7

I'm considering developing a cross platform Electron app.

According to the Electron website, Electron uses Chromium, the open-source version of Google's Chrome browser. However, given the privacy concerns regarding Google and Chromium and Electron's implicit use of Google services, I wonder if using a Chromium-based platform would be a good idea.

The eventual app will need to be as secure and private as possible, as it might be used to process sensitive data provided by the user.

Do Electron and/or its Chromium components track users in any way? Do they make any Internet connections by themselves? Do they collect and send data to third parties? Is it possible to run Electron while offline (see these reports)? Is the Electron framework appropriate for designing privacy-focused apps?

3
  • 1
    Electron uses Chromium rendering engine ie Blink and V8. It doesn't include the Chromium browser. So in other words, it doesn't track users or send data to third parties. To answer your second question: the source code of Electron based apps can be easily extracted, as all your files will be stored in an ASAR archive.
    – Asesh
    Nov 3, 2019 at 12:32
  • Just because Electron does not include the full Chromium browser doesn't mean that it doesn't track users or send data to third parties. Regarding your second point, it is clear that app code can introduce all sorts of issues. The question is whether the framework itself is appropriate for designing privacy-focused apps. Nov 3, 2019 at 14:47
  • 2
    @lecodesportif Chromium developer here. Like I said earlier, it's the Chromium browser which does that. Also in Chromium browser most of those will be disabled, but only enabled in Chrome.
    – Asesh
    Nov 4, 2019 at 4:39

2 Answers 2

9
+125

Electron does not track your users, it uses mainly the Content Module for rendering HTML/CSS and executing JS and a set of chromium features, anything telemetry/privacy related only gets executed when you also provide a google API key, and at the moment that is only for the "geolocation" API.

The good thing is you can search the whole codebase, there is nothing from electron itself that could be a concern for privacy, except you add a Google API key.

But that does not include stuff you add to the app later on, if you start loading external web pages like a browser, you're defenseless agains them tracking your users.

1

I don't think Chromium will track internet events of users and send them to third-party. You can monitor the Network tab on Electron app (maybe they can hide the information) or use some tools for tracking the internet request when building Electron app. Another point that you should know that many enterprise applications such as Skype, Slack... are based on Electron.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.