Apollo-client-devtools: Analytics integration leaks PII and cannot be disabled

[meyer]

This is a dupe of #72, sorry. It's a legitimate issue and I can't reopen an old issue on my end.

Apollo Dev Tools pings your server as well as Google Analytics, and I can't use a browser extension that phones home on my work computer. Until this issue is fixed i'm using a fork that doesn't include analytics.

Every time I change tabs in Apollo Dev Tools, an event is logged to Google Analytics. The event that concerns me the most, however, is the Run in GraphiQL event. Unless I'm misunderstanding something (entirely possible) the whole tab object appears to be logged to GA. This tab object includes all sorts of potential PII, including the page title, URL, and whether or not the window is in incognito mode.

I dug through the React Dev Tools code and they don't appear to be using any sort of analytics. Might be good to take a page out of their book on this one.

If you all truly need to know every time a user clicks on a button in the dev tools, it would be respectful to the user's privacy to inform them what information is being tracked and to allow them to opt in.

Hope that makes sense. Do let me know if you all need any further information.

See also: #99

[joshuataylor]

It has gotten worse since the last time I raised this issue as well.

[hwillson]

Just an FYI - we're removing all Google Analytics functionality, and will be publishing a new version hopefully today.

[meyer]

@hwillson glad to hear it!