The truth about Bluesky's fake decentralization

Hi, sorry for the previous post I used Gemini for writing, and that my writing sucks and I’m about to improve and polish it, I hope you understand me this time.

Ok, today I will be showing evidence that why Bluesky is not a reliable social network, even though it presents itself as decentralized under the AT protocol but it is centralized on servers like Google. Today I am going to show you the truth behind that facade it has of privacy, decentralization, freedom, but it is not so.

In 2022, after the acquisition of Twitter (now X) by Elon Musk, it was very controversial, as alternatives like Mastodon, Nostr, Bluesky or the most dangerous one which is Threads which is part of Meta (that one is more worse) started to come out.

Today I am going to show you why Bluesky is not so secure and they sell it to you as if it was but it is not.

Introduction:
Nowadays, where privacy and decentralization and getting out of the matrix of giant companies are important issues today, users should be informed about the platforms they want to choose. Bluesky, is said to be a decentralized, open source and transparent alternative to Twitter X and Instagram Threads. Bluesky has come under scrutiny that reveals it is not what it appears to be. I’m going to show evidence that Bluesky is not really private, decentralized or transparent. Plus it uses servers that can track you, and worst of all, possibly use your personal data and preferences for marketing and advertising.

DISCLAIMER: I am not criticizing some companies or defending others. I do not play favorites, nor do I support Elon Musk, Mark Zuckerberg or Jay Graber, as Silicon Valley companies, despite their differences, they send you down the same path: to doom. Let’s start with this research.

I have found clear evidence that Bluesky uses tracking services from companies like Google and Sentryio, specifically Google Firebase and Google itself (aka the privacy devil in one company). Both are known for a history of violating user privacy. According to Ghostery, it found 7 trackers on the website. Most are from Sentry and half are from Google (including Google Fonts, Google API, Google Firebase, Google Play Services and Google Static; YouTube would also count as part of the eponymous company). These services are used for data advertising and hosting. These tools are known to collect user data, which raises questions about data privacy on the platform. If you want to see for yourself, I challenge you to perform a test using applications such as Tracker Control, which you can find at F-Droid.

Steps:

  1. If you use GrapheneOS, LineageOS, DivestOS or any Android Custom ROM or the generic Android we all use, install Tracker Control from F-Droid.
  2. Download Bluesky from Aurora Store, Aptoide, APKMirror or Play Store, download it as you like.
  3. Open Tracker Control and activate the app; if it asks you to activate the VPN for that app, click “Enable VPN”.
  4. Log in to Bluesky via Tracker Control and click “Run” and run the app for 1 to 3 minutes.
  5. Return to Tracker Control to check the number of trackers and companies that manage your data without your consent.



As you will see, the results will surprise you and give you an idea of how many trackers are active in the application, only 3. But if an application has Google trackers, it is best to be wary. And for a change, Bluesky is not on F-droid. Because it depends on big companies like Google, which contradicts its image of decentralization.

Is all lost? Not exactly, but there is a salvation for privacy and for microblogging. If you are looking for alternatives to Threads and Twitter X and detach yourself from the abuses of large corporations, it is best to consider two truly decentralized, transparent and FOSS options, as there are two: Mastodon and Nostr. Both platforms are classified as privacy-friendly, offering a more transparent and respectful approach to user privacy, without the great influence of large companies such as Google, Apple, Meta, Microsoft, Amazon (also known as GAMMA).


When comparing Bluesky and Mastodon in app stores such as App Store, the difference in the data collected each Microblogging service is observed. Nothing to see, the difference is completely obvious. In the App Store, Bluesky indicates that it has data linked to you and your identity. This includes: contact information (your name, Hardware ID, IMEI, phone, email (whether Gmail, Outlook, Yahoo), documentation, etc. and that is used for marketing or sharing with third parties without user consent), user content (refers to any content you generate within the app, such as photos, videos, or posts.) Your content could be stored indefinitely, you can not delete it. And last and worst, identifiers (may include device ID, IP address, location, and data used to track your online activity. Which can be even more dangerous if it violates European or Swiss privacy laws). Although it is AT Protocol, it does not have end-to-end encryption - this differentiates it from Mastodon, Signal, Simplex, Pixelfed, Nostr or Element, Bluesky is not decentralized from the hegemonic companies as previously mentioned.
Whereas Mastodon is transparent. It does not collect personal information in this way, the same goes for the Nostr app. I looked into the App Store and it also says the same thing that it does not collect anything. This difference is important for those who value their privacy and are looking for a serious and transparent alternative, outside of centralized platforms like X, Meta, Google or any other data company out there.

To conclude this, don’t be fooled by the appearance of decentralization that Bluesky presents. The evidence shows that it is a centralized platform. Dependent on hegemonic companies like Google, which uses trackers to collect user data without their consent. We must decide carefully and choose alternatives that respect autonomy and privacy. Privacy is a human right and should not be negotiated. The Reddit community, like r/degoogle, needs to know the truth. It is our responsibility to share this information with acquaintances, friends, etc. The future of privacy is up to us.

1 Like

If anyone wants to read a better piece on why Bsky is not decentralised, I recommend checking here instead

3 Likes

Perfect! Thanks for the article. It is very interesting, since the AT Protocol is not as transparent as we say.

There is also a video version:

2 Likes

Thanks for reposting! I think confidence goes a long way; after all, you can’t improve at writing without writing more.

To echo what some folks mentioned in the previous discussion, I think some trackers are inevitable with a lot of social media platforms. It would be nice to know what is your understanding of what decentralization is, especially as my understanding of it doesn’t really include trackers (which is more of a privacy issue) but rather the actual structure behind its federated architecture.

3 Likes