How to Stop Nova Launcher From Tracking You Without Losing Your Setup

At a glance:

• Nova Launcher now includes eight trackers in recent versions, up from two in 2023
• Users can block trackers via NextDNS, TrackerControl, or ShizuWall firewall
• Rolling back to versions 7.057 (Teslacoil) or 8.1.6 (Branch) avoids newer tracking features

The Tracker Problem Deepens

Andy Walker, writing for Android Authority, details how Nova Launcher's privacy posture has deteriorated since its 2022 acquisition and subsequent development revival. The launcher, once praised for stability over feature bloat, now integrates multiple third-party libraries for analytics and advertising. While the developers frame these as "user experience improvements," privacy-conscious users face a dilemma: abandon a deeply customized tool or implement countermeasures.

The tracking expansion began with the 2023 versions but accelerated in later builds. Walker identifies eight distinct tracking domains in recent APKs, including domains associated with Firebase Crashlytics and Google Analytics. These trackers enable cross-app data collection, session recording, and behavioral profiling - capabilities that contradict Nova's legacy of minimal data harvesting. The privacy policy explicitly states that "user information may be sampled for improvement purposes," a vague clause that alarmed long-time users.

Blocking Trackers at the Network Level

To combat this, Walker recommends three technical solutions. First, NextDNS offers domain-based blocking through customizable blocklists. Users can import precompiled Android tracker lists or manually add domains like *.firebaseio.com and *.google-analytics.com. This method requires no root access but demands ongoing maintenance as new trackers emerge.

TrackerControl provides a more granular approach via on-device VPN filtering. The app displays real-time analytics showing which applications request trackers, with Nova Launcher appearing as a frequent offender. Its interface allows per-app whitelisting/blacklisting, though the VPN implementation may conflict with corporate network configurations. Walker notes that TrackerControl's premium tier ($4.99) removes ads and adds ad-blocking capabilities.

Denying Permissions and Disabling Features

The article emphasizes Android's permission system as a critical defense layer. Users should revoke Nova's access to:

• Location services
• Calendar data
• Nearby device discovery

Internally, Walker disables Error & usage reporting (Settings > About > Error reporting) and unchecks the "Open Nova AI with Enter key" option to prevent accidental AI feature activation. While Nova AI remains opt-in, its presence in the launcher's codebase raises concerns about future data collection.

Cutting Off Internet Access

For maximum isolation, ShizuWall offers app-level internet blocking without consuming VPN slots. The process involves:

1. Installing Shizuku via ADB commands
2. Granting ShizuWall system-level permissions
3. Adding Nova Launcher to the blocklist

This method renders cloud-dependent features unusable, including Google Search integration and automatic updates. Walker acknowledges this trade-off but argues that preserving local customization justifies the inconvenience. TrackerControl's internet kill switch provides a simpler alternative, though less granular.

Rolling Back to Safer Versions

The most drastic solution involves downgrading to pre-tracker versions. Walker recommends:

1. Version 7.057 (final Teslacoil release)
2. Version 8.1.6 (last Branch version with minimal trackers)

Users must disable Play Store auto-updates and manually install older APKs from trusted sources. This approach preserves workflow continuity but risks missing security patches. Walker warns that post-8.1.6 versions introduce breaking changes to customization tools like gesture controls and icon packs.

A Launcher's Dilemma

Walker concludes that Nova's tracking practices represent a broader industry trend where productivity tools monetize through data collection. While ads and subscriptions are acceptable monetization models, he argues that trackers cross an ethical boundary for system-critical applications. The article ends with a call for developers to offer tracker-free premium tiers, suggesting that privacy-conscious users should support ethical alternatives like Lawnchair or Action Launcher.