This seems incorrect and gives absolutely no information about how they tested and exactly whuch data was sent. I’ve had Google authenticator on my phone for a long time and the logs show absolutely zero mobile data used from the app. So I’m gonna call bullshit on this article.

I also do not see nearly as many permissions requested as in that screenshot. It needs photo and video permissions because you can upload qr codes and stuff. Also you can (don’t have to) link it your google account, so obviously it would have access to your google stuff.

Fyi I’m not defending google. I hate them. Just trying to call out potentially misleading or wrong information.