You must log in or # to comment.
tl;dr: the three colors returned by the Android API are probably unique enough to fingerprint your, especially with other data points.
Doesn’t really seem like a privacy violation to me, though. There are far more unique ways to fingerprint someone if you’re already running your app on their device.