Android App Permissions Explained: What Each One Really Allows
Image: Ilya Plekhanov, CC BY-SA 4.0, via Wikimedia Commons
Every time an Android app asks to use your camera, contacts or location, it is asking for a permission. Permissions are the main way Android keeps apps away from your data without your say-so. Understanding what each one allows makes it much easier to tell a reasonable request from a suspicious one. This guide explains the permissions that matter most, how Android handles them and how to review what your apps can already do.
How Android permissions work
Android sorts permissions into broad groups. Normal permissions, such as internet access or vibration, are granted automatically because they carry little risk. Runtime permissions cover sensitive areas such as camera, microphone, location, contacts and storage, and the app has to ask you while it runs. Special access covers powerful abilities, such as drawing over other apps, installing other apps or reading what is on screen, and these are switched on from a dedicated settings screen rather than a simple pop-up.
Since Android 6.0 you can approve or deny runtime permissions one at a time and change your mind later. Newer versions add finer choices, such as allowing location only while the app is in use, or sharing approximate rather than precise location.
The permissions that matter most
Camera and microphone
These are needed for photos, video calls and voice notes. A flashlight or calculator has no reason to want either. On Android 12 and newer, a status bar indicator appears when the camera or microphone is in use, which helps you spot unexpected activity.
Location
Maps, delivery and weather apps need it. Choose the option to allow it only while using the app, unless the app truly needs background access, as a family safety app might. Approximate location is plenty for weather and local news.
Contacts, phone and SMS
Messaging and caller ID apps may need contacts and call information. SMS access is especially sensitive because text messages can carry one-time codes for your accounts. Google Play restricts which apps may request SMS and call log permissions, but apps installed from elsewhere do not get that review, so be stricter with them.
Storage, photos and files
Modern Android lets apps pick specific photos or files through a system picker without broad access. If an app asks for access to all files, ask yourself why it needs that.
Notifications
Since Android 13 apps must ask before sending notifications. They are harmless in themselves, but they can become a nuisance or a route for scam alerts.
Nearby devices and Bluetooth
These are needed for headphones, wearables and file sharing. A simple offline game rarely needs them.
Special access to treat with care
| Special access | What it allows | Who legitimately needs it |
|---|---|---|
| Accessibility service | Read the screen and tap on your behalf | Screen readers, some password managers, automation tools |
| Device admin | Lock the device, enforce policies, wipe data | Work profile and device management apps |
| Display over other apps | Draw windows above other apps | Chat bubbles, screen recorders |
| Install unknown apps | Install APK files | A browser or file manager you choose, briefly |
| Notification access | Read all notifications, including codes | Smartwatch and notification tools |
Malware often abuses accessibility and overlay permissions, because together they let it read what you type and press buttons for you. If a small, simple app asks for either, uninstall it.
How to review what your apps can do
- Open Settings, then Security and privacy (or Privacy) and choose Permission manager. On some phones it sits under Apps.
- Tap a permission, such as Location, to see which apps have it and at what level.
- Change anything unnecessary to Ask every time or Do not allow.
- Open Settings, Apps, Special app access to review the powerful permissions in the table above.
Android 11 and newer also pause permissions for apps you have not opened for several months, which helps keep forgotten apps from collecting data.
Warning signs in a permission list
- A simple tool asks for contacts, SMS or the microphone.
- An app asks for accessibility access the first time you open it.
- An app will not work unless you accept every permission.
- An update suddenly asks for broader permissions with no new features.
Frequently asked questions
Can I deny a permission and still use the app?
Usually yes. Well-built apps keep working with reduced features. If an app refuses to run at all, ask whether it really needs that access.
Do permissions matter for apps from Google Play?
Yes. Play checks apps, but it cannot know what you are comfortable sharing, so reviewing permissions is worthwhile for every app.
What does allow only while using the app mean?
The app can use that permission only while it is open on screen or running a visible task. It cannot collect the data in the background.
To judge a file before you install it, read our APK safety checklist, and see the install guide for the safest way to proceed.