How to Disable OnePlus Device Manager and Stop Data Mining

Disable OnePlus Device Manager and Stop Data Mining

We have recently seen several reports and allegations on the social media and also on some renowned websites like XDA, reporting about a serious issue on OnePlus devices. It concerns your personal data being sent to OnePlus, without your permissions. Check this tutorial to easily disable OnePlus Device Manager and preserve your personal data from being shared secretly. The problem is for those using OxygenOS, if you have a custom ROM installed, then you should be safe.

We are well aware of OnePlus’s reputation in the market for its open development scene and powerful devices at a decent price point. But it seems like OnePlus is collecting more data from you than you even know of. The issue was recently discovered by a security researcher. The data that is secretly being sent to OnePlus from your device is immense and not something that an OEM should be collecting. So check out the steps below to completely disable OnePlus Device Manager (OnePlus Analytics).

Disable OnePlus Device Manager and Stop Data Mining
Disable OnePlus Device Manager and Stop Data Mining
Table of Contents

Why Should Every OnePlus User Be Concerned?

Privacy and security have been two main concerns for Android in the past few years and with evolving technology, these two factors are constantly at risk. But Google is doing its job to prevent any such issues via monthly Android Security Updates.

But what about the OEMs? They tend to deliver their own proprietary software, which is not controlled by Google. A very similar issue has risen today in the context of OnePlus devices using OxygenOS.

Security Researcher Christopher Moore recently noticed some unusual activity in the built-in OxygenOS analytics, which was allegedly sending personal data to OnePlus. When Moore had a closer look into it, he found that the device is making HTTPS requests to a domain – open.oneplus.net.

I leave the traffic proxied for some time, to see what other information is collected, and boy am I in for a shock…

Christopher further analyzed the requests and finally came up with the list of all the data types that were being sent to OnePlus. It includes the following:

  • Device unlock events
  • IMEI number
  • Serial number
  • MAC addresses
  • ESSID and BSSID of wireless networks
  • Names of Mobile networks
  • Timestamps of opening/closing of apps

All of these data was sent as part of the OnePlus Device Manager application (OPDeviceManager.apk).

Moore’s curiosity and the questions he raised have alerted us to be mindful while using Android. A person with Twitter handle – JaCzekanski tweeted to Christopher on how any user can simply disable OnePlus Device Manager app using a simple ADB command and prevent any sort of data mining.

How to Disable OnePlus Device Manager (OnePlus Analytics)

The instructions below will help you do exactly the same and disable OnePlus Device Manager using a simple ADB command. No, you do not require root to do this. However, if you wish to go another way around, you can also install and enable a Magisk module to get the job done.

Option 1: Using ADB (Non-rooted users)

In order for this method to work, you must first enable USB debugging and setup ADB access for your device. You can do so by following this tutorial.

  1. Once done, connect your OnePlus device to the PC via USB cable.
  2. Open a command prompt/Terminal window on your PC.
  3. Make sure that you have ADB access by typing in the command below:
    adb devices

    Or, in terminal:

    ./adb devices
  4. The command should return a device ID.
    Fastboot devices command
  5. In case it doesn’t, make sure that you have OnePlus USB drivers installed on your computer.
  6. Now, initiate the ADB shell and allow the Android device to communicate with the PC:
    adb shell

    Or, in Terminal:

    ./adb shell
  7. Finally, enter the following command to disable OnePlus Device Manager app:
    pm uninstall -k --user 0 net.oneplus.odm

    Or, in Terminal:

    ./pm uninstall -k --user 0 net.oneplus.odm
  8. The command shall instantly disable the OPDeviceManager.apk and stop your data being collected secretly.

Option 2: Using Magisk Module (Rooted users)

Rooted users can also benefit by using the simple command above. Or they may also take advantage of a Magisk module to disable OnePlus Device Manager app (OPDeviceManager.apk).

  1. Download the OnePlus Analytics Disable Magisk module: Link
  2. Open the Magisk Manager app and swipe out from the left-edge of the app window.
  3. Select “Modules” option for the displayed menu.
  4. Tap on the “+” icon on the bottom.
  5. Select the OP5analyticsdisabler.zip file and tap on “Open”.
  6. The module installation will begin and finish in a few seconds.
  7. Then just tap on “REBOOT”.

You should be out of worries now. You have just succeeded to disable OnePlus Device Manager and prevent your device from sending any more personal information to the OEM.

We duly thank Christopher Moore and Jakub Czekański for informing the OnePlus users about it. Chris has already attempted to contact OnePlus regarding this issue and we hope to hear some words soon from them, officially.

Until then, make sure that you save your data.

Comments

  1. Just purchased the OnePlus 7T phone reently without doing much research on the privacy flaws on the OnePlus phones. I am glad to see your article. Since your tutorial is 3 years old, do you know if this is still happening on their latest phones? Is your fix a permanent disablement of their Device Manager?

    1. Hi Jim. Initially, yes, OnePlus like any other smartphone manufacturer did make mistakes. The issue mentioned in this post was fixed the same year and doesn’t affect the old or any new devices released today.

      So, be out of worries when it comes to your new OP7T. I myself have finally transitioned from Google Pixel 3 XL (after 8 years of using Nexus/Pixel) to the OnePlus 8.

    1. You’re welcome 🙂 Your continuous support and love are what we need in return, nothing more. I hope you will find more articles that might hold interest to you.

  2. pm : the term ‘pm’ is not recognized as the name of a cmdlet, function, script file or, operable program. Check the spelling of the name, or if a path was included, verify the path is correct and try again.

    1. never mind, the full command should be: adb shell pm uninstall -k –user 0 net.oneplus.odm

    2. Oh. I missed initiating the ADB shell. Of course, without that, the command would not work. Thank you for notifying, I have added it now. 🙂

Leave a Reply

Your email address will not be published. Required fields are marked *