Active Class Action Lawsuit Alleging Privacy Violation via GA4F (critical) Firebase is directly implicated in a major class-action lawsuit (Rodriguez v. Google LLC) alleging that Google Analytics for Firebase (GA4F) continues to collect users' mobile device data and unique identifiers, even after users explicitly turn off 'Web & App Activity' tracking. A federal judge rejected Google's motion for summary judgment, and a jury trial is scheduled for August 2025. Internal Google communications reportedly show employees were concerned the disclosures were 'intentionally vague' about data collection practices.. Massive Data Exposure Due to Customer Misconfiguration (125 Million Records) (high) In March 2024, security researchers reported finding over 900 websites built using Google Firebase that were misconfigured, exposing more than 125 million user records, including plaintext passwords, personal information, and confidential messages. The exposed data affected users of major companies, including fast-food chains like Chick-fil-A and Wendy’s, highlighting a systemic security risk related to the ease of misconfiguring Firebase databases.. Recurring Systemic Data Leaks from Misconfigured Databases (medium) The issue of exposed user data due to misconfigured Firebase databases is recurring. Earlier reports indicated that thousands of Android apps (over 4,000 in 2020, and 2,271 in 2018) were 'unknowingly' leaking sensitive information, totaling over 113 GB of data, suggesting a persistent platform design flaw or lack of adequate default security controls for developers.. Product Sunset: Firebase Dynamic Links (FDL) Retirement (medium) Google announced the retirement of Firebase Dynamic Links (FDL), a popular service used by developers for universal deep-linking across iOS, Android, and the web. Google stated it would not provide a direct replacement, forcing developers to migrate to alternative, less unified solutions (App Links, Universal Links, or third-party vendors). The sunsetting of a core, stable product raises concerns about long-term product commitment and stability within the Firebase suite.. Founder Conflict and Ideological Shift Post-Acquisition (medium) Firebase co-founder James Tamplin stated publicly that after the acquisition by Google, he was 'forced to change Firebase’s start-up ideology of thinking customer-first to business-first.' This indicates a significant cultural and strategic shift imposed by the parent company, which could impact product development philosophy and developer relations.