1

Even though I don't recommend relying on it (because it is not very effective), I know quite a few people who only use Google Play Protect.

  1. Does Google Play Protect only scan apps installed via the Google Play Store or does it scan all installed apps?
  2. Does it scan APK files on the device that are not installed?
2

From experience

Does Google Play Protect only scan apps installed via the Google Play Store or does it scan all installed apps?

It checks for all apps installed on the device irrespective of source (barring systemless installs using Magisk). For instance V4A (Viper for Android) flashed through TWRP triggered this warning

Does it scan APK files on the device that are not installed?

No, it does not scan APKs. I was transferring APKs of old versions of apps which I prefer over current version and inadvertently copied Lucky Patcher APK. Since I didn't install it, it passed checks

  • 1
    +1. I agree too. And I want to add that Google Play Protect actually sucks in what it does. I have URet patcher installed too (an alternative to Lucky Patcher in few cases) and Google Play doesn't detect it as a harmful app. – Firelord Aug 22 '18 at 10:18
  • 1
    @Firelord Even worse, it doesn't detect Lucky Patcher (vanilla!) on my OnePlus 5/6 in more than half a year. – iBug Aug 23 '18 at 5:38

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.