[georgiecasey]

We don't need a security standard for apps from bluechip companies, we need better vetting of apps uploaded by nobodies to the app stores. And the Chrome plugin store while we're at it. I always thought Google should have a score system for Android developer accounts. You need to earn trust to have access to sensitive Android APIs.

[anaerobicover]

What's your desired process for earning trust?

[georgiecasey]

New Google accounts start off with little trust. New apps start off with little trust. Established apps should have good trust along with Playstore verified developers. Android is destroying a lot of great file manager apps with the new scoped storage. These are great apps that have been in the store for 5 years plus. Surely these can be trusted.

Of course, there'll be ways around this but it would stop a lot of dodgy apps. Of course, this is a lot harder as it sounds as you'd need all Android apps that want access to sensitive APIs to interact with the Playstore API. But it's better than Android just imposing systemwide security changes that break a load of apps.

[neolog]

What if you want to make an app that doesn't work without a trust feature?

Can you sell your trusted account?