[scrapcode]

I understand the discussion of app permissions is not a new one, but today I decided I wanted to try and buy a product through Amazon outside of the browser... Amazon specifically instructs you to navigate to your settings and allow installation of 3rd part apps. Then it directs you to download their .apk - To this point I was almost to the point of excitement that a MAJOR company is showing the public that this is even possible.

Then I opened the .apk. It asked me for what has to be every permission available on Android. Why would Amazon need access to me Contacts? It even asked specifically for permission to my microphone! What?

[btilly]

If they have not asked for those permissions, then how can they give those permissions to third party apps that you install through them?

[dredmorbius]

That transitivity itself is an issue.

Why cannot the installed apps request the permissions they need individually?

[digi_owl]

Unless i am mistaken, Amazon can't give premissions to another app install. The user has to leave the "unknown source" option checked as each APK installed goes through the same rigamarole.

Play gets around this by being bundled as a system app initially. And if you have a rooted device you can potentially promote the amazon store to the same status, and so forgo the "unknown sources" switch.

[dredmorbius]

Thanks. I'm not familiar with the specifics.