How to tell if an Android app asks for too many permissions
Every Android app asks for permissions. The question is not whether an app asks for anything, but whether what it asks for matches what it does.
Match the permission to the feature
| App type | Makes sense | Questions to ask |
|---|---|---|
| Flashlight | Camera (for the LED) | Why contacts, location or microphone? |
| Photo editor | Photos and media | Why SMS or call logs? |
| Music player | Audio files, notifications | Why accessibility or device admin? |
| Navigation | Location | Why contacts or the microphone while closed? |
| Offline calculator | Almost nothing | Any internet access at all? |
The permissions that deserve the most attention
- Accessibility service and Device administrator: they give an app control over other apps or the phone.
- Display over other apps: can cover other screens.
- SMS and call logs: can read verification codes.
- Notification access: can read notification text, including codes and messages.
- Install other apps: can bring in more software.
- Internet: not dangerous alone, but it is what lets an app send data away.
Review permissions you've already given
On most recent versions of Android, open Settings > Privacy > Permission manager (the name varies). It lists each permission and which apps use it. Also look at the privacy dashboard, which shows when apps used your camera, microphone and location in the last day.
For one app, open Settings > Apps > the app > Permissions. Choose "Allow only while using the app" instead of "Always" wherever you can.
Signs of a bad app
- It asks for permissions before it does anything useful.
- It won't work unless you allow everything.
- The developer has no website, no contact, and one other app.
- The reviews are short, repetitive and posted on the same days.
Summary
Ask of each permission: can the app do its job without it? If so, deny it. Android lets you change your mind at any time.