Android - Understanding Permissions

Mobile industry is booming. Everyday new technologies are entering into this super fast evolving industry. Millions of apps are developed and downloaded every day. These apps are the main driving force in this ever growing mobile world. From casual games to some serious enterprise apps, they serve their user in every possible way.

The market is exploding with great apps and ideas and attracts lot of customers. People pay money to buy these apps. This attracts frauds, hackers to take advantage of people's innocence and lack of knowledge about the loop holes in this relatively new technology. They attack users using malwares and access user's private data. Users are fooled and mostly unaware. It's like unlocking your phone and handing it over to some unknown person. You will not do this in real world.

The two major platforms present at the moment in the market, android and iOS, both are build upon very secure and robust and trusted platform like Linux and UNIX. Both provide similar security and application sandboxing which puts restrictions on inter process communication between different apps and their data from unauthorized access. Then how come one is said to be more secure then other?

IOS gets its secure tag from the fact that it works within its own closed environment. Similar to Blackberry, iOS apps are first tested and based on some strict perimeters set, are approved or rejected by Apple. Application developers have to comply with Apple's rules for publishing their apps. Hence it is secure but not full proof. There are malwares in iOS as well.

Android on the other hand, has a more open approach. They involve user to decide what kind of access they want to permit to the application. Application gets installed only when permissions it has asked has been granted by the user. If permission is not granted, application will not work. Google do examine all apps uploaded to Play Store (they use a cloud service to verify new apps against known malware signatures and test them for malware-like behavior).

This approach looks secure but due to the involvement of users for granting permissions, there are risk factors introduced. And this has become a point of concern as Google has failed to make user more aware about these permissions. Most of the users simply don't look into what permissions they are allowing while installing the app. They treat it similar to installing some software on PC or sign up on some site, scroll the privacy policy and click "accept" without reading into what the terms and conditions are and what could be the consequences if there occur some issue in the future.

The most common permission asked like network access, storage access, contacts, phone state or system tools, etc. should be allowed carefully.

Most of the apps use these permission in ethical manner. But some malware's might ask internet or network permission for ads and storage access for reading and writing down some file, but in background may collect sensitive and private user data. User will not be aware of what is happening in the background. Some apps may even trace your phone activities, online transactions and may use them for their profit. Some may simply collect your data and use it for their analysis.

Well the good thing is most of the apps out in market doesn’t do anything like that. However, one must ask question on the permissions an app is asking for – why the app needs network access, why storage access, why phone state access. User should investigate a little and check if the developers have mentioned why they are using these permissions. If there is something suspicious one should not download that app. There are hundreds of similar apps available in market, try them but do check the permissions. If you believe an app installed on your device is a malware, you can report it to google and if they found it contagious they will remove it from the play store and take action against the developers.

Remember to check the permission access you are giving to the application. The security of your data and privacy is in your hands. Check for the user reviews of the apps before installing them. Download apps from trusted vendor or store.

 A little knowledge and careful approach can provide a great experience to you and your smartphone will make your life smarter.