Android App Permissions Explained: What to Allow and What to Refuse

Permissions are the only real boundary between an app and your life. Android has tightened them considerably — scoped storage, one-time grants, approximate location — but the final decision is still a dialog you dismiss in half a second. Knowing what each one covers takes ten minutes and pays off permanently.

What each permission actually grants

• Camera — live capture only. A QR scanner or OCR tool needs it. It does not by itself grant access to your existing photos.
• Photos and media — access to images you select, or on older Android versions to your whole gallery. Prefer apps that use the system picker so they only ever see the file you chose.
• Location (precise vs approximate) — precise is street-level. A location bookmarking tool needs it while in use; almost nothing needs it always in the background.
• Microphone — recording. Legitimate for voice input or translation dictation, suspicious in a converter.
• Contacts — the entire address book, including other people's data you never consented on their behalf. Very few utilities need this.
• Notifications — the ability to interrupt you. Grant, then tune per-app if it is abused.
• All files access — the broadest storage permission there is. Treat it as a red flag unless the app is genuinely a file manager.

What a legitimate utility app asks for

A well-built toolbox should ask for very little, and only at the moment a tool needs it:

• Camera — when you open the QR scanner or OCR camera
• Photo access via the system picker — when you choose an image to compress or convert
• Location while in use — only inside a location-saving tool
• Nothing at all for unit conversion, text utilities, hashing, colour picking or the world clock

Utility Toolbox follows that model: permissions are requested in context, the heavy tools work on-device, and no account or sign-in is required.

Red flags worth an uninstall

• Permissions requested at first launch, all at once, before you have used anything
• Requests unrelated to any visible feature — contacts in a flashlight, call logs in a converter
• Background location with no map or tracking feature
• Accessibility service access requested by a simple tool; it can read and control your entire screen
• A privacy policy that is missing, unreachable, or copy-pasted with another company's name in it

Audit what you already granted

1. Open Settings → Privacy → Permission manager.
2. Go category by category — start with Location, Camera, Microphone and Files.
3. Revoke anything you cannot immediately justify; apps re-ask if they truly need it.
4. Switch "Allow all the time" to "Allow only while using the app" wherever it is offered.
5. Turn on automatic permission removal for unused apps.
6. Uninstall anything you have not opened in three months — the safest permission is one no app holds.

The practical upside of consolidating tools is fewer permission relationships to manage. One reviewed app with camera and photo-picker access is a smaller surface than eight apps you granted things to over two years and never revisited.