Privacy Fix: Disable Notification Logging

[0x656E]

Right now, it is possible to view all recent notifications through the Pebble app, at least on Android, from Notifications > App Name > Channel Name.

This allows access to things like disappearing messages for apps that provide message contents in notifications, or for deleted messages/emails/etc from most other apps. This is a privacy/security risk, especially given that this functionality is buried in a sub menu so many people probably aren't aware of it and may not consider that notifications are being logged in this way.

This should probably be off by default, but at the very least there should be a toggle in settings to turn this off. It could also be tied to the "Obfuscate sensitive content in logs" option.

Turning this off should purge any existing messages from the local storage of notifications and stop them from being retained once synced with the watch or after a timeout, whichever happens first. This would prevent someone from turning logging back on to reveal a hidden list of messages.

I am not particularly familiar with Kotlin but can try to work on a PR if this is something you agree is an issue and want to fix.

Thanks for bringing back this sweet hardware!

[sjp4]

The primary reason notifications are stored is for de-duping (the UI to show the history is just a side-effect of having them already stored, to help see what notifications were in what channel, and to demonstrate other filtering rules e.g. text-matching in the future) - so we don't want to disable it by default because that will break de-duping. But there is already a setting that configures how long they are stored for - looks like that's not exposed in the UI yet; we can do that.

FWIW the "dissapearing message" examples I've seen don't put the content in the notification - they just say "new message" or something similar.