A new Android feature is scanning your photos for ‘sensitive content’ – how to stop it

On Oct. 5, 2024, Google released a security update for Android 9 and later, which included a new service, Android System SafetyCore. Most of these patches were the usual security fixes, but SafetyCore was new and different. Google said in a developer note that the release was an “Android system component that provides privacy-preserving on-device user protection infrastructure for apps.”

The update said nothing else. This information left ordinary users in the dark and, frankly, did little for programmers, either. 

Also: If COBOL is so problematic, why does the US government still use it?

After the release, in a listing of new Google Messages security features, while not mentioning SafetyCore by name, Google described the service’s functionality: “Sensitive Content Warnings is an optional feature that blurs images that may contain nudity before viewing and then prompts with a ‘speed bump’ that contains help-finding resources and options, including to view the content. When the feature is enabled, and an image that may contain nudity is about to be sent or forwarded, it also provides a speed bump to remind users of the risks of sending nude imagery and preventing accidental shares.”

Google assured users in the note that: “Sensitive Content Warnings doesn’t allow Google access to the contents of your images, nor does Google know that nudity may have been detected.”

However, we now know SafetyCore does more than detect nude images. Its built-in machine-learning functionality can also target, detect, and filter images for sensitive content. 

Google told ZDNET: “SafetyCore is a new Google system service for Android 9+ devices that provides the on-device infrastructure for securely and privately performing classification to help users detect unwanted content. Users control SafetyCore, and SafetyCore only classifies specific content when an app requests it through an optionally enabled feature.”

Also: This Android feature protects your phone, even if someone has your PIN

According to GraphneOS, a security-oriented Android Open Source Project (AOSP)-based distro: “The app doesn’t provide client-side scanning used to report things to Google or anyone else. It provides on-device machine-learning models that are usable by applications to classify content as spam, scams, malware, etc. This allows apps to check content locally without sharing it with a service and mark it with warnings for users.”

Google also assured users that SafetyCore performs its functions locally on the device without sending any data to external servers. Many users aren’t buying this.

First, they point out that Google never told users this service was being installed on their phones. If you have a new Android device or one with software updated since October, you almost certainly have SafetyCore on your phone.  

One of SafetyCore’s most controversial aspects is that it installs silently on devices running Android 9 and later without explicit user consent. This step has raised concerns among users regarding privacy and control over their devices. 

Also: How to clear your Android phone’s cache and make it feel like new for 2025

As one Google Play Store customer said: “No consent given, install could not be paused or stopped. I watched it install itself on my phone on January 22, 2025 (couldn’t pause or cancel it) AND it did all of that over mobile network (my settings are to never download or install anything unless I’m on Wi-Fi). Description tells you nothing. Permissions are for virtually EVERYTHING.”

In short, some users were unhappy — and I can’t blame them. 

SafetyCore also doesn’t have an icon. It also doesn’t show up on the usual list of running applications. You’ll only find the service by digging deep into Settings > Apps > Show system processes.

How to Remove Android System SafetyCore

Don’t trust Google? After all, just because SafetyCore doesn’t phone home doesn’t mean it can’t call on another Google service to tell Google’s servers that you’ve been sending or taking “sensitive” pictures. As one person put it on Reddit: “It’s like a virus installed through a backdoor by Google. That’s the complete opposite of safety, transparency, and privacy.”

So, if you wish to uninstall or disable SafetyCore, take these steps:

1. Open Settings: Go to your device’s Settings app

2. Access Apps: Tap on ‘Apps’ or ‘Apps & Notifications’

3. Show System Apps: Select ‘See all apps’ and then tap on the three-dot menu in the top-right corner to choose ‘Show system apps’

4. Locate SafetyCore: Scroll through the list or search for ‘SafetyCore’ to find the app

5. Uninstall or Disable: Tap on Android System SafetyCore, then select ‘Uninstall’ if available. If the uninstall option is grayed out, you may only be able to disable it

6. Manage Permissions: If you choose not to uninstall the service, you can also check and try to revoke any SafetyCore permissions, especially internet access

However, some have reported that SafetyCore reinstalled itself during system updates or through Google Play Services, even after uninstalling the service. If this happens, you’ll need to uninstall SafetyCore again, which is annoying. 

While SafetyCore aims to enhance user safety by filtering sensitive content, its automatic installation and lack of transparency are troubling. 

Also: How to turn on Private DNS Mode on Android – and why it matters for privacy

I also don’t care for the simple fact that Google has made it so difficult to deal with the service. For example, on my Samsung Galaxy 25 Plus, I couldn’t do anything with SafetyCore’s permissions, so I couldn’t simply leave the service installed and take away its ability to do anything. 

Finally, Apple offers a methodology and functionality similar to SafetyCore on iPhones with Communication Safety. However, Apple told us what was happening and gave users the power to decide whether to use the service. Loath as I usually am to praise Apple, they got it right this time, and Google hasn’t.