Post #3429255

2026-06-24 18:03 UTC

Google has misled companies about what the Play Integrity API provides. It doesn't genuinely enforce having a secure device or legitimate app, it only pretends to. It leaves huge security holes open. It enforces Google's business interests and bans having a reasonably secure device with GrapheneOS.

Replies (3)

@GrapheneOS@grapheneos.social 2026-06-24 18:05

Most companies are unlikely to stop using the Play Integrity API but most are willing to start permitting GrapheneOS via hardware attestation with enough pressure. In addition to every user of their app on GrapheneOS leaving a 1 star review on the Play Store, multiple other steps can be taken too.

Open ##3429256
@frank@social.fraxoweb.com 2026-06-24 18:18

@GrapheneOS@grapheneos.social I don't use #spotify much and I'm even thinking about deleting my account soon But lately, I've noticed this little "Play Integrity API usage" window whenever I use Spotify on GrapheneOS Is this something to be worried about?

Open ##3429292
@thomas@muenchen.social 2026-06-24 20:27

@GrapheneOS@grapheneos.social More generally, the point of this kind of attestation in the general public is always to enforce developer's interests *against* the user. Often also anti-competitive. Even if they supported GrapheneOS at some point, general OS development would still be blocked. And even you as GrapheneOS would make yourselves dependent: They can always threaten you to withdraw attestation if they don't like your future plans for even better privacy protection against their abuse.

Open ##3429298