Everyone knows all the apps on your phone (peabee.substack.com)

Article summary

The article discusses how many Android apps, particularly those from Indian companies, are able to access and collect data on other installed apps on a user's phone, often without a clear reason related to their core functionality. This is done through various means, including the use of the QUERY_ALL_PACKAGES permission and a loophole in the Android package visibility policy. The author analyzed the manifest files of several popular Indian apps and found that many of them have extensive lists of apps they query, potentially for user profiling and behavioral tracking. This raises concerns about user privacy and data protection.

Main themes

• Android app permissions
• User data collection
• Privacy concerns
• Indian app ecosystem
• Security loopholes

What commenters say

• Many Android apps are able to collect data on other installed apps without a clear reason, raising concerns about user privacy.
• The Android package visibility policy has a loophole that allows apps to access data on other installed apps without proper disclosure.
• Some commenters argue that Windows has a more permissive security model than Android, allowing apps to access more sensitive information.
• Others argue that the lack of sandboxing in Windows and other desktop operating systems makes them more vulnerable to security risks and data breaches.
• There is a need for more transparency and control over app permissions and data collection, with some suggesting that users should be able to deny or fake responses to app requests.
• The use of virtual machines or other isolation techniques can help mitigate the risks associated with untrusted apps.
• Some commenters believe that the initial trust given to apps is often unwarranted and that a more cautious approach is needed when installing and using third-party software.