Written on Apr 28, 2014

segue-blog-android-permissions

When you lot download nigh apps from the Google Play Shop, you see a screen that looks something like the following:

Android Permissions Screen

What this screen is giving you is a list of application permissions that the app you are about to install is asking for. Only what are application permissions anyway?

Android Permissions

The Android Operating System (OS) is structured in such a manner that individual applications are isolated from i another and from the operating system itself. This means that past default one application cannot start another application, nor tin can it access the data used past other applications. This is a fundamental security characteristic of the Android Os. In order for one application to share the resource or data of another, you must provide explicit permission for it to practice so. Of form nearly every app does require that you grant at least a few permissions in guild for it to function. Google Maps isn't going to work very well if it can't access your GPS receiver, for example, and posting photos direct to Facebook is fabricated easier by granting admission to your device'south camera.

It can be scary sometimes, reading down the list of everything that a seemingly unproblematic app might want access to. Exercise you demand to worry that some innocent game will download all of your personal contacts and sell them off to telemarketers? Actually yes, you lot do. But this is a multifaceted trouble for most ordinary users: What do these permissions actually mean? Why does this app need so many of them? How practice I know what'due south safe?

What Permissions Practice I Need to Worry About?

Most of them, or none of them. I know that's non much of an respond, but the fact of the matter is that it honestly depends. There are literally dozens of Android permissions, and learning the finer points of every ane could be a higher course of its own. Scary sounding permissions similar "Full network admission" are necessary for apps to connect over the internet direct without showtime opening a web browser, but if you combine that with "Read your contacts" and so cypher is stopping an app from sending the entire contents of your contacts list anywhere in the world. "Take pictures" and "Record sound" tin let an app plough your phone into an on-demand spying device without you lot even knowing about it, merely are necessary for an app to access your device'south camera or microphone. Granting "Directly call telephone numbers" or "Send SMS" permissions will allow an app to place calls or send text messages directly, possibly at a toll, and without yous having to click a transport push. But if you've ever called someone by clicking the telephone icon you see in Facebook Messenger, that'due south how it happens.

Why Does an App Demand All These Permissions?

If an application requests a item permission, most of the time it'southward for a perfectly legitimate office. Your third party texting app needs to be able to receive, read, and send both SMS and MMS messages. It will also likely crave permissions for your telephone's contacts and local data storage. If you want to accept pictures and send them via text message, so you'll be giving camera permissions as well, etc… If the app is supported by advertisements, so chances are information technology may very well ask for permissions to determine your location and maybe read your browser history too. This is usually pretty innocuous (if you consider targeted advertisements to be innocuous) but this is where you have to start paying closer attending. Once you give an awarding rights to your personal information, you don't really accept any idea where it goes or who does what with it.

Exist wary when an app asks for permissions that don't make sense to you. App stores are littered with free games and utilities that are free considering they're just a front for mining your data. When you grant application permissions, yous're assuasive access to annihilation that particular permission gives admission to.

Can I Control Permissions Individually for Each Application?

No, not really. If you lot desire to install an application then you get ane chance at Aye/No. You can't authorize some permissions merely deny others. If y'all don't like what an app is request for, then you should not install information technology. There are ways around that, but these methods are not part of the normal operation of the Android operating system. Selectively controlling application permissions involves delving into the seedy underworld of root-access applications. Unless you really know what you're doing, ypu shouldn't root your phone. Not only tin attempting to root your device impairment it, but fifty-fifty if successful doing so tin betrayal your device to all sorts of dangers.

Can an Application Alter its Permissions?

Granting permissions is an install-time activity. Just like you can't alter the permissions for an app that y'all've installed, an app that's been installed can't go and grant itself additional permissions after. If a later update of an app requires additional permissions, and so you will exist shown the awarding permissions authorization screen when you download and install it. Also, if you have automatic updates turned on for a item app information technology volition not do so if the permissions accept changed. So if the Play Shop is telling you that you demand to run an update yourself, or if you see that permissions screen for an app you're already installed, pay attention!

How Can I Stay Prophylactic When Downloading Apps from the App Shop?

Most of the apps out there practise exactly what they say and nil more merely you lot should still accept care. First by using common sense. Google Play is a pretty wide open market and so is the Amazon App Store. If an app isn't bachelor there it's probably for a practiced reason, so avoid third party application stores. Before you download an app, have a few minutes and actually read the entire app item folio on the Play Store before y'all begin your download. Are the required permissions spelled out for yous before you initiate the download? Can you lot tie each permission to an advertised application part? How many people have downloaded information technology before? Are the reviews mostly favorable? Practise the bad reviews warn of malicious activity? Does the awarding programmer have a web folio you can go read to discover out more information? Do they accept contact information themselves? Not every developer does, of class, but if you're worried near what the app has access to and you can't find anyone to enquire questions, that's a ruby flag.

What most Sideloading Apps?

Sideloading refers to the process of installing an awarding straight on to a device without acquiring it from the Google Play Shop. Copying an installation package file from another device or downloading it from a website are both examples of sideloading. Since the application file isn't coming from the Play Store, you don't always know that it's safe. Luckily, the default Android Security setting is to disallow the installation of apps from unknown sources. If y'all practice elect to sideload an app then you'll see the normal permissions authorisation screen in whatsoever example, simply be double sure that y'all read what it says. Also be sure to adjust your settings later on to once over again disallow installation of apps from unknown sources.

The BIG caveat for sideloading is the Amazon App Store. It's not Google, information technology's Amazon. To even install the Amazon App Store on many Android devices you lot've got to enable sideloading, and so everything y'all install from the Amazon App Store is, itself, sideloaded. If you are interested in using the Amazon App Shop instead of the Play Shop, take into account that doing so necessitates opening upward a hole in Android'due south native security.

The expert news is that even sideloaded applications will present yous with a permissions screen. It may wait a picayune different, but the required authorization of application permissions is broiled into your device's operating system. Any time that you effort to install an application that requires permissions on your device, you must authorize them earlier the installation can proceed.

Awarding permissions are the keys that unlock the functionality of your Android device and keep different components secure from one some other. The about impactful thing that you can do to brand sure that you're non affected by malicious applications on your device is to be aware of what you're installing. Read the App Permissions screen that you lot are displayed when you elect to download an application, and if you don't understand or trust everything listed, then don't install the application. Contact the app developer if you lot have questions. Stay away from tertiary party awarding stores unless yous really know what you're doing. However, don't assume that every application out there is trying to steal your data considering they aren't. If you lot don't sympathize why a particular permission is required, it is probably related to a piece of functionality that you didn't realize was part of the app. Before getting upset and accusing a developer of trying to steal your personal data, bank check the Play Store or ask the developer straight; or find an alternative app that's more transparent.

Be prophylactic out there!

Download our Mobile eBook