Does VPNs even work against Big Brother apps? Using one really protects our privacy? (masking our location)
I am currently using Proton VPN (free tier) which is set to Always-ON and Block Connections on disable.
Today while I am going through my Gmail security option, on the devices/sessions I found my real location mentioned over there. Even when I use desktop I always connect to VPN.
On this issue I got couple of doubts:
Is this because I am using a free tier VPN? so it's not functioning properly etc...
Else google fixed my location based on my previous location history? I used my google applications without VPN for many years, I am just learning & following privacy tips recently.
It's all dependent on what you're doing and how. Like if you use Facebook you're fingerprinted to the tits.
The granularity depends on examples like that.
But something a bit more benign and not as granular would be finger printing you based on the timezone your browser offers up. It's not as basic as like "-7 GMT" since the iso list can go down to the state and or country. So if in your OS you picked "America/Houston" a lot of browsers will pony that up without hesitation.
How many more bits of data until you know what city I'm in, Street I'm on. Etc. And there's tons of ways to derive that data over time.
https://browserleaks.com/ is an interesting example that can show all the bits of data your browser can give up.
And of course you can lock lots down given the right tools.
Previous location + WiFi (google and others map it), + also logging in on your phone, + anyone else who is associated with you at that location, + exif data on photos that are uploaded, querying your browser for system time, lots more.
You can look at something like https://www.deviceinfo.me/ to see what just a browser can identify. When you connect to an account obviously the service has many more details.
If you're signed in to a Google account on an Android device with Google Play Services installed, a VPN will not hide your location from Google because the device has several ways to determine your location other than your IP address. You might be able to disable Google's location services permissions on the device, and if you're just going for a casual privacy upgrade, that should give you one.
If you really don't want Google knowing where you are, you probably can't use a phone with Google Play Services on it, as it integrates itself fairly deeply into the OS and can't necessarily be trusted to follow the permissions model in the future, even if it can be shown to do so today. Avoiding that means installing a third-party Android build on your phone. Note that a lot of third-party apps rely on Google services, and while an open source substitute exists, it's not always a smooth experience.
A VPN doesn't do anything about the GPS location on your phone.
You'd have to find out why Google thinks you have a certain location, then determine if it's worth blocking that somehow. If it's not possible, you'd have to stop using the service entirely if you don't want that data observed.
Is this because I am using a free tier VPN? so it’s not functioning properly etc…
Does Proton not have a page to check your IP address and check for DNS leaks (Mullvad does : https://mullvad.net/en -> Check for leaks) ?
Did you look up your IP address by other means ?
On the desktop with Linux you can check the content of /etc/resolv.conf and ip a (Your local IP) and ip r (Gateway address).
Else google fixed my location based on my previous location history? I used my google applications without VPN for many years, I am just learning & following privacy tips recently.
Are the sessions from your last login ? With some applications (Dunno about Google) you can delete older sessions from the overview.
Thank you for the tips. I have checked the leaks turns out it's not the problem with vpn, it's with my gps, metadata thing I think. I guess de-googling my phone solves this.
I had certain APIs circumvent my VPN in the past. Turns out my router was allowing IPv6 traffic and my VPN doesn't support that. Solved it by disabling ipv6.
Check your location by Searching ”whats my IP address?" Search engines should show it at the top of the results along with your ISP location. If using a VPN, that should show the different location you set it to.
If ONLY Google is showing your true location and your search is showing a different one, then yeah, Google is possibly using a previously known location.
Others have said all the important things, but I wanted to add that there are things that Android always tunnels through a VPN, like internet connectivity checks.
So even with Always-ON and Block Connections, this will still ignore a VPN
there are things that Android always tunnels through a VPN
Things that are NOT tunneled through the VPN, you mean.
A VPN is colloquially called a tunnel, so saying something "tunnels through" would mean that it does go through the VPN connection.
That's right !!! That was just a starting point for OP if he was on Linux and lacking that info I gave him just some pointer where to look at.
Anyway, most of the time it gets overwritten from other configuration files, nothing harmful. He could even have resolvconf installed on his system, who knows.
I am using windows but thank you for the information. Maybe it's because of my gps, metadata, phone ping, cellular network and other thing associated with play services like few mentioned in the comment section.
There are many many ways your being tracked by the apps and service you use
Unfortunately, a vpn is just the tip of the iceberg. It's a great first step but if you wanted to prevent your exact situation, I think only a phone running graphene OS would protect you in this instance since it isolates play services, among other privacy protecting features
Is this because I am using a free tier VPN? so it’s not functioning properly etc…
Free tier VPN services often come at the cost of some privacy and security features, but ProtonVPN will still protect you against IP address leakage regardless.
Else google fixed my location based on my previous location history?
Google stores location information indefinitely, so even if you are using a VPN right now it will still have a history of your real location.
Some other ways your location can get leaked to Google:
Location access for websites
Using stock Android or ChromeOS logged into that Google account
Installing Google apps on your computer
DNS leaks (e.g. through TunnelVision or a custom DNS over your VPN)
WebRTC leakage (this is a technicality and your VPN should protect against this. The uBlock Origin extension also helps)