Somewhere in the quiet machinery of every phone lies a question most people never ask: what else is installed here, and who gets to know? Google has decided that this inventory belongs to the user's private life, and it is now asking developers to justify any app that wants to peer into it. The change reflects a broader shift in how platforms weigh convenience against the solitude of a person's own device, and it will settle over the coming months as apps either earn their access or give it up.
Google Restricts Android Apps From Snooping on Installed Software Under New Play Policy
Google now treats your list of installed apps as personal and sensitive information
Mark
Why does a list of installed apps count as sensitive at all? It sounds mundane.
Mimi
Google's own framing is that it's personal information. The article gives two concrete worries: it can be pulled out and sold for targeted advertising, and it could in theory help malware.
Luke
Worth flagging that the malware point is hedged. The reporter says outright they're not sure how prevalent that is. The advertising concern is the firmer one.
Mark
Which apps are still allowed to look?
Mimi
Ones whose core function needs it. Google lists device search, antivirus, file managers and browsers.
Mark
And everyone else?
Mimi
They have to remove the QUERY_ALL_PACKAGES permission from their manifest. Those who qualify file a Declaration Form in the Play Console.
Luke
What the piece doesn't tell us is how Google will judge those forms, or how many apps currently use the permission. We only know the penalties: removal from Google Play and possible account suspension or termination.
Mark
Can developers dodge this by targeting older Android versions?
Mimi
Not for long. New apps must target Android 11 by August, and updated existing apps by November. The rule itself starts May 5, 2021.
Luke
So the timeline is clear, but the real effect on users' privacy is still unmeasured.
Der Puls
- A single permission, QUERY_ALL_PACKAGES, has become a point of friction between developers who need visibility and a platform now treating that visibility as sensitive.
- Apps that quietly catalogued users' installed software now face removal from Google Play unless they formally declare why they need it.
- Developers are scrambling to decide whether their product truly qualifies, with antivirus tools, file managers and device search positioned as the expected exceptions.
- Targeting older Android versions no longer offers an escape route, as the requirement tightens through August for new apps and November for updates.
Somewhere in the quiet machinery of every phone lies a question most people never ask: what else is installed here, and who gets to know? Google has decided that this inventory belongs to the user's private life, and it is now asking developers to justify any app that wants to peer into it. The change reflects a broader shift in how platforms weigh convenience against the solitude of a person's own device, and it will settle over the coming months as apps either earn their access or give it up.
Google has quietly tightened the rules on one of the less visible powers an Android app can hold: the ability to see which other apps are installed on a phone or tablet. Most people never think about this capability, yet it has long been available to developers, and Google now considers the installed-app list personal and sensitive information.
Under the updated Play policy, an app may collect that list only when its core purpose depends on broad visibility. Google's examples are device search, antivirus software, file managers and browsers, products where seeing the full inventory is the whole point. Everything else must remove the QUERY_ALL_PACKAGES permission from its manifest.
The reasons for caution are straightforward. A list of installed software reveals habits and interests, can be sold to advertisers, and could, in theory, make malware more effective, though the risk is not well quantified.
Developers who believe they truly need the access must complete a Declaration Form in the Play Console. Those who skip it risk removal from the store and, if they persist, suspension of their accounts. The rule takes hold for apps targeting API level 30 and Android 11, closing the older-version workaround: new apps must comply by August, and existing apps receiving updates by November.
Google has updated its Play Store policy on a quiet but consequential capability: the ability of one Android app to see which other apps are installed on a phone or tablet. Many users have probably never thought about it, but apps can do this, and Google is now making it harder for developers to build that behavior in.
The company's reasoning, laid out in an updated support document, is that it considers "installed apps queried from a user's device" to be personal and sensitive information. Under the new rule, an app may gather that list only when its core functionality requires broad visibility into what else is on the device.
The policy centers on a permission called QUERY_ALL_PACKAGES. Google says permitted uses are apps that must discover any and all installed apps for awareness or interoperability purposes. Its examples are device search, antivirus apps, file managers and browsers. Those are categories where seeing the full inventory is plausibly the whole point of the product.
There are several reasons a user might not want an app to have that view. The first is simple privacy. Beyond that, a list of installed software can be extracted and sold for targeted advertising. Hot Hardware also notes that such information could, in theory, help make malware more effective, though the outlet says it is unsure how common that actually is.
The rule applies to API level 30 or later, on devices running Android 11 or later, and takes effect May 5, 2021. A developer hoping to avoid it by targeting an older Android version will find that route closing. Google will require new apps to target at least Android 11 by August of this year, and by November the same requirement will apply to existing apps that receive updates.
For apps that do not meet the acceptable-use standard, Google's instruction is direct: the permission must be removed from the app's manifest in order to comply with Play policy.
Developers who believe their app genuinely needs the access must fill out a Declaration Form in the Play Console. Skipping that step is grounds for removal of the app from Google Play. Developers also risk suspension or termination of their accounts if they ignore the rule.
The dates to watch are May 5 for the policy itself, then August for new apps and November for updates to existing ones, when the Android 11 targeting requirement closes off the workaround.
Bemerkenswerte Zitate
Google views installed apps queried from a user's device as personal and sensitive information.— Google, updated Play support document
Möchten Sie die ganze Geschichte?
Das Original lesen bei Hot Hardware ↗
Technology