Monday, 11 August 2025

Android Launchers and their Permissions (2025 version) - A Guest Post by Malcolm Bryant

Basic Launcher
A launcher has a highly privileged position on your device. It can know a lot about your usage patterns - what you do on your device. That's valuable information that can be mined. If your launcher has internet permission (most do) then it could upload that information for monetisation purposes.

So out of curiosity, I installed several well-known launchers on my phone and checked the number of permissions they request. The more permissions, the more the launcher can keep track of what you do. Some permissions are deemed to be 'dangerous'. Google's definition: "In the Android security model, a dangerous permission is one that gives an app access to a user's private data or control over the device that could potentially harm the user." Other permissions are granted automatically (eg. internet access). As we'll see, it's perfectly possible for a launcher to do its primary job of opening other apps with zero dangerous permissions (in fact zero permissions of any type).

Here's the list, from high to low
  • Microsoft Launcher: 73 permissions, 14 dangerous
  • Lawnchair Launcher: 53 permissions, 6 dangerous
  • Pixel Launcher: 52 permissions, 3 dangerous
  • Action Launcher: 44 permissions, 7 dangerous
  • Hyperion Launcher: 44 permissions, 6 dangerous
  • AIO Launcher: 41 permissions, 13 dangerous
  • Smart Launcher: 35 permissions, 13 dangerous
  • Nova Launcher: 31 permissions, 12 dangerous
  • Big Launcher: 24 permissions, 9 dangerous
  • Niagara Launcher: 29 permissions, 5 dangerous
  • Total Launcher: 27 permissions, 8 dangerous
  • Lynx Launcher: 24 permissions, 4 dangerous
  • OLauncher: 12 permissions, 0 dangerous
  • Octopi Launcher: 10 permissions, 0 dangerous
  • Basic Launcher: 0 permissions, 0 dangerous

Since it's at the top, let's consider whether the permissions MS Launcher requests are justified or whether it's a case of 'launcher overreach'. Let's drill down on the permissions it requests, starting with the 'dangerous' ones. For each one, ask yourself why your launcher actually needs this permission:
  • Access your approximate location
  • Access your precise location
  • Directly call phone numbers
  • Take pictures & videos
  • Find accounts on the device
  • Show notifications
  • Read calendar events and details
  • Read your contacts
  • Read contents of your shared storage
  • Read image files from shared storage
  • Read user-selected image & video files from shared storage
  • Read phone status and identity
  • Record audio
  • Modify or delete the contents of your shared storage

MS Launcher requests other permissions that aren't 'dangerous' but leave me scratching my head as to why. Here's a selection:
  • Read the settings for other popular launchers, if installed (there are a bunch of them, named individually)
  • Pair/access your Bluetooth devices
  • Change your network connectivity
  • Turn on your flashlight
  • Change your audio settings
  • Stop your phone from sleeping
  • Modify your system settings

Conclusion
Microsoft is a reputable company and it's very unlikely to be doing anything nefarious on your device with these permissions. That probably goes for the other launchers as well. But you can bet your house that they are uploading very detailed usage patterns of how you use your phone, what apps you install/delete, what apps you run - how often and for how long, what media you consume, who you call or message, what peripherals you connect and so on. Maybe that's fine and to be expected in this day and age. But if you don't like it, switch to a less intrusive launcher like Octopi.

Malcolm is a Developer based on his Freepoc website. He's been coding there since 1999 including his above-referenced Basic Launcher. He also has a YouTube Channel where he posts interesting videos about his work and is an active member of Phones Show Chat with us.

No comments:

Post a Comment

Android Launchers and their Permissions (2025 version) - A Guest Post by Malcolm Bryant

A launcher has a highly privileged position on your device. It can know a lot about your usage patterns - what you do on your device. That...