Why permissions matter

Permissions decide what an app can see and do on your phone. Most apps ask for a few reasonable ones; problems start when a simple app asks for access it clearly does not need.

Ask one question for every permission: does this feature actually need it? A flashlight app has no reason to read your SMS.

Usually fine

  • Internet / network state — almost every app needs it
  • Notifications — expected for chat, email, and news apps
  • Camera / microphone — expected for camera, video call, and voice apps
  • Photos and media — expected for galleries, editors, and social apps

Take a second look

  1. 1
    SMS and call logsCan read one-time passwords. Only messaging or dialer apps should need this.
  2. 2
    Accessibility serviceCan read the screen and tap for you. Legitimate for assistive tools and password managers, dangerous elsewhere.
  3. 3
    Device administratorCan lock or wipe the phone and makes uninstalling harder. Rarely needed outside work-profile and anti-theft apps.
  4. 4
    Display over other appsCan draw fake login screens on top of real apps. Fine for chat bubbles and screen filters only.
  5. 5
    Install unknown appsLets the app install other APKs. Only app stores and file managers should ask for it.
Be especially careful when an app pushes you to enable Accessibility or Device Admin right after install “to work properly” — this is a common malware pattern.

Where to check on APKDown

Each app page lists the most important permissions the app requests, next to the version and file size. Compare them with what the app actually does before you download.

Review and revoke after install

  • Open Settings → Apps → [app] → Permissions
  • Switch location to While using the app or Ask every time
  • Use Settings → Security & privacy → Privacy dashboard to see what accessed your camera, mic, or location
  • Leave Android’s auto-reset for unused apps turned on
Guide Safety