers. But watching the actual volume, in real time, with domain names instead of vague reassurances, hits different than reading a privacy policy that says "we may collect usage data to improve your experience."
This is the part where I'd normally tell you I'm exaggerating for effect. I'm not. This is just what a stock Android phone does by default, and I hadn't even gotten to the browser yet.
Turns out this isn't a vibe, it's a measured, peer-reviewed fact
Here's where I stopped feeling paranoid and started feeling validated. Researcher Douglas Leith at Trinity College Dublin ran a formal study comparing telemetry traffic from Android and iOS handsets back to Google and Apple. The findings: both operating systems transmit telemetry even after a user explicitly opts out in settings. Both send data before you've ever logged in, in some cases before you've logged in at all. And Android sends dramatically more of it — on an idle handset, a Pixel checks in with Google's servers roughly every four and a half minutes, and Google collects something in the neighborhood of 20 times more telemetry volume than Apple does from an equivalent iPhone.
This isn't a fringe theory some guy posted on a forum. It's peer-reviewed academic research, and it got expensive for Google to ignore: in July 2025, a California jury awarded $314.6 million against Google specifically over Android phones transferring data to Google's servers while idle — over cellular data, at the phone owner's own expense, functionally billing you for the privilege of being tracked. Google's spokesperson called the verdict a misunderstanding of services "critical to the security, performance, and reliability of Android devices." Maybe. It's also, technically, the exact behavior an independent academic study measured and published years before a jury agreed a real person got harmed by it. A second case covering the other 49 U.S. states followed.
Google isn't just an app on your phone, it's most of the pipe your phone talks through
Step back from the DNS logs for a second, because the telemetry itself is only half the story. The other half is just how much of the internet's plumbing runs through one company by default, which is what makes "opting out" such a hilarious concept in practice.
As of 2026, Android sits around 72-73% of global mobile OS market share. Chrome holds somewhere around 68-70% of the global browser market, meaning the majority of humans reading anything online right now are doing it through a piece of software built by the same company that runs the ad network deciding what you see next. Google Search still commands somewhere north of 90% of the search market globally, and in the U.S., a federal judge already ruled in August 2024 that this dominance constitutes an illegal monopoly under the Sherman Act — a ruling whose remedies trial is still working its way through 2026. The EU fined Google $3.5 billion in September 2025 for separate competition violations. None of that dented Search revenue through the most recent quarter on record. You can win the ruling and still lose nothing that matters financially, which tells you everything about how enforcement currently scales against companies this size.
Put plainly: it's not that Google collects a lot of data. It's that Google built, owns, and operates the road, the car, and the tollbooth, and then also runs the billboard company. When one entity is the operating system, the browser, the search engine, and the ad exchange all at once, "just don't use their products" stops being a real option for the overwhelming majority of people on Earth, including, until three weeks ago, me.
The short list of companies who actually run your digital life
Google isn't alone up there, it's just the one with the most complete vertical stack. Zoom out and the internet most people experience daily runs through a genuinely small handful of companies: Google for search, Android, and the ad exchange underneath a huge share of the web's monetization. Meta for the social graph most people's real-world relationships are mapped onto. Amazon for a meaningful chunk of the cloud infrastructure the rest of the internet physically runs on, AWS included. Apple for the hardware and app-store gate on the other half of the world's phones. Microsoft for enterprise identity, GitHub, and now a deepening AI stake across the stack. Five companies, functionally deciding the default conditions under which a few billion people work, communicate, and get recommended what to buy next.
None of that requires a conspiracy. It's just what happens when infrastructure businesses win, at scale, for two decades straight, mostly unchallenged, while regulators wrote reports about it.
So what do you actually do with this
I'm not going to tell you to abandon Android and disappear into a GrapheneOS bunker, that's not a realistic ask for most people reading this, myself included some days. But NextDNS, or Pi-hole if you'd rather self-host it, is a genuinely low-effort way to see the shape of what's happening instead of just trusting a privacy policy summary. It won't stop everything — plenty of this telemetry survives the opt-out toggle entirely, that's the whole point of the Trinity College study. But watching the actual query log for even 48 hours will change how you think about the phrase "we only collect anonymous usage data to improve your experience," because you'll have a domain name and a timestamp proving otherwise, sitting right there in front of you.
Turns out the most educational thing you can do with a smartphone isn't installing a new app. It's just watching, for once, what it does when you're not.
