Mobile analytics SDKs silently collect identifiable data

“Show HN: Respectlytics – Open-source, privacy-first mobile analytics (MIT+AGPL) Hey HN — I built Respectlytics because I was frustrated that every mobile analytics SDK quietly collects device IDs, ad identifiers, and IP addresses, then makes you retroactively figure out compliance. There are some solutions out there claiming that they are compliant with certain privacy regulations but when I dig into it, I observe that they actually are not that compliant as they claim to be. I believe Respectly”

“US banks data-importer, www.basiq.io ### Support guidelines - [X] I've read the [support guidelines](https://github.com/firefly-iii/firefly-iii/blob/main/.github/support.md) - [X] My request is not listed as [a very good idea, but unfortunately...](https://docs.firefly-iii.org/firefly-iii/more-information/what-its-not/) - [X] I've used [the search](https://github.com/firefly-iii/firefly-iii/issues?q=is%3Aissue) and this has not been requested before. ### Description Giving that Salt Edge has”

“Launch HN: Traceforce (YC S26) – Company-wide security monitoring for AI apps Hey HN, we’re Xia and Varun, the founders of Traceforce ( https://www.traceforce.ai/ ). Traceforce provides visibility and control over AI apps such as ChatGPT, Claude etc directly on all devices (laptops, sandboxes, virtual machines) by discovering not just which apps are being used but also how they are connected to other data sources via MCPs. We also have an open-source dynamic MCP pentesting tool ht”

“Show HN: Ingestlayer – Programmable event tracking pipelines Hey HN, I got tired of rewriting the same event handling code, so built a more permanent solution for myself. The idea is something happens here (a signup, a failed payment, a support ticket, an error) and three things need to happen there: a Slack message, a row in a database, an email. Every time it's a new handler in code (maybe even retries, a queue, etc.) and maybe even more work integrating with Customer.io, Zapier, and so o”

“Ask HN: My competitor wants to buy us out, recommend a lawyer? My tech company has grown to the point where has become a significant threat to the industry leader. They have reacted by asking if we are open to acquisition. I’m looking for suggestions of lawyers who are experienced with this type of transaction, as this is significantly outside of my wheelhouse.”

“Show HN: Arbory – Native iOS dashboard and widgets for Plausible Analytics Hey HN. Long-time lurker (2017) here, but finally something to post about. I've been building an iOS companion app for Plausible over the past few months. There are some great ones out there already, but I have always wanted to try building an app first-hand. I'm quite proud of the end result, so I wanted to share it online to see if people would be interested in using it. In case you don't know: Plausible ”

“Ask HN: How are you stopping supply chain attacks via compromised dev keys? GitHub and GitLab will verify that a commit is signed by some key on the user's account. They won't let you require that it be signed by a specific key, like a hardware-backed YubiKey your org issued. So if an attacker compromises a developer's laptop or GitHub account, they can add a new signing key, push commits signed with it, and pass every Require signed commits protection in place. The malicious comm”

“Ask HN: Favorite Non-Spammy iPhone Games? I am really struggling to find fun iPhone games that aren’t full of spam, casino tricks, concerning network calls, etc. that I can keep around for the long term. The only 4 I currently have: Strategery, chess, Thronefall, balatro. I loved Archero but it’s too casino-y so it’s gone. Any other favs? Paid or free.”

“Show HN: Track Token usage for major platforms,know your token flow I use multiple AI tools for work and also my side projects, and the annoying part was to track my costs and token usage across tools. Everytime I had to visit each tool and its respective usage setting to check it and I was losing patience and also was getting hit by surprise limits Now I know that there are already free/open-source trackers for Cursor or Claude usage, and they are useful if that is all you need. My problem”

“Ask HN: How to combat Android malware without mandatory developer verification? In August 2025, Google announced that starting in late 2026, they are going to lock down Android to require that all app developers register centrally with Google or else their apps will be blocked from being installed on Android certified devices, regardless of how the app is distributed (competing app stores, direct download, etc). This measure is allegedly to combat malware and slow the ability of repeat offenders”