Apps requesting too much permission

[km04]

Why do apps request permission to things they don't need? Samsung Pay wants access to data about my vital signs? What the hell for? It also wants access to my contacts, why? The business transaction is between me and Samsung/whatever vendor I am buying from.



Samsung kids wants access to my contacts as well. Again, why? I have installed, then uninstalled a bunch of apps once I see what they are requesting access to. This is insane. I have now started to go back and look at the permissions for every app on my phone.

 

[chanchan05]

Doesn't the vital signs permission cover fingerprints?

 

[srvctec]

I thought you could pick and choose what permissions you want an app to have.

 

[Brew Swayne]

Doesn't the vital signs permission cover fingerprints?

That's very possible.

 

[Brew Swayne]

I thought you could pick and choose what permissions you want an app to have.

You can, but some (maybe most?) apps won't function at all if you don't allow all of the permissions it is requesting.

 

[srvctec]

You can, but some (maybe most?) apps won't function at all if you don't allow all of the permissions it is requesting.

I usually see how an app acts without permission(s) I'm not comfortable allowing and if it works I keep it. If not, I find something else without such invasive permissions.

 

[jhimmel]

I usually see how an app acts without permission(s) I'm not comfortable allowing and if it works I keep it. If not, I find something else without such invasive permissions.

Exactly. For instance, I just got rid of Pen Up (Coloring) because it refused to work without access to my contacts.

 

[Tim1954]

Yup. I kill all permissions in all apps and grant them on a needs basis (if at all).

 

[km04]

Doesn't the vital signs permission cover fingerprints?

Not sure, wouldn't that be more along the lines of biometric rather than vitals?

 

[km04]

You can, but some (maybe most?) apps won't function at all if you don't allow all of the permissions it is requesting.

This. It was all or nothing.

 

[TechnologyTwitt]

Why do apps request permission to things they don't need? Samsung Pay wants access to data about my vital signs? What the hell for? It also wants access to my contacts, why? The business transaction is between me and Samsung/whatever vendor I am buying from.

View attachment 270034

Samsung kids wants access to my contacts as well. Again, why? I have installed, then uninstalled a bunch of apps once I see what they are requesting access to. This is insane. I have now started to go back and look at the permissions for every app on my phone.

View attachment 270035

This is something I also have an issue with, especially coming over from iOS. No app should be able to interfere with OS core functions or if it does, you should be able to make the decision whether or not to grant access.

If permission is granted to ANY core OS function, a final warning popup should appear to make you well aware that instability, lag, security compromise, etc could occur.

 

[chanchan05]

This is something I also have an issue with, especially coming over from iOS. No app should be able to interfere with OS core functions or if it does, you should be able to make the decision whether or not to grant access.

If permission is granted to ANY core OS function, a final warning popup should appear to make you well aware that instability, lag, security compromise, etc could occur.

For the record, if the same app exists on iOS (Same developer) and the features are exactly the same, then Apple deemed it worthwhile to give the app access to the same things it's asking for on Android. The only difference is here, you are the one deciding to grant permissions. On iOS, Apple reviews it themselves. Basically if Apple thinks it's ok, you don't get to make the decision or not to grant access.

An example would be Facebook Messenger. On Android it requests access to SMS which you can deny. On iOS it also has a feature to intercept SMS, and AFAIK you can't remove that access permission. You can just stop the app from importing the SMS.

 

[Stealthieone]

This is always something I've never cared about... Why do you even care?

 

[hummingbirdhill]

I've always limited app permissions on each new phone prior to activating the new phone

 

[Golfdriver97]

Why do apps request permission to things they don't need? Samsung Pay wants access to data about my vital signs? What the hell for? It also wants access to my contacts, why? The business transaction is between me and Samsung/whatever vendor I am buying from.

View attachment 270034

Samsung kids wants access to my contacts as well. Again, why? I have installed, then uninstalled a bunch of apps once I see what they are requesting access to. This is insane. I have now started to go back and look at the permissions for every app on my phone.

View attachment 270035

For Samsung Pay, I can understand the body sensors permission. Many permissions are lumped together, and fingerprints and body sensors are probably lumped together. SMS, Contacts, Storage and Camera.....I don't understand why those are required.

 

[chanchan05]

For Samsung Pay, I can understand the body sensors permission. Many permissions are lumped together, and fingerprints and body sensors are probably lumped together. SMS, Contacts, Storage and Camera.....I don't understand why those are required.

Contacts maybe you can share points?

Storage and camera are for QR codes and the like. Maybe you got sent an image of a QR code or need to scan one.

I suppose SMS permission is needed if someone sent you an MMS of a QR code.

 

[Golfdriver97]

Contacts maybe you can share points?

Storage and camera are for QR codes and the like. Maybe you got sent an image of a QR code or need to scan one.

I suppose SMS permission is needed if someone sent you an MMS of a QR code.

Maybe. But since this is a payment application, I would think that adding more hooks can introduce more ways for hacks to happen?

 

[anon(5719825)]

If an app requests too many permissions that it makes no sense to have, it doesn't get installed on my phone. I've had one app refuse to install because I wouldn't give it permission to use the mic. I deleted it, it didn't need the mic for any reason that I could tell.

 

[b.grdner]

Exactly. For instance, I just got rid of Pen Up (Coloring) because it refused to work without access to my contacts.

The pen up permissions for Contacts is so you can share the picture you colored. If you don't think you'll be sharing any pictures I would think you can deny that one after it's installed (via application permissions).

 

[Stealthieone]

Paranoia at its best... You think an app dev would open itself up to a class action law suit? Have you ever heard of anyone being taken advantage of by an app?