On Sat, Jul 20, 2013 at 4:08 PM, Andrew Allen <aallen@xxxxxxxxxxxxxx> wrote: > Tim > > The quote is from RFC 5626 which also states: > > "3.1. Summary of Mechanism > > Each UA has a unique instance-id that stays the same for this UA even if the > UA reboots or is power cycled." > > Since the UUID in the instance ID is also static how is this significantly > different in terms of privacy concerns from the IMEI being used as an > instance ID? You're not demonstrating that an IMEI is just as good, you're demonstrating that a UUID is just as bad.