Google Play Services is now automatically linking phone numbers to all signed-in accounts on Android devices. Users must manually disable this setting to protect their privacy.
Key points
- Google Play Services links phone numbers to all signed-in accounts by default.
- The feature can re-enable itself after users turn it off.
- Disabling the toggle does not remove numbers already linked to accounts.
Google has changed its default settings on Android devices to automatically link phone numbers to every signed-in Google account. This shift has sparked significant privacy concerns among users who separate personal and secondary accounts.
What happened
A Reddit user named Nanosinx reported that Google Play Services is verifying phone numbers and attaching them to all active accounts on a device. According to TechRadar, this means secondary accounts, such as those used for work or temporary purposes, now receive the primary phone number. Google has not made this an opt-in feature, reversing its previous behavior. Users are receiving emails from Google alerting them to this change, though not all users report receiving these notifications. Some individuals claim the automatic verification toggle reverts to the on position even after being disabled. This behavior has been observed on GrapheneOS devices if Google Play Services is installed.
Why it matters
Phone numbers are sensitive identifiers that can link disparate online personas. When a platform automatically associates this data across multiple accounts, it creates a unified profile that the user did explicitly authorize. This practice undermines user control over personal information and complicates efforts to maintain separation between professional and private digital identities.
The fix
- Go to Settings, select Google, and choose All services.
- Select Phone number verification and disable the automatic toggle.
- Visit the Google account personal info page to remove numbers from unwanted accounts.
- Monitor the setting regularly as it may re-enable itself.
Why it matters
Teams usually advise users to audit account linking settings after major software updates. Check whether default privacy controls have shifted toward data collection rather than protection. Review connected services to ensure sensitive identifiers are not shared across accounts that serve different purposes. Maintain separate credentials for distinct roles to limit exposure.
What to do and how to stay safe: Google
- Verify your Google account settings to see if phone number verification is active.
- Remove your phone number from any secondary or throwaway accounts.
- Monitor your account activity for unexpected linkage of personal data.
- Once the vendor provides an update, check if the default behavior has changed.
Step-by-step guide: What is password policies and how they protect systems
General security guidance from the Crypt Weekly newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Does disabling the toggle remove my number from linked accounts?
No, disabling the toggle stops future automatic linking but does not remove numbers already attached to accounts.
Is this happening on privacy-focused operating systems?
Some users report this issue on GrapheneOS if Google Play Services is installed on the device.
Will Google notify me if my number is linked?
Google sends emails to some users about this change, but not everyone reports receiving them.
