Besides leveraging this whitelist of countries, I vaguely remember us talking about a list of countries that we for sure will not implement this functionality in. Although a whitelist is seen as something that implicitly defines the converse, does such a list of suggested countries of exclusion exist as well?

@dcipoletti Yes, we have such a list from Privacy Engineering.

Blocked for now on the apps PMs generating a final list from the uniques data and list of disallowed countries.

Just to clarify, I think the next step on this one was for @JMinor to confer with Privacy Eng about the necessity of a minimum user cutoff.

Please see my recent email and the final proposed list from product here:
https://docs.google.com/spreadsheets/d/1oJJjqyCI-Ty9HTKaLxWE2rMBmdCRIMbq6pHGB2B7Ph8/edit#gid=0

To clarify a couple things:

• We're doing a block list, not a white list. If the user is not requesting from a blocked locale they should get push notifications.
• The small user base threshold excludes a lot of perfectly safe but small or emerging communities. Rather than adopt the cutoff wholesale, countries that fell below the cutoff were subject to additional scrutiny.

Change 621543 had a related patch set uploaded (by Mholloway; owner: Michael Holloway):
[mediawiki/extensions/MobileApp@master] Add list of countries to exclude from push notifications

https://gerrit.wikimedia.org/r/621543

Change 621543 merged by jenkins-bot:
[mediawiki/extensions/MobileApp@master] Add list of countries to exclude from push notifications

https://gerrit.wikimedia.org/r/621543