s6JpBpXB

1ACCESS_ALL_DOWNLOADS
2access all system downloads	Network	Allows an app to access all downloads in the system via the /all_downloads/ URIs. The protection level could be relaxed in the future to support third-party download managers.
3
4ACCESS_ALL_EXTERNAL_STORAGE
5access external storage of all users Development Tools Allows the app to access external storage for all users.
6
7ACCESS_CHECKIN_PROPERTIES
8Access check-in properties Location Allows read/write access to the "properties" table in the (Unix security) checkin database, to change values that get uploaded.
9
10ACCESS_COARSE_LOCATION
11Approximate location (network-based) Location Allows an app to access approximate location derived from network location sources such as cell towers and Wi-Fi.
12This permission is usually used by applications that display location based ads by publishers like Admob (Google).
13
14ACCESS_DOWNLOAD_MANAGER	
15Access download manager.Network	Allows the app to access the download manager and to use it to download files. Malicious apps can use this to disrupt downloads and access private information.
16Only accessible by system apps
17
18ACCESS_DOWNLOAD_MANAGER_ADVANCED
19Advanced download manager functions.Network	Allows the app to access the download manager's advanced functions. Malicious apps can use this to disrupt downloads and access private information.
20
21ACCESS_DRM
22Access DRM content Allows application to access DRM-protected content.
23
24ACCESS_FINE_LOCATION
25Precise location (GPS and network-based) Location Allows an app to access precise location from location sources such as GPS, cell towers, and Wi-Fi.
26This permission can be used by applications that display location based ads by publishers like Admob (Google). It is also used by applications that want your exact location. Examples would be Navigation applications, "Check-In" apps like 4square.
27
28ACCESS_LOCATION_EXTRA_COMMANDS
29Access extra location provider commands	Location good example for poor documentation, as even books on Android application development state: The Android documentation doesn’t tell us which location commands are “extra,” so we’ll ask for all of them.
30The documentation of Locus Map gives a hint, though: allows disabling the A-GPS data status and forcing system to load new.
31
32ACCESS_MOCK_LOCATION
33mock location sources for testing	Location Allows an application to create mock location providers for testing, and is intended for development use in e.g. the Android Emulator (to save the dev from having to run around to check if positions are displayed correctly). Cases where this is needed in an app ready for endusers should be rare.
34Requires "Allow mock locations" to be enabled in developer options
35
36ACCESS_NETWORK_STATE
37View network connections Network Allows applications to access information about networks, including if a network is available (or just connecting), what type of network the device is connected to, if any (WiFi, 3G, LTE), if it's in Roaming, and also reasons for a failed connection attempt (if any).
38Good use: The application may check the state of your connection before trying to access the internet, and e.g. restrict itself to WiFi for some actions.
39Bad use: Only in combination with other permissions (e.g. data collection for profiling).
40
41ACCESS_NOTIFICATION_POLICY
42Marker permission for applications that wish to access notification policy.Enables an app to toggle your notification policy, e.g. Do Not Disturb. Runtime Permission; i.e. user must at least confirm this once.
43
44ACCESS_NOTIFICATIONS
45Access notifications System Tools Allows the app to retrieve, examine, and clear notifications, including those posted by other apps.
46This permission is reserved for system apps. It was introduced with Android 4.3 as part of the new Notification Service.
47
48ACCESS_SUPERUSER
49Use root privileges	System Tools An app with this permission obviously wants to use "root powers". This permission requested or not, no app automatically gets granted those "root powers"; but some "SuperUser apps" can be configured to ignore requests by all apps not having it. For all (other) apps, the user has to acknowledge their legitimity at least on the first request. Thus an app with this permission does not automatically have root permission – but only obtains them when the user explicitely approves that to the "SuperUser app".
50Warning: an app with root-powers can do pretty much anything to your system. So better be sure you trust its developer (and your installation source) that far.
51
52ACCESS_SURFACE_FLINGER
53Access SurfaceFlinger System Tools Allows an application to use SurfaceFlinger's low level features.
54SurfaceFlinger is part of Android's media framework. It provides a compositor which takes care for rendering in frame buffers (so this has to do with graphics).
55
56ACCESS_WEATHERCLOCK_PROVIDER
57Access Huawei WeatherClock data	This permission allows accessing data of the Huawei Content Provider for WeatherClock. For details, please see Android.SE.
58
59ACCESS_WIFI_STATE
60View Wi-Fi connections Network This could be requested by any application that uses internet access. The application may check the state of your connection before trying to access the internet.
61It's comparable to ACCESS_NETWORK_STATE, just for WiFi.
62
63ACCESS_WIMAX_STATE
64View WIMAX connections Network Allows the app to determine whether WiMAX is enabled and information about any WiMAX networks that are connected.
65ACCOUNT_MANAGER	Act as the AccountManagerService	Accounts Allows applications to call into AccountAuthenticators. Only the system can get this permission.
66An account-manager is the service working behind the scenes and taking care everything works as expected.
67This permission is reserved for system apps.
68For details, take a look at the Stack Exchange article What does permission “MANAGE_ACCOUNTS” mean?
69
70ACTIVITY_RECOGNITION
71Activity recognition Personal Information Allows an app to receive periodic updates of your activity level from Google,for example, if you are walking, driving, cycling, or stationary. This is part of Google Play Services ActivityRecognitionClient.
72According to the API reference, the app doesn't receive any coordinates this way, but rather the type of the detected activity – e.g. WALKING, RUNNING, or STILL.
73
74ADD_VOICEMAIL
75Add Voicemail Voice Mailbox	Allows the app to add messages to your voicemail inbox.
76
77adm.permission.RECEIVE
78Receive Amazon Device Messaging notifications Network Allows apps to accept cloud to device messages sent by the app's service (Amazon Device Messaging – like GoogleCloudMessaging). Using this service will incur data usage.
79ANT	Connect to ANT sensors
80Network	Allow to connect to ANT and ANT+ sensors. For what ANT is about, see Wikipedia and the ANT Android page.
81
82ANT_ADMIN
83Manage ANT connections	Network	Allow to manage connections to ANT and ANT+ sensors. For what ANT is about, see Wikipedia and the ANT Android page.
84
85AUTHENTICATE_ACCOUNTS
86Create accounts and set passwords Accounts Allows an application to act as an AccountAuthenticator for the AccountManager. This is for applications that would authenticate you to their service.
87An app using this permission usually provides an interface to deal with a certain account type (which is not known by the pre-installed Android system), such as Dropbox. As shipped, Android does not know how to login to Dropbox and how to deal with a Dropbox account – so the Dropbox app provides the mechanism. Additionally, an "account authenticator" might restrict the actions an app can perform with the account (so it would e.g. be possible to administrate this via some web interface offered by the service). More details can be found e.g. in this Stack Exchange post.
88
89BACKUP	Control system backup and restore
90Permits an app to manage backups of another app. This e.g. includes to tell the BackupManager that: data of that app have changed (dataChanged()), all backups of that app should be deleted (clearBackupData()), or backups for that app should be (de)activated.
91
92BACKUP_DATA
93Participate in the system backup and restore Allows the application to participate in the system's backup and restore mechanism.
94Packages that do not use android.
95permission.BACKUP_DATA
96will neither be backed up nor restored. This seems to be an old (and possibly deprecated?) permission, as a commit message of August 2009 describes: In the future if access to the backup/restore infrastructure is made available to arbitrary 3rd party applications, the permission checks (and indeed, the permission itself) can simply be removed, and another one of February 2010 confirms: Any package can now participate in backup/restore, without requiring any manifest-declared permission.
97
98badge.permission.READ
99Read notification badges com.sec.android.provider.badge.* refer to the so called "Badge Provider", which is responsible for drawing numbers on your homescreen/lockscreen icons for e.g. missed calls or pending messages. Not clear to me is why an app must read these numbers; couldn't it simply tell the service to add/remove a given number to/from icon X?
100For some details, please take a look at this Stack Exchange article.
101Might be a permission specific to Samsung Touchwiz (with "sec" referring to the "seclauncher"); not sure whether other devices are affected by it.
102badge.permission.WRITE	Write notification badges		no	0	0	Enables an app to paint numbers on icons, using the "Badge Service" described with badge.permission.READ.
103
104BATTERY_STATS
105Read battery statistics	System Tools Allows an application to collect battery statistics. Battery widgets and other battery information tools use this permission.
106
107BIND_ACCESSIBILITY_SERVICE
108Bind to an Accessibility Service Accessibility Allows the holder to bind to the top-level interface of an accessibility service. Must be required by an AccessibilityService, to ensure that only the system can bind to it.
109
110BIND_APPWIDGET
111Choose Widgets Personal Information	Allows an application to tell the AppWidget service which application can access AppWidget's data. The normal user flow is that a user picks an AppWidget to go into a particular host, thereby giving that host application access to the private data from the AppWidget app. An application that has this permission should honor that contract. Very few applications should need to use this permission.
112
113BIND_DEVICE_ADMIN
114Interact with device admin System Tools Allows the holder to send intents to a device administrator. Must be required by device administration receiver, to ensure that only the system can interact with it.
115
116BIND_INPUT_METHOD
117Bind to an Input Method	System Tools Allows the holder to bind to the top-level interface of an input method. Must be required by an InputMethodService, to ensure that only the system can bind to it.
118BIND_JOB_SERVICE
119run the application's scheduled background work	System Tools This permission gives access to the JobService and allows the Android system to run the application in the background when requested.
120
121BIND_NFC_SERVICE
122Bind NFC Service System Tools Must be required by a   hostApduService or OffHostApduService to ensure that only the system can bind to it.
123
124BIND_NOTIFICATION_LISTENER_SERVICE	Bind Notification Listener Service System Tools Must be required by an NotificationListenerService, to ensure that only the system can bind to it.
125
126BIND_PRINT_SERVICE
127Bind Print Service System Tools Must be required by a PrintService, to ensure that only the system can bind to it.
128
129BIND_REMOTEVIEWS
130Bind to a widget service System Tools Allows the holder to bind to the top-level interface of a widget service. Must be required by a RemoteViewsService, to ensure that only the system can bind to it.
131
132BIND_TEXT_SERVICE Bind to a Text Service System Tools Allows the holder to bind to the top-level interface of a text service (e.g. SpellCheckerService). Must be required by a TextService to ensure that only the system can bind to it.
133
134BIND_VPN_SERVICE
135Bind to a VPN service	System Tools Allows the holder to bind to the top-level interface of a Vpn service. Must be required by a VpnService, to ensure that only the system can bind to it.
136
137BIND_WALLPAPER
138Bind to wallpaper System Tools Allows the holder to bind to the top-level interface of wallpaper. Must be required by a WallpaperService, to ensure that only the system can bind to it.
139
140BLUETOOTH
141Pair with Bluetooth devices	Bluetooth Allows applications to connect to paired bluetooth devices.
142Typical applications that would need bluetooth access include: sharing applications, file transfer apps, apps that connect to headset or wireless speakers.
143
144BLUETOOTH_ADMIN
145Access Bluetooth settings Bluetooth Allows applications to discover and pair bluetooth devices.
146
147BLUETOOTH_PRIVILEGED
148Bluetooth Privileged Bluetooth	Allows applications to pair bluetooth devices without user interaction. This is not available to third party applications.
149
150BODY_SENSORS
151body sensors (like heart rate monitors)	Personal Information	Allows the app to access data from sensors you use to measure what's happening inside your body, such as heart rate.
152
153BRICK (HAHAHA WOW MAY LIBRENG 500 TB TO)
154Permanently disable phone	System Tools	si	0	5	Required to be able to disable the device (very dangerous!). Not available to 3rd party apps – and seemingly even not used anywhere, see Why do some apps request too many permissions?.
155
156BROADCAST_DATA_MESSAGE
157Broadcast data messages to apps	Network	Can broadcast data messages received from the Internet to apps registered to listen for them. Reserved to system apps.
158
159BROADCAST_PACKAGE_ADDED
160Send Package Added Broadcast System Tools Allows an application to broadcast a notification that an application package has been added.
161
162BROADCAST_PACKAGE_REMOVED
163Send package removed broadcast	System Tools Allows an application to broadcast a notification that an application package has been removed.
164
165BROADCAST_SMS	
166Send SMS-received broadcast	Messages Allows an application to broadcast an SMS receipt notification.
167
168BROADCAST_STICKY
169Send Sticky Broadcasts	System Tools Allows an application to broadcast sticky intents. These are broadcasts whose data is held by the system after being finished, so that clients can quickly retrieve that data without having to wait for the next broadcast.
170The permission has to do with how applications "talk" to each other using a communication method called Intents. While this permission is highly technical it is a relatively low importance. There are no know obvious malicious uses for this permission.
171
172BROADCAST_WAP_PUSH
173Send WAP-PUSH-received broadcast Messages Allows an application to broadcast a WAP PUSH receipt notification.
174Not for use by third-party applications.
175
176c2dm.permission.RECEIVE
177Receive data from Internet network Allows apps to accept cloud to device messages sent by the app's service (GoogleCloudMessaging). Using this service will incur data usage. Malicious apps could cause excess data usage.
178
179c2dm.permission.SEND
180Send data to Internet network	Allows apps to send cloud to device messages (GoogleCloudMessaging). Using this service will incur data usage.
181
182CALL_PHONE
183Directly call phone numbers	Phone Calls	Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call being placed.
184This permission is of high importance. This could let an application call a 1-900 number and charge you money. However, this is not as common a way to cheat people in today's world as it used to be. Legitimate applications that use this include: Google Voice and Google Maps.
185Another important point to note here is that any app can launch the phone screen and pre-fill a number for you. However, in order to make the call, you would need to press "Send" or "Call" yourself. The difference with this permission is that an app could make the entire process automatic and hidden.
186
187CALL_PRIVILEGED
188Directly call any phone numbers	Phone Calls	Allows an application to call any phone number, including emergency numbers, without going through the Dialer user interface for the user to confirm the call being placed. For technical details, see CALL_PHONE.
189
190CAMERA
191Take pictures and videos Camera Required to be able to access the camera device.
192
193CAPTURE_AUDIO_OUTPUT
194Capture audio output Allows an application to capture audio output. Not for use by third-party applications.
195Requested e.g. by Google Play Services.
196
197CAPTURE_SECURE_VIDEO_OUTPUT
198Capture Secure Video Output	Allows an application to capture secure video output. Not for use by third-party applications.
199Requested e.g. by Google Play Services.
200
201CAPTURE_VIDEO_OUTPUt
202Capture Video Output Allows an application to capture video output. Not for use by third-party applications.
203Requested e.g. by Google Play Services
204
205CHANGE_BACKGROUND_DATA_SETTING
206Change background data usage setting Network	Allows the app to change the background data usage setting.
207
208CHANGE_COMPONENT_ENABLED_STATE
209Enable or disable app components System Tools Allows an app to change whether an application component (other than its own) is enabled or not.
210Malicious apps may use this to disable important device capabilities. Care must be used with this permission, as it is possible to get app components into an unusable, inconsistent, or unstable state
211
212CHANGE_CONFIGURATION
213Change system display settings	Development Tools Allows an application to modify the current configuration, such as locale.
214
215CHANGE_NETWORK_STATE
216Change network connectivity	Network	Allows applications to change network connectivity state.
217Good Cop: Enable network connection only when needed, according to the requirements of the user.
218Bad Cop: Cause extra costs (especially when in roaming) just for mischievous glee; secretly transfer data (in conjunction with INTERNET)
219
220CHANGE_WIFI_MULTICAST_STATE
221Allow Wi-Fi Multicast reception	Effects on Battery Life	Allows applications to enter Wi-Fi Multicast mode. This allows to send data packages to multiple recipients simultaneously, without using additional bandwidth. Useful e.g. for streaming servers supporting multiple clients. It also enables to receive network packages not intended for the own device (sniffing).
222Uses more power than non-multicast-mode.
223
224CHANGE_WIFI_STATE
225Connect and disconnect from Wi-Fi network Allows applications to change Wi-Fi connectivity state. Think of it as CHANGE_NETWORK_STATE for WiFi.
226
227CHANGE_WIMAX_STATE
228Change WiMAX state	Network	Allows the app to connect the device to and disconnect the device from WiMAX networks.
229CHANGE_NETWORK_STATE for WIMAX. Also can apply changes to configured WIMAX networks.
230
231CLEAR_APP_CACHE
232Delete all app cache data System Tools Allows an application to clear the caches of all installed applications on the device.
233
234CLEAR_APP_USER_DATA
235Delete other apps data	System Tools Allows an application to clear user data.
236
237COLLECT_METRICS
238Collect customer metrics Permits an app to collect customer metrics for Amazon, on how an app is used. This permission is bound to the Amazon Metrics Service Application (com.amazon.client.metrics) and thus only granted with that app installed.
239
240CONFIGURE_SIP
241Full access to SIP Accounts/Calls/Messages	Phone Calls	Configure SIP accounts and settings, access to SIP contents (call logs, messages...), extends and hook SIP flow.
242A malicious app with this permission can cause additional costs by e.g. configuring a costly SIP service.
243
244CONNECTIVITY_INTERNAL
245Use privileged ConnectivityManager API	Network	Allows an internal user to use priviledged ConnectivityManager APIs.
246
247CONTROL_LOCATION_UPDATES
248Control Location Updates Location Allows enabling/disabling location update notifications from the radio. Not for use by normal applications.dashclock.permission.
249
250READ_EXTENSION_DATA
251request DashClock extension data Allows requesting DashClock extension data.
252
253DELETE_CACHE_FILES
254Delete other apps cache System Tools Allows an application to delete cache files. Not for use by third-party applications.
255
256DELETE_PACKAGES
257Delete apps	System Tools Allows an application to delete packages. Not for use by third-party applications.
258
259DEVICE_POWER
260Device Power Management	System Tools Allows low-level access to power management. Not for use by third-party applications.
261
262DIAGNOSTIC
263Read/write to resources owned by diag	System Tools	Allows the app to read and write to any resource owned by the diag group; for example, files in /dev.
264This could potentially affect system stability and security. This should be ONLY be used for hardware-specific diagnostics by the manufacturer or operator. It's not intended for use by third-party applications.
265
266DISABLE_KEYGUARD
267Disable your screen lock Screenlock Allows applications to disable the keyguard.
268This permission is of medium-high importance. It allows an app to disable the "lock screen" that most phones go into after going to sleep and been turned on again. This lockscreen can sometimes be a password screen, or a PIN screen, or just a "slide to unlock" screen.
269
270DOWNLOAD_WITHOUT_NOTIFICATION
271Download files without notification	Network	no	0		Allows to queue downloads without a notification shown while the download runs.
272Good Cop: A PodCast player could use this to preload content without "spamming" the notification area.
273Bad Cop: Download malware modules in background without the user´s notice.
274
275DUMP
276Retrieve system internal state	Development Tools Allows an application to retrieve state dump information from system services. Not for use by third-party applications.
277The information accessible with this permission is most likely comparable of that retrieved by the dumpsys command-line tool. Evil apps could theoretically use this to access private and protected data.
278
279email.ACCESS_PROVIDER
280Access email provider data	Messages Allows this application to access your email database, including received messages, sent messages, usernames and passwords. Not available to third-party apps.
281
282EXPAND_STATUS_BAR Expand/collapse status bar Status bar	Allows an application to expand or collapse the status bar.
283This appears to be a system permission – not for use by regular applications.
284
285FACTORY_TEST
286Factory Test System Tools Run as a manufacturer test application, running as the root user. Only available when the device is running in manufacturer test mode.
287
288FLASHLIGHT
289Control flashlightEffects on Battery Life Allows access to the flashlight.
290
291FORCE_BACK
292Force app to close	System Tools Allows the app to force any activity that is in the foreground to close and go back.
293
294FORCE_STOP_PACKAGE
295force stop other apps System Tools Allows the app to forcibly stop other apps. Should be reserved for system apps. Malicious apps could use this to disable security apps.
296
297FREEZE_SCREEN
298freeze screen System Tools Allows the application to temporarily freeze the screen for a full-screen transition. This permission is provided by the Android OS itself, and is not available to third-party-apps.
299
300GALLERY_PROVIDed 
301wala akong mahanap na info kaya sa tingin ko ito ay permission is required to access multimedia data via the gallery content provider.
302
303GET_ACCOUNTS
304Find accounts on the device	Accounts Allows access to the list of accounts in the Accounts Service
305
306GET_APP_OPS_STATS
307Retrieve app ops statistics	System Tools Allows the app to retrieve collected application operation statistics. Not for use by normal apps.
308
309GET_PACKAGE_SIZe
310Measure app storage space	System Tools Allows an application to find out the space used by any package.
311This permission does not seem to have any risk associated with it.
312
313GET_TASK
314Retrieve running apps	App Information	Allows an application to get information about the currently or recently running tasks: a thumbnail representation of the tasks, what activities are running in it, etc.
315
316GET_TOP_ACTIVITY_INFO
317Get Top Activity Info App Information Allows an application to retrieve private information about the current top activity, such as any assist context it can provide. Not for use by third-party applications.
318
319GLOBAL_SEARCH Global Search	System Tool This permission can be used on content providers to allow the global search system to access their data. Typically it used when the provider has some permissions protecting it (which global search would not be expected to hold), and added as a read-only permission to the path in the provider where global search queries are performed. This permission can not be held by regular applications; it is used by applications to protect themselves from everyone else besides global search.
320
321GLOBAL_SEARCH_CONTROL
322Global search control	System Tools Allows the application to control the global search. Not available to third party apps.
323
324GOOGLE_AUTH	View
325configured accounts	Accounts Allows apps to see the usernames (email addresses) of the Google account(s) you have configured.
326Good Cop: List accounts for the user to chose from when using a Google service
327Bad Cop: Sniff and snoop, find "valid mail adresses" to abuse for other purposes (e.g. spamming)
328
329GOOGLE_AUTH
330Google mail	Accounts Allows apps to sign in to Google mail services using the account(s) stored on this Android device.
331Good Cop: Automatic sign-in to use Google Services in the interest of the user
332Bad Cop: Secretly sign-in without the user´s notice to e.g. send spam or spying on personal data
333
334GOOGLE_AUTH.wise
335Google Spreadsheets	Accounts Allows apps to sign in to Google Spreadsheets using the account(s) stored on this Android device.
336Good Cop: Automatic sign-in to use Google Services in the interest of the user
337Bad Cop: Secretly sign-in without the user´s notice to e.g. spy on personal data
338
339GOOGLE_AUTH
340writely	Google Docs	Accounts Allows apps to sign in to Google Docs using the account(s) stored on this Android device.
341Good Cop: Automatic sign-in to use Google Services in the interest of the user
342Bad Cop: Secretly sign-in without the user´s notice to e.g. spy on personal data
343
344GOOGLE_PHOTOS
345handle photos backed up to G+ This permission is required to access photos backed up to G+
346
347google.MAPS_RECEIVe
348receive map material from Google Maps	Network	If an app wants to integrate maps from Google Maps, it needs this permission (along with READ_GSERVICES, INTERNET and WRITE_EXTERNAL_STORAGE).
349
350GTALK_SERVICE
351Google Talk Service	Messages I couldn´t find any documentation on this permission, which is connected to Google Talk resp. Google Hangouts.
352The protection level assigned seems to differ between devices.
353
354HARDWARE_TEST
355Test Hardware	Hardware Controls Allows access to hardware peripherals. Intended only for hardware testing.
356
357im.permission.READ_ONLY
358read instant messages Messages This is a permission realated to reading instant messages, such as those on GoogleTalk.
359
360INJECT_EVENTS
361Press keys and control buttons	System Tools Allows an application to inject user events (keys, touch, trackball) into the event stream and deliver them to ANY window. 
362
363INSTALL_DRM
364Install DRM content	System Tools Allows app to install DRM-protected content.
365DRM stands for Digital Rights Management, sometimes also called "Digital Restriction Management". It is used to control (and restrict) access to media – e.g. by Google Books, Google Movies, or Amazon‘s Kindle.
366
367INSTALL_LOCATION_PROVIDER
368Install Location Provider Location Create mock location sources for testing or install a new location provider into the Location Manager. This allows the app to override the location and/or status returned by other location sources such as GPS or location providers. Reserved to system apps.
369
370INSTALL_PACKAGES
371Directly install apps	System Tools Allows the app to install new or updated Android packages. Malicious apps may use this to add new apps with arbitrarily powerful permissions. Not for use by third-party applications.
372
373INSTALL_SHORTCUT
374Install Shortcuts Allows an application to install a shortcut in Launcher (Homescreen).
375
376INTERACT_ACROSS_USERS
377Interact Across Users Allows an application to call APIs that allow it to do interactions across the users on the device, using singleton services and user-targeted broadcasts. This permission is not available to third party applications.
378
379INTERACT_ACROSS_USERS_FULL
380Full license to interact across users	System Tools	Fuller form of INTERACT_ACROSS_USERS that removes restrictions on where broadcasts can be sent and allows other types of interactions.
381
382INTERNAL_SYSTEM_WINDOW
383Internal System Window	System Tools Allows an application to open windows that are for use by parts of the system user interface. Not for use by third party apps.
384
385INTERNET
386Full network access	Network	Allows applications to open network sockets. Any application that accesses the internet for any reason will have to request this permission.
387This is of course required to loads ads (which is why most apps request this), but can also be used to spy on personal data. Special caution is advised when this permission is requested at the same time as others which access personal data.
388
389k9.permission.DELETE_MESSAGES
390Delete messages from K-9 Mail Messages Enables an app to delete mails stored in K-9 Mail
391
392k9.permission.READ_ATTACHMENT
393Read K-9 Mail attachments messages This is a custom permission for the K-9 Mail app.
394
395k9.permission.READ_MESSAGES
396Read mails stored in K-9 Mail Messages Enables an app to read mails stored with the K-9 Mail app. Be aware mails can contain sensible personal information!
397
398KILL_BACKGROUND_PROCESSES
399Close other apps System Tools Allows an application to call killBackgroundProcesses(String).
400
401launcher.permission.UPDATE_COUNt
402Updating Notification Counts Access the notification API of Apex Launch This permission just enables an app to provide counter information to the launcher. Usually this is done by mail apps. No risks known so far.
403
404launcher.WRITE_SETTINGS
405write Home settings and shortcuts System Tools The permissions allow an application to modify configuration settings of Android’s Launcher, including that of icons.
406Malicious apps could use this to place (misleading) icons on your homescreen – e.g. one looking like the Playstore – to lure you into actions you otherwise wouldn´t perform.
407
408LOCATION_HARDWARE
409Access Location hardware Allows an application to use location features in hardware, such as the geofencing api. Not for use by third-party applications.
410
411MANAGE_ACCOUNTS
412Add or remove accounts	Accounts Allows an application to manage the list of accounts in the AccountManager.
413
414MANAGE_APP_TOKENs
415Manage App Tokens Accounts Allows an application to manage (create, destroy, Z-order) application tokens in the window manager. This is only for use by the system.
416
417MANAGE_DEVICE_ADMINS
418add or remove a device admin System Tools Allows the holder to add or remove active device administrators. Should never be needed for normal apps.
419
420MANAGE_DOCUMENTS
421Manage Documents Storage	Allows an application to manage access to documents, usually as part of a document picker.
422
423MANAGE_MTP
424Manage MTP Hardware Controls Allows an application to access the MTP USB kernel driver. For use only by the device side MTP implementation.
425
426MANAGE_USB
427Manage preferences and permissions for USB devices	Hardware Controls Allows an application to manage preferences and permissions for USB devices. Restricted to system apps.
428
429MANAGE_USERS
430manage users System Tools Allows apps to manage users on the device, including query, creation and deletion. This permission is not available to third party applications.
431
432MASTER_CLEAR
433Master Clear Allows an app to perform a "master clear" (i.e. factory reset) of the device. Restricted to system apps. Restricted to system apps.
434
435MEDIA_CONTENT_CONTROL
436control media playback and metadata access Allows an application to know what content is playing and control its playback. Not for use by third-party applications due to privacy of media consumption.
437
438MMS_SEND_OUTBOX_MSG MMS Wakeup
439Messages Sends out all MMSs from the outbox to the network. Restricted to system apps and those signed with the same key as the ROM.
440
441MODIFY_AUDIO_SETTINGS
442Change your audio settings	Hardware Controls Allows an application to modify global audio settings.
443
444MODIFY_PHONE_STATE
445Modify Phone State	Phone Calls Modify the status of phone functionality: power, MMI codes (call forwarding, Caller ID) – not to initiate calls. But the network could be switched (to a different carrier, roaming) or the radio (de)activated, without informing the user. The permission can also be used to intercept incoming calls.
446
447MOUNT_FORMAT_FILESYSTEMS
448Erase USB storage System Tools Allows formatting file systems for removable storage.
449The primary danger with this permission is that it could be used to erase data from an SD card or other similar storage in your phone. This is also not a permission any normal app should need.
450
451MOUNT_UNMOUNT_FILESYSTEMS
452Access USB storage filesystem System Tools Allows mounting and unmounting file systems for removable storage.
453This permission just allows for connecting to SD cards for reading and writing. While not a risk itself, this is also not a permission any normal app should need.
454
455MOVE_PACKAGE
456Move app resources	System Tools Allows an application to move application resources from internal to external media and vice versa.
457
458PACKAGE_USAGE_STATS
459Update component usage statistics	System Tools Allows the modification of collected component usage statistics. Not for use by normal applications.
460Most likely refers to app statistics, e.g. how often an app was started.
461
462PERFORM_CDMA_PROVISIONING
463Start CDMA phone settings	Allow applications to launch CDMA services (a telephony functionality). Reserved to system apps.
464
465PERSISTENT_ACTIVITY
466Make app always run	App Information	Allow an application to make its activities persistent.
467
468PREVENT_POWER_KEY
469Change behaviour of the power key	Hardware Controls	Allows an application to override the default behaviour for the power key.
470
471PROCESS_OUTGOING_CALLS
472Reroute outgoing calls	Phone Calls	Allows an application to monitor, modify, or abort outgoing calls.
473
474RAISED_THREAD_PRIORITY
475Raised thread priority System Tools Allows the application procedures to obtain the priority of the an elevated the thread. This might be required for e.g. real-time audio/video playback. Malicious apps could however use this to slow down the system.
476
477READ_ATTACHMENT
478Read email attachments	Personal Information This is a custom permission for the default Android email app (i.e. not Gmail). This permission should be treated with great caution. Many email attachments contain highly sensitive and personal or financial information.
479
480READ_CALENDAR
481Read calendar events plus confidential information	Personal Information Allows an application to read the user's calendar data.
482
483READ_CALL_LOg
484Read Call Logs	Personal Information Allows an application to read the user's call log.
485
486READ_CLIPBOARD
487Read clipboard contents	System Tools An app with this permission can read clipboard contents – that is, everything you copy into the clipboard (including passwords, if you copy them). Some more detailed background and preventive measures can be found in the following XDA article: How to Stop Apps from Reading the Android Clipboard to Protect your Privacy (dated 8/2017).
488READ_CONTACTS
489Read your contacts	Personal InformationAllows an application to read the user's contacts data.
490
491READ_CONTENT_PROVIDER
492Access mail information	Messages	This is primarily for access to information on Mails in Gmail. Developers can use this content provider to display label information to the user.
493
494READ_EXTERNAL_STORAGE
495Read the contents of your usb storage	Storage	Allows an application to read from external storage. This permission was granted to all apps by default up to Android 4.3. This changed with Android 4.4 (API level 19), which now requires that applications explicitly request read access using this permission.
496
497READ_FRAME_BUFFER
498Read Frame Buffer	System Tools	Allows an application to take screen shots and more generally get access to the frame buffer data.
499
500READ_GMAIL
501Read Gmail	Messages Protection level switched from "dangerous" to "signature" about the time Gingerbread was released (with Gmail 2.3.5), see Android Census – so it's not available to third-party apps (anymore)
502
503READ_GMAIL_PROVIDER
504Read Gmail	Messages Also see: READ_GMAIL. Checking the full permission name,
505
506READ_GSERVICES
507Read Google service configuration	Accounts		Allows an app to read the Google services map. Not for use by normal apps.
508
509READ_HISTORY_BOOKMARKS
510Read your Web bookmarks and history	Personal Information Allows an application to read (but not write) the user's browsing history and bookmarks.
511
512READ_INPUT_STATE
513Record what you type and actions that you take	System Tools Allows an application to retrieve the current state of keys and switches, including to watch the keys that you press even when interacting with another app (such as typing a password). This is only for use by the system.
514
515READ_LOGS
516Read sensitive log data	Development Tools Allows an application to read the low-level system log files.
517This allows the application to read what any other applications have logged, which might contain sensitive (and even personal) data.
518
519READ_MEDIA_STORAGE
520Read internal media storage contents	Storage.
521
522READ_OWNER_DATa
523Read owner data	Personal Information	Read access to owner data saved on the device
524
525READ_PHONE_STATE
526Read phone status and identity	Phone Calls		Allows read only access to phone state.
527
528READ_PROFILE
529Read your own contact card	Personal Information Allows an application to read the user's personal profile data.
530This is a new permission that relates to a special new "Me" contact you can create in your phone or tablet as your own profile.
531
532READ_SECURE_SETTINGS
533Read Secure Settings	Hardware Controls Allows an application to read the secure system settings.
534
535READ_SETTINGS
536Read Home settings and shortcuts System Tools Allows the app to read the settings and shortcuts in Home.
537Bad Cop: Android Icon Hijacking
538Good Cop: That would need the corresponding WRITE_SETTINGS permission
539
540READ_SMS
541Read your text messages (SMS or MMS)	Messages Allows an application to read SMS messages.
542
543READ_SOCIAL_STREAM
544Read your social stream	Social Information Allows an application to read from the user's social stream.
545This is a new permission introduced with Android 4.0 (Ice Cream Sandwhich).
546
547READ_SYNC_SETTINGS
548Read sync settings	Sync settings	Allows applications to read the sync settings.
549
550READ_SYNC_STATS
551Read sync statistics	Sync settings	Allows applications to read the sync stats for an account, including the history of sync events and how much data is synced.
552
553READ_USER_DICTIONARY	Read terms you added to the dictionary	User Dictionary	da	0	0	Allows an application to read the user dictionary. This should really only be required by an IME, or a dictionary editor like the Settings app.
554
555REAL_GET_TASKS
556Retrieve running tasks	App Information	Get running tasks/apps. Replaces GET_TASKS with API level 21+ (Lollipop)
557
558REBOOT
559Reboot	System Tools Required to be able to reboot the device. Not for use by third-party applications.
560
561RECEIVE_BOOT_COMPLETED
562Run at startup	App Information Allows an application
563
564RECEIVE_EMERGENCY_BROADCAST
565Receive Emergency Broadcast	Messages	Allows an application to receive emergency cell broadcast messages, to record or display them to the user. Reserved for system apps.
566
567RECEIVE_MMS
568Receive text messages (MMS)	Messages Allows an application to monitor incoming MMS messages, to record or perform processing on them.
569
570RECEIVE_SMS
571Receive text messages (SMS)	Messages Allows an application to monitor incoming SMS messages, to record or perform processing on them.
572
573RECEIVE_USER_PRESENT
574receive USER_PRESENT broadcast	I couldn't find any documentation on this permission – so I cannot even tell if it really exists.
575
576RECEIVE_WAP_PUSH
577Receive text messages (WAP)	Messages	Allows an application to monitor incoming WAP push messages.
578Sending and receiving MMS is based on WAP. The information that there‘s a MMS message available for download, is sent as WAP Push to the device.
579
580RECORD_AUDIO
581Record audio Microphone	Allows an application to record audio.
582
583REORDER_TASKS
584Reorder running apps System Tools Allows an application to change the Z-order of tasks. Malware could use this to push some ads o.a. into foreground to be displayed to the user
585
586REQUEST_INSTALL_PACKAGES
587Allows an application to request installing packages.	System Tools	Allows an application to request installing packages.
588
589RESTART_PACKAGES
590Restart other applications	System Tools Restart other apps.
591
592SEND_DOWNLOAD_COMPLETED_INTENTS
593Allows the app to send notifications about completed downloads.
594
595SEND_RESPOND_VIA_MESSAGE
596Send respond-via-message events	Messages	Allows an application (Phone) to send a request to other applications to handle the respond-via-message action during incoming calls. Not for use by third-party applications.
597This most likely refers to the possibility to reject incoming calls with an SMS
598
599SEND_SMS
600Send SMS messages	Messages Allows an application to send SMS messages.
601
602SEND_SMS_NO_CONFIRMATION
603Send SMS with no confirmation	Messages Allows an application to send SMS messages via the Messaging app with no user input or confirmation
604
605SET_ACTIVITY_WATCHER
606Monitor and control all app launching	System Tools	Allows an application to watch and control how activities are started globally in the system.
607
608SET_ALARM
609Set an alarm Device Alarms Allows an application to broadcast an Intent to set an alarm for the user.
610This permission seems to be of low risk because it doesnt allow the setting of the alarm directly. Rather it allows the opening of the alarm app on the phone.
611
612SET_ALWAYS_FINISH
613Force background apps to close	Development Tools	Allows an application to control whether activities are immediately finished when put in the background.
614
615SET_ANIMATION_SCALE
616Modify global animation speed	System Tools	Modify the global animation scaling factor (faster or slower animations). Not for use by third-party applications.
617
618SET_DEBUG_APP
619Enable app debugging	Development Tools	Configure an application for debugging. Not for use by third-party applications.
620Gives an app the opportunity to enable debugging for other apps.
621
622SET_ORIENTATION
623Change screen orientation	System Tools	Allows low-level access to setting the orientation (actually rotation) of the screen. Not for use by normal applications.
624
625SET_POINTER_SPEED
626Change pointer speed	System Tools	Allows the app to change the mouse or touch pad pointer speed at any time. Not for use by normal applications.
627
628SET_PREFERRED_APPLICATIONS
629Set preferred Apps	System Tools Assign default apps. No longer useful. Deprecated with API level 7, it no longer has any effect.
630SET_PROCESS_LIMIT	Limit number of running processes	Development Tools Allows an application to set the maximum number of (not needed) application processes that can be running. Not for use by third-party applications.
631
632SET_TIME
633Set Time	System clock Allows applications to set the system time. Not for use by third-party apps.
634
635SET_TIME_ZONE
636Set time zone	System clock Allows applications to set the system time zone. Should pose no risk (except you maybe late to work).
637
638SET_WALLPAPER
639Set Wallpaper	Wallpaper Allows applications to set the wallpaper
640
641SET_WALLPAPER_COMPONE
642Setting live wallpapers	System Tool
643
644SET_WALLPAPER_HINTs
645Adjust your wallpaper size	Wallpaper	Allows applications to set the wallpaper hints. Lacking documentation, the best guess is this is about settings for size and position.
646
647SHUTDOWN
648Partial shutdown	System Tools 	Allows an app to put the activity manager into the closed state; does not perform a complete shutdown. Reserved to system apps.
649
650SIGNAL_PERSISTENT_PROCESSES
651Send Linux signals to apps	Development Tools Allow an application to request that a signal be sent to all persistent processes. Not for use by third-party applications.
652
653STATUS_BAR
654Enable/Disable status bar	System Tools Allows an application to open, close, or disable the status bar and its icons. Not for use by third-party applications.
655
656STATUS_BAR_SERVICE
657Status bar	System Tools Allows an application to be the status bar. Reserved for system apps.
658According to StackOverflow: The STATUS_BAR_SERVICE permission is used for apps that what to be the actual status bar. This is a protected permission so unless you're building your own ROM that includes replacing the status bar then I don't think this is the permission you want.
659
660STOP_APP_SWITCHES
661Prevent app switches System Tools Prevent users from switching to another application. Reserved to system apps.
662
663SUBSCRIBED_FEEDS_READ
664Read subscribed feeds	System Tools Allows an application to allow access the subscribed feeds ContentProvider.
665This would give an app access to RSS feeds that you have subscribed to.
666
667SUBSCRIBED_FEEDS_WRITE
668Write subscribed feeds	System Tools his would give an app write access to RSS feed that you have subscribed to. See also SUBSCRIBED_FEEDS_READ.
669
670SYSTEM_ALERT_WINDOW
671Draw over other apps Display Allows an application to open windows using the type TYPE_SYSTEM_ALERT, shown on top of all other applications.
672This permission allows an app to show a "popup" window above all other apps, even if the app is not in the foreground.
673
674TRANSMIT_IR
675Use IR Transmitter effects on Battery Life	Allows using the device's IR transmitter, if available. Useful for infrared remote controls.
676
677UNINSTALL_SHORTCUT
678Uninstall shortcuts	Allows an application to uninstall a shortcut in Launcher (Homescreen). See INSTALL_SHORTCUT.
679
680UPDATE_APP_OPS_STATS
681modify app ops statistics System Tools Enables an app to change collected application operation statistics. Not for use by normal apps.
682
683UPDATE_DEVICE_STATS
684Update device statistics	System Tools Allows an application to update device statistics. Not for use by third party apps.
685
686USE_CREDENTIALS
687Use accounts on the device	Accounts	Allows an application to request authtokens from the AccountManager.
688This app may use the "credentials" to log into an account. In most cases, "credentials" just means the corresponding authenticator creates a fitting token and hands that over (though, how to deal with that is left to the authenticator).
689
690USE_FINGERPRINT
691Allows an app to use fingerprint hardware.	Hardware Controls Allows an app to use fingerprint hardware, but does not give the requesting app access to the enrollment/fingerprint administration flow.
692USE_SIP	Make/receive Internet calls	Phone Calls	da	0	2-3	Use SIP for internet telephony.
693
694USES_POLICY_FORCE_LOCK
695Immediately lock the screen	Screenlock Make the device lock immediately, as if the lock screen timeout has expired – but also limit the maximum lock timeout for the device. The "POLICY" part suggests a device manager.
696vending.
697
698BILLINg
699In-app billing	Cause costs	This permission is of very high importance. It allows an application to directly bill you for services through Google Play.
700
701CHECK_LICENSE
702Google Play License check	Network Needed to verify the validity of the app's license against Google services. Should only be found with payed apps, but poses no risk with others either.
703
704VIBRATE
705Control vibration Effects on Battery Life Allows access to the vibrator.
706As it states, this permission lets an app control the vibrate function on your phone. This includes for incoming calls and other events.
707
708WAKE_LOCK
709Prevent device from sleeping	Effects on Battery Life	Allows using PowerManager WakeLocks to keep processor from sleeping or screen from dimming.
710
711WRITE_APN_SETTINGS
712Change/intercept network settings and traffic	System Tools Allows an application to change network settings and to intercept and inspect all network traffic, for example to change the proxy and port of any APN.
713
714WRITE_CALENDAR
715Add or modify calendar events and send email to guests without owners	Personal Information Allows an application to write (but not read) the user's calendar data.
716
717WRITE_CALL_LOG
718Write call log	Personal Information	dAllows the app to modify your phone's call log, including data about incoming and outgoing calls.
719
720WRITE_CONTACTS
721Modify your contacts	Personal Information	Allows an application to write (but not read) the user's contacts data.
722
723WRITE_EXTERNAL_STORAGE
724Modify or delete the contents of your USB storage	Storage Allows an application to write to external storage.
725
726WRITE_GMAIL
727Modify Gmail Messages Permits an app to change your E-Mails in Google Mail. This includes sending and deleting.
728Assigned protection level differs between devices (dangerous/signature)
729WRITE_GSERVICES
730Write GServices	Accounts Allows an application to modify the Google service map. Not for use by third-party applications.
731
732WRITE_HISTORY_BOOKMARKS
733Write web bookmarks and history	Personal Information	Allows an application to write (but not read) the user's browsing history and bookmarks.
734
735WRITE_MEDIA_STORAGE
736Modify/delete internal media storage contents	Storage	Allows an application to modify the contents of the internal media storage.
737
738WRITE_OWNER_DATA
739Write Owner data	Personal Information	Write/change owner data. The API reference not only gives no closer information, but not even mentions the permission at all. A guess is it refers to the owner data one can place on the lock screen
740
741WRITE_PROFILE
742Modify your own contact card	Personal Information	This a new permission that relates to a special new "Me" contact you can create in your phone or tablet as your own profile. It's the counter-part to READ_PROFILE.
743
744WRITE_SECURE_SETTINGS
745Modify secure system settings	Development Tools Allows an application to read or write the secure system settings.
746This permission should only be seen on Android system apps (and possibly wireless carriers or hardware manufacturer pre-installed apps).
747
748WRITE_SETTINGS
749Modify system settings	System Tools	Allows an application to read or write the system settings.
750Global settings are pretty much anything you would find under Android's main 'settings' window. However, a lot of these settings may be perfectly reasonable for an application to change. Typical applications that use this include: volume control widgets, notification widgets, settings widgets, Wi-Fi utilities, or GPS utilities. Most apps needing this permission will fall under the "widget" or "utility" categories/types.
751
752WRITE_SMS
753Edit your text messages (SMS or MMS) Messages Allows an application to write SMS messages.
754This permission appears to be an offshoot from the "send SMS" permission. This should allow an app to write, but not send an SMS message. Users should still be cautious of this permission however. Many kinds of malware lure users into sending SMS to special for-pay numbers costing them money.
755WRITE_SOCIAL_STREAM	Write to your social stream	Social Information	da	0		Allows an application to write (but not read) the user's social stream data. Malware could use this to spread messages on behalf of the user.
756
757WRITE_SYNC_SETTINGS
758Toggle sync on and off	Sync settings	da Allows applications to write the sync settings.
759This permission relates to backup and sync of certain types of information like contacts. It allows an app to write settings for how that account and the data are sync and backed up. This is a common permission for social services or contact managers or any other type of app with an account associated with it. Alone, this permission doesn't allow an app access to contacts or other sensitive data. Rather, it just relates to how that data is backed up. Nevertheless, care should be taken as always.
760
761WRITE_USER_DICTIONARY
762Add words to user-defined dictionary User Dictionary	no Allows an application to write to the user dictionary.
763This alows an app to add custom words to your user dictionary, so auto-correction will consider it the next time you type it. See also READ_USER_DICTIONARY.