News for hackers. Stuff that matters.

A comment on More than 1k Android apps harvest data even after you deny permissions. Parent comment

Re:More than 1k Android apps harvest data even after you den... by kalleboo on Tuesday July 09, 2019 @03:00AM (#20389571)
On iOS, photo write and read access are granted separately, so you can allow an app to only save photos.

Apps can also import photos without any permissions at all by invoking the system photo picker (where the user manually has to pick the photos one by one).

[ Parent | on HN ]
Re:More than 1k Android apps harvest data even after you den... by Tsiklon on Tuesday July 09, 2019 @07:44AM (#20390813)
Is it the case that when the app uses the system photo picker, that the app is only ever presented with the photos the user selects? In other words, the app doesn't have direct read access to the main photo library.
[ Parent | on HN ]
Re:More than 1k Android apps harvest data even after you den... by londons_explore on Tuesday July 09, 2019 @10:07AM (#20391860)
Correct.

This is true on both android and iOS, but on android the 'system' photo picker is an intent which fires up the gallery/google photos and typically has a pretty bad user experience, so not many app developers use it.

[ Parent | on HN ]