You include an untrusted, proprietary binary from Google. Not directly, but as a recursive dependency: com.google.android.gms:play-services-analytics
So, yes, you give data to Google. The Google analytics dependency you include could literally be malware, and you could not test, or know. And you never know if it doesn’t just decide to steal your data and transmit it all, be it by Google’s decision or because an NSL was issued to demand Google do that.
So, yes, as soon as you include this dependency, the entire browser has to be considered compromised, and you might as well just use Google Chrome.
So, yes, you give data to Google. The Google analytics dependency you include could literally be malware, and you could not test, or know. And you never know if it doesn’t just decide to steal your data and transmit it all, be it by Google’s decision or because an NSL was issued to demand Google do that.
So, yes, as soon as you include this dependency, the entire browser has to be considered compromised, and you might as well just use Google Chrome.