TLDR Web Dev · MISCELLANEOUS
EVERYONE KNOWS ALL THE APPS ON YOUR PHONE
Summary from the TLDR Web Dev newsletter
Indian Android apps have privacy issues as many apps circumvent Google's privacy policies to collect data on installed apps. Swiggy and Zepto were found to have extensive lists of apps they query, while personal loan apps like KreditBee and Moneyview query an excessive number of apps. A significant privacy loophole exists through the "ACTION_MAIN" filter, allowing apps to see all installed apps with a user interface. Zepto's READ_SMS permission request shows how apps access personal data, potentially sharing it with brokers and affecting user pricing.