The macOS desktop app vendors CocoaAnalytics including code that posts analytics payloads to http://google-analytics.com/collect. It also contains logic for machine/client identifiers, screen/event caching, periodic reporting, and app close reporting.
Some reporting code appears guarded by _ALLOW_ANALYSE, and the current callsite appears commented out, but the implementation is still present in the tree and referenced from macOS application code.
Proposal:
Remove CocoaAnalytics and related references from the macOS desktop app.
Reasoning:
Dormant analytics code is still a privacy and supply-chain risk. We should not have vendor analytics implementations that could be enabled by a compile flag or future merge.
The macOS desktop app vendors CocoaAnalytics including code that posts analytics payloads to http://google-analytics.com/collect. It also contains logic for machine/client identifiers, screen/event caching, periodic reporting, and app close reporting.
Some reporting code appears guarded by _ALLOW_ANALYSE, and the current callsite appears commented out, but the implementation is still present in the tree and referenced from macOS application code.
Proposal:
Remove CocoaAnalytics and related references from the macOS desktop app.
Reasoning:
Dormant analytics code is still a privacy and supply-chain risk. We should not have vendor analytics implementations that could be enabled by a compile flag or future merge.