I just stumbled upon some permissions which sound clear at first sight (noticed them already quite a while ago, just decided to dig deeper right now). Thinking about possible implications, I'd really like to know what features/data they give access to, as this might get quite personal/sensitive:

  • com.google.android.gm.permission.READ_GMAIL: often the reason given is "to access attachments" (such as PDF files to be opened with a PDF reader). But is that all? Or could an app equipped with this permission read the entire mail?
  • com.google.android.gm.permission.WRITE_GMAIL: could an app with this permission write and send mails on my behalf? Or even delete existing mails (including the "written-and-sent one", to hide its activities)?
  • com.google.android.gm.permission.READ_CONTENT_PROVIDER: one app describes its use as "read Gmail labels and get unread count". Another one writes "Used to update the unread email count on your lockscreen. Email content is not sent to our servers." Which suggests this permission can be used to access the entire mail content. And other contents?
    In some source code I found the comment Permission required to access android.content.ContentProvider, which suggests a lot of content getting accessible this way if it means THE content provider, including contacts and calendars. Not being an Android dev, I cannot really tell without being told first.
  • google.android.gtalkservice.permission.GTALK_SERVICE: Yes, please?

I've "googled" them all (the above is already the result of my research). And of course I started with my favorite sources when it comes to permissions:

But the above is all I could come up with. Can somebody shed some more light on those? From a user's perspective, what can be accessed with those permissions, and what are the privacy implications? A "good cop/bad cop" play would be appreciated, naturally :)

  • 1
    Have you seen the Google Play Services permissions? "Add additional permissions at any time." I can't answer why they are there, and how this came about but anecdotally Google seem to be adding permissions to all gApps lately. It could be unifying the frameweork services/games/mail/talk/plus and so on. But it is very odd and very alarming. I've been told, off the record, that Chrome has more code around personalisation, logging etc than actual internet browsing. I don't know at all if that is true. Certainly there is a shift in 'all the permissions!' lately.
    – RossC
    Mar 20, 2014 at 13:40
  • Could you give a little more information about where you're seeing these permissions? I could do a little digging for you, but I'll need at least the full name of each permission to start (including the android.permission. or whatever at the start). Bear in mind that any app can define new permissions to control how other apps use that app's features.
    – Dan Hulme
    Mar 20, 2014 at 13:52
  • 1
    @RossC Yeah, that's correct. But the 4 above are already around for some time – so I'm not asking about the "latest fancies". Being offered by the Google Apps themselves (see my edit), they are not mentioned in the AOSP manifests; and GApps being proprietary code, there's not much to look into for investigation. // I share your opinion about "alarming" (those bells are one thing behind my question). And though your Chrome example looks "exaggerated", I'm totally buying it...
    – Izzy
    Mar 20, 2014 at 14:17
  • It's not surprising that Chrome contains more code on the side features than browsing. The majority of the code for rendering pages is in WebKit (now Blink) and V8 and the main browsing window is basically the same as with Chromium project.
    – Lie Ryan
    Mar 20, 2014 at 22:12

1 Answer 1


More than one year later, and no answer here. I've done some research myself – and though there was not much found, I'll share what I've got so far:

  • 2
    Great update. It is amazing how little understandable documentation exists regarding how everyone's data is used by different apps. Sep 25, 2015 at 19:41
  • 3
    @RockPaperLizard that's what I always wonder: how do the devs know what perms they need, without documentation? For the users' end, the only half-way respectable list (not talking about complete, that's impossible) is my own – which was hard work to set up! So thanks for the nice feedback, really appreciate it!
    – Izzy
    Sep 25, 2015 at 20:39

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .