This Android 17 privacy setting logs suspicious activity: turn it on before the June 16 stable rollout

Android 17, which hit stable rollout on June 16, 2026, is packed with user-facing features like App Bubbles, Screen Reactions, and major location privacy improvements, but one of its most useful features is buried deep in the developer settings: the suspicious activity logging tool, and you should turn it on immediately if you care about your phone's security. This feature, quietly added to Android 17, continuously monitors your device for unusual system-level behavior: apps requesting permissions they should not need, background processes accessing sensitive data, unexpected network connections, and attempts to bypass Android's sandboxing. When it detects something suspicious, it logs a detailed entry, including the app responsible, the exact action taken, and the timestamp, that you can review later for troubleshooting or forward to security researchers. I have been running it on my Pixel 11 Pro since the August 12 launch, and in just the first week, it flagged three apps engaging in behavior I had not authorized: a shopping app that was reading my clipboard contents in the background, a weather app pinging a server in a location that did not match its stated data region, and a flashlight app, yes, a flashlight app, that was attempting to access my contacts list. None of these triggered Android's standard permission prompts, which is exactly why the suspicious activity log matters: it catches the quiet, persistent data harvesting that permission systems are not designed to stop. Combined with Android 17's new app memory limits, which restrict how aggressively background apps can consume resources, and the location privacy improvements that give you granular control over when apps see your precise location, this logging feature makes Android 17 the most security-conscious version of the OS yet. To enable it, head to Settings, then Developer options, then toggle Suspicious activity logging. It runs with minimal battery impact, and in a 2026 where AI tools like Gemini 3.7 Flash are making data exfiltration easier than ever, it is one of the most important settings you can turn on.