Meta and Yandex have been found de-anonymizing Android users' web browsing identifiers by using tracking code embedded into websites.
This tracking method involves Chrome and other browsers sending unique identifiers to native apps on devices, allowing Meta and Yandex to convert web identifiers into persistent mobile app user identities.
The covert tracking through Meta Pixel and Yandex Metrica trackers bypasses security and privacy protections of the Android operating system and browsers.
The de-anonymization violates security principles like sandboxing, enabling interaction between mobile and web contexts, possibly compromising user privacy.