Currently when the user opens Frame, even if they have Frame configured to use their own full node to fetch their balances, connections are still made to third-parties e.g. to check the user's NFT inventory. This sends these third-parties a ping, which at a minimum lets them know that someone who is most likely the owner of this address is now online, enabling them to track online activity over time (even if no onchain transactions are made); the surveillance could go further to collect the IP addresses associated with the user, keep track of all the assets this IP address is interested in, link all of the user's addresses in Frame together, etc etc.
When the user first opens Frame after this feature is activated (and perhaps in the settings menu from that point forward) the user should be asked if they would like to disable connections to third-parties and be informed that this may disable some features as well.
Bonus points: give the user the ability to self-host or run locally open-source alternatives to the third-party services you are making calls out to, so that the user can still get these nice features but without compromising their privacy.
Currently when the user opens Frame, even if they have Frame configured to use their own full node to fetch their balances, connections are still made to third-parties e.g. to check the user's NFT inventory. This sends these third-parties a ping, which at a minimum lets them know that someone who is most likely the owner of this address is now online, enabling them to track online activity over time (even if no onchain transactions are made); the surveillance could go further to collect the IP addresses associated with the user, keep track of all the assets this IP address is interested in, link all of the user's addresses in Frame together, etc etc.
When the user first opens Frame after this feature is activated (and perhaps in the settings menu from that point forward) the user should be asked if they would like to disable connections to third-parties and be informed that this may disable some features as well.
Bonus points: give the user the ability to self-host or run locally open-source alternatives to the third-party services you are making calls out to, so that the user can still get these nice features but without compromising their privacy.