Android App Permissions: A new look into privacy

  • 3 October 2020
  • 2 min read

Android was previously considered less secure than its iOS counterpart. While it's still true to some extent but Android devices have caught up. They're more secure and have given more user control for permissions that app uses. Often we tend to ignore reading these popup boxes and agree on everything that we see. This practice hampers our privacy and may lead to dire circumstances. Let's take an example and understand what it means for us as users.

Let's assume that you've downloaded an application that helps you set some cool alarms. This app basically should need only storage permission on your device. If in case that app requests you more permissions such as contacts, access to microphones and cameras, then you need to raise the red flag. Why on earth should an app like that need all these permissions? Unless there's any feature that justifies these permissions you should uninstall that app firsthand. This raises the concern regarding the fact that how do we trust these apps and how do we know which permissions are to be granted?

Well here are a few quick tips:

  1. Always keep the app task in mind. Understand what the app is intended to do. If it's a notes app asking for camera permissions, you're been warned.

  2. Newer versions of Android, have an option of "Allow while only using the app". You can use this option so that if an application requests location access, it will be accessed only when the application is in use.

  3. To avoid apps using your location data and tracking everywhere you go, always set your location off. Use location only when it's necessary.

  4. Avoid installing applications from shady websites.

  5. Always read what permissions you're granting the particular application. If you don't understand something, google is your best friend.

  6. Last but not the least, always turn off data when not in use. Some applications run in the background and gather usage statistics and send them for analysis.

Need your application to be trusted by millions? Contact us regarding application security testing at contact@nexixsecuritylabs.com

Your Security | Our Concern

All research

Cookie preferences

Choose what this site may store on your device. Your choice is remembered for six months and you can change it any time from the footer. Nothing in the optional categories is stored until you turn it on.

Always active

Needed for the site to work and to remember this choice. It is a single first-party cookie recording which categories you allowed. It carries no identifier and is never sent to anyone else.

Google Analytics and PostHog, so we can see which pages are read and where people give up. This is what lets us recognise one visit across several pages instead of counting every page as a new person. Records are anonymous — we never attach your name or email, and form fields are masked before anything is recorded.

Lets Google measure whether an ad we paid for led to an enquiry, and build audiences for future campaigns. Turning this off does not change what you see on this site.