Apple has long been criticized for the iPhone’s “walled garden,” the closed ecosystem that the company has built with iOS that gives Apple tight control over which apps and services can run on its smartphone. Android devices have long been viewed as the more “open” option, giving users more control over what’s on their smartphone.
But, when it comes to bloatware, that may not be the case. In fact, a recent study from cybersecurity company Surfshark found that iPhone users can remove more pre-installed apps from their devices than users of phones from some of the top Android smartphone makers like Samsung and Google.
According to the study, the iPhone comes with up to 50 pre-installed apps. Users in the EU can remove 48 of these apps or 96 percent of them. (The Phone app and the Settings app are the only two pre-installed apps that cannot be deleted in the EU.) In the U.S., iPhone users are able to delete 44 of these apps or 88 percent of them.
Samsung devices, on the other hand, come with a whopping 88 pre-installed apps and only 50 of them or 57 percent were marked safe to remove. For Google’s Android devices, the database listed 71 pre-installed apps, but only 38 percent of them or 27 apps were marked as safe to remove.
The report states that the average smartphone user has between 60 and 90 apps installed on their device. However, they use roughly 10 of these apps on a daily basis and around 30 of them each month. That leaves many apps unused and taking up space.
But, even worse than that, these apps may not just sit there. They can operate in the background, collecting personal data, making bloatware a privacy risk too.
Apple apps collected on average 8 data types per pre-installed app, which includes location data, behavioral data, and other sensitive information. Apple Music and the Apple Store app collected the most user data types, according to Surfshark, listing 17 and 18 data types, respectively, out of 35 different data types.
The pre-installed apps analyzed on Google devices collected an average of 13 data types per app. Google Gemini and the Google app list the most data types, with each disclosing 29 of 38 different data types, which is more than double the average of the other apps.
The average pre-installed app analyzed on a Samsung device also collected 13 data types. However, the Samsung dataset includes Facebook and Instagram, which are the worst offending apps in the report. These apps disclosed a whopping 37 out of 38 data types.
“Data collection practices by popular applications, particularly social media platforms and chatbots, raise privacy concerns,” said Surfshark’s Chief Security Officer Tomas Stamulis in a statement. “While certain data points are necessary for basic operational functionality, entities may harvest information for targeted advertising or may even share it with undisclosed third parties. Even never-used applications can gather personal data and link to your device.”
“Relying entirely on pre-installed applications can affect your privacy, as apps don’t always protect user data as you might expect,” Stamulis continued. “Shifting to third-party alternatives that are privacy-focused can help minimize data collection, limit overall exposure, and reduce unwanted targeted ads. It can also mitigate the risks associated with potential data breaches as your personal data is not stored in a single database.”