Microsoft Defender for Endpoint
Endpoint protection

Microsoft Defender for Endpoint on Android - Privacy Information - Microsoft Defender for Endpoint | Microsoft Learn

In brief

The page revises privacy wording, terminology, punctuation, and descriptions of collected data. The required-data list no longer includes basic browser information.

What Defender admins need to know

No administrator action is stated. Review the updated page when assessing Android privacy disclosures.

Summaries are generated from the documentation change itself.

Documentation change

The comparison below shows only the changed extract. Use the full-page view for complete context.

Microsoft Defender for Endpoint on Android - Privacy informationInformation - Microsoft Defender for Endpoint | Microsoft Learn

Defender for Endpoint on Android collects information from your configured Android devices and stores it in the same tenant where you have Defender for Endpoint. The information is collected to help keep Defender for Endpoint for Android secure, up to date, performing as expected, and to support the service.

For more information about data storage, see Microsoft Defender for Endpoint data storage and privacy.

Information is collected to help keep Defender for Endpoint for Android secure, up to date, performing as expected and to support the service.

For more information on most common privacy questions about Microsoft Defender for Endpoint on Android and iOS mobile devices, see Microsoft Defender for Endpoint and your privacy on Android and iOS mobile devices.

Required Datadata

Required data consists of data that is necessary to make Defender for Endpoint for Android work as expected. This data is essential to the operation of the service andservice. This data can include data related to the end user, organization, device, and apps. Here's a list of the types of data being collected:

App information

Information about malicious Android application packages (APKs) on the device includingincluding:

  • Install source
  • Storage location (file path) of the APK
  • Time of install, size of APK and permissions

For Android Enterprise Fully managed devices - Informationdevices, information about Android application packages (APKs) installed on the device includingincluding:

  • Name and package name of the app
  • Version number of the app
  • Vendor name

For Android Enterprise with a work profile - Informationprofile, information about Android application packages (APKs) installed on the Work profile of the device includingincluding:

  • Name and package name of the app
  • Version number of the app
  • Vendor name

Tip

Your organization can also choose to configure Defender for Endpoint to send information about all apps installed on the device. By default, this information is not sent to your organization.

Web page / Network information

  • Full URL of the website only when a malicious connection or web page is detected and blocked.blocked
  • Connection information
  • Protocol type (suchtype, such as HTTP, HTTPS, etc.)HTTP or HTTPS

Device and account information

  • Device informationinformation, such as date &and time, Android version, OEM model, CPU info, and Device identifier.identifier

  • Device identifier is one of the below:values:

    • Wi-Fi adapter MAC address
    • Android ID (as, as generated by Android at the time of first boot of the device).device
    • Randomly generated globally unique identifier (GUID).
  • Tenant, Device and User information

    • Microsoft Entra Device ID and Azure User ID: Uniquely identifies the device, User respectivelydevice and user at Microsoft Entra ID.
    • Azure tenant ID: GUID that identifies your organization within Microsoft Entra ID.
    • Microsoft Defender for Endpoint org ID: Unique identifier associated with the enterprise that the device belongs to. Allows Microsoft to identify whether issues are impacting a select set of enterprises and how many enterprises are impacted.
    • User Principal Name: Email ID of the useruser.

Product and service usage data

The following information is collected only for Microsoft Defender for Endpoint app installed on the device.

  • App package info,information, including name, version, and app upgrade status.status
  • Actions performed in the app.app
  • Threat detection information, such as threat name, category, etc.name and category
  • Crash report logs generated by Android.Android

Optional Data

Optional data includes diagnostic data and feedback data. Optional diagnostic data is additional data that helps us make product improvements and provides enhanced information to help us detect, diagnose, and fix issues. Optional diagnostic data includes:

  • App, CPU, and network usage.usage
  • State of the device from the app perspective, including scan status, scan timings, app permissions granted, and upgrade status.status
  • Features configured by the admin.administrator
  • Basic information about the browsers on the device.device

Feedback Data is collected through in-app feedback provided by the user

\ No newline at end of file

  • The user's email address, if they choose to provide it.it
  • Feedback type (smile, frown, idea) and any feedback comments submitted by the user. \ No newline at end of fileuser \ No newline at end of file