Particle.news
Download on the App Store

Android’s ‘Intrusion Logging’ Emerges in Leaks With Encrypted, Cloud-Stored Activity Records

The feature remains unreleased as reports highlight a 12-month retention policy without manual deletion.

Overview

  • Clues in a recent Google Play Services build, surfaced by tipster AssembleDebug and reported by Android Authority and Android Central, point to a toggleable setting under Advanced Protections.
  • Leaked screenshots indicate the logs would capture device connections, app installations, the last screen unlock time, some browsing history, and other activity.
  • Reports say logs are encrypted, stored on Google Cloud, and retrievable only with the user’s Google account plus lock‑screen credentials.
  • Code references suggest users could be connected to a trusted expert for help if suspicious activity is detected on their device.
  • Google has not announced a release, and coverage suggests it may arrive in a future Android 16 QPR for Pixel devices following QPR3 Beta 2, though timing remains unconfirmed.