Google: This major privacy change is coming to billions of Android devices soon – ZDNet

Google is rolling out a privacy-enhancing answer to all those forgotten and unused Android apps once granted access to your sensitive data.
By | September 20, 2021 | Topic: Security
Android apps that haven’t been used for a while will soon begin to automatically lose their permission to access sensitive device features, such as sensors, SMS messages, and contact lists.
Come December, Google plans to ramp up the availability of “permissions auto-reset”, an Android privacy feature that automatically winds back an app’s previously-granted permissions to access a device’s location, camera, microphone and so on. 
Google released the feature for Android 11 last year, but in December it will expand it to “billions more devices” via Google Play services on devices running Android 6.0 (API level 23) from 2015 and newer.   
The best Android phones
Here are the top Android phones you can buy.
Read More
“The feature will be enabled by default for apps targeting Android 11 (API level 30) or higher. However, users can enable permission auto-reset manually for apps targeting API levels 23 to 29,” Google explains in an Android developer blogpost
SEE: Over 60 million wearable, fitness tracking records exposed via unsecured database
The feature aims to help Android users control privacy-sensitive app permissions in the context of users having dozens of apps on a device, many of which don’t get used that often or for long periods of time. It targets an app’s “runtime permissions“, or “dangerous permissions” for accessing location, contact information, messages and other private user data.    
Around Q2 2022, if an app targets Android 6 or higher and isn’t used for a few months, Android will automatically reset the sensitive runtime permissions that the user had granted to an app. 
“This action has the same effect as if the user viewed a permission in system settings and changed your app’s access level to Deny,” Google explains in developer notes
The change will affect all Android apps on consumer devices. However, Google has made an exception for enterprise-managed apps and apps with permissions that have been fixed by enterprise policy. 
Google also has a way for developers to ask a user to disable auto-set for their app. This could be suitable for apps that are expected to work in the background, such as apps that provide family safety, apps for syncing data, apps for controlling smart devices or pairing with other devices.
SEE: Smartphone sales are riding out the global chip shortage
The rollout of the auto-reset feature will gradually take place after kicking off in December, but it won’t reach all devices between Android 6 and Android 10 until Q1 2022, Google notes. 
However, users with Android 6 to 10 can go to an auto-reset settings page and enable or disable auto-reset for specific apps.
“The system will start to automatically reset the permissions of unused apps a few weeks after the feature launches on a device,” Google notes. 
Best VPN 2021: Top VPN services reviewed

Best keyboard 2021: Because you deserve better

Own an iPhone, Android, laptop or desktop system? You need this $29 security key

Best smart display 2021: Top 5 displays compared

Best laptop 2021: Mac, PC, and Chromebook compared

Best smart speaker 2021: Top voice assistant options

Best soundbar 2021: Turn it up

Best streaming device 2021: Your top media player options

Ditching Google Chrome was the best thing I did this year (and you should too)

Please review our terms of service to complete your newsletter subscription.
You agree to receive updates, promotions, and alerts from ZDNet.com. You may unsubscribe at any time. By joining ZDNet, you agree to our Terms of Use and Privacy Policy.
You agree to receive updates, promotions, and alerts from ZDNet.com. You may unsubscribe at any time. By signing up, you agree to receive the selected newsletter(s) which you may unsubscribe from at any time. You also agree to the Terms of Use and acknowledge the data collection and usage practices outlined in our Privacy Policy.
© 2021 ZDNET, A RED VENTURES COMPANY. ALL RIGHTS RESERVED. Privacy Policy | Cookie Settings | Advertise | Terms of Use

source