com.samsung.android.knox.analytics.uploader Copy

Labelled "Knox Analytics Uploader", this is a preinstalled Samsung component that sits in the Knox stack on Galaxy devices. It has no launcher icon and nothing a user opens: every observation on this site records it as non-user-facing. The honest limitation, stated up front: Samsung does not publish documentation for this package, so no source sets out which events it gathers, where it uploads them, or what turns it on. The name and the surrounding platform make its general area clear, but the specifics are not sourceable, so no disable rating is given below. What Samsung does document is the enterprise analytics service in the same area, which is useful context rather than a description of this package. Knox Asset Intelligence collects device health and usage information - app usage, battery status, Wi-Fi connectivity problems, device location and more - and turns it into fleet dashboards for administrators. That service is delivered by an agent app that an administrator deploys into a profile, and Samsung's guidance notes the agent only collects app data from the profile it is installed in, while device-wide data such as battery, network and location is collected regardless of profile. Samsung's documentation does not name this preinstalled uploader as that agent, so the two should not be assumed to be the same thing. Version note: this is a long-standing component rather than a new arrival. Samsung's own Common Criteria application lists record it under the same label on the Galaxy Note9 (the Oreo-era N960N list, version 1.1.13.1) and on the Galaxy S20 (the R-era G981U list, version 1.2.01.1). This site observes it from API 28 through API 37, at versions from 1.4.05.3 to 2.1.00.0, on Samsung devices only, signed by Samsung keys that also sign the framework. Whether its role changed at the 2.x version boundary is not something the available sources establish, so it is flagged here as an open question rather than asserted either way. For Android Enterprise, EMM and kiosk use, the point to take is that fleet analytics on Galaxy devices is configured through the enterprise service and its tenant settings, where data collection can be enabled, disabled and scheduled, rather than by adding or removing preinstalled packages. If a deployment has a data-collection concern, that configuration is the supported place to address it. Where a specific preinstalled app genuinely must be blocked, Samsung documents doing that through the Android Enterprise application policies in the EMM console.

• Knox Asset Intelligence - Samsung Knox Documentation →
• Use the agent app - Knox Asset Intelligence - Samsung Knox Documentation →
• Knox Asset Intelligence FAQ - Samsung Knox Documentation →
• Galaxy Note9 (N960N) application list - Samsung Knox CC Mode documentation →
• Galaxy S20 5G (G981U) application list - Samsung Knox CC Mode documentation →
• Enable or disable a specific system app - Knox Manage - Samsung Knox Documentation →
• Package provenance for com.samsung.android.knox.analytics.uploader - Android System App Database →

• Signed by the device maker's own signing key (Samsung), so it is an OEM preinstall, but 2 different certificates appear across the fleet, so OEMs ship their own builds of it. It also signs the Android framework, so it is a platform-level key on its device(s). Inferred from the certificate appearing only on Samsung devices (508 packages, 10196 observations).
• Its largest observed manifest declares 10 permissions: 2 runtime (user-granted), 1 signature or system-level, 3 install-time and 4 vendor or uncatalogued.
• Never reported as user-facing, so it runs as a background or system component rather than an app the user opens.