Zero Permission App

How to verify an App is really Zero Permission and Safe?

Before you download an app from Play Store, you could select the "View details" under Permissions in the app store listing. If an app has no permission required you will see something like:

Picture of an app with no permission

If you want a further test, you could use the free web service Exodus Privacy. You just need the app package name that you could get from a browser as shown:

Highlighted portion is the app id

Enter the app id into the Exodus, and click "Perform analysis". After a short period of time, depending on the size of the app, a report will be generated for your viewing. An example is as shown:

Report on our Zero Permission App - Device Info

The above are some simple checks that you could do, free and freely, for any app in the Play Store.

Hope this is helpful to someone out there. cheerios

For Developers: Deadline for Updating Your Android App

Building a safer Google Play for kids

Google updated their Families policies and Designed for Families program requirements on May 29, 2019.

As stated in their website, all existing apps have until September 1, 2019 to fill in the new target audience and content section of the Google Play Console and comply with our new policies. New apps must be compliant upon publishing.

In your Play Console Dashboard, this setting can be found in YOUR_APP / Store Presence / App Content.

Remember to complete it before 1st September for existing apps.

Be Careful When Going to China Police Station

A Chinese surveillance tool (com.android.mfsocket)

This is serious shxt. 

If you are looking for the apk, there are many versions out there. Look for one with the cert:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2131437806 (0x7f0b28ee)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=cn, ST=fujian, L=xiamen, O=meiya, OU=meiyaphone, CN=meiyapico
        Validity
            Not Before: May 30 01:41:11 2018 GMT
            Not After : May 24 01:41:11 2043 GMT
        Subject: C=cn, ST=fujian, L=xiamen, O=meiya, OU=meiyaphone, CN=meiyapico
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4f:09:35:e3:09:71:2f:cd:a9:05:9d:45:88:
                    43:3b:cc:4a:ca:39:fe:d2:90:eb:26:c8:4e:18:c8:
                    42:be:0c:b6:59:5d:b7:95:14:76:55:1e:dd:95:8f:
                    b4:f0:d4:cb:af:dd:73:a3:9d:6f:e2:73:9a:73:9c:
                    7d:2d:f6:08:bc:2c:5d:0c:de:57:d6:2d:f0:47:56:
                    61:2e:a4:30:cd:c3:f6:86:6e:d0:5d:89:ae:4c:10:
                    fb:2d:e9:f5:23:9c:5c:ea:f6:77:91:6e:fc:35:fd:
                    a7:a0:15:25:42:7f:1f:0e:83:60:64:80:8a:cc:53:
                    fd:f9:85:28:89:fb:1c:4b:95:95:21:ec:44:77:4f:
                    d2:4c:a1:5c:ac:ac:af:72:cc:c2:94:96:16:f5:0e:
                    6b:38:e8:f6:e3:55:1f:67:38:99:04:6a:d6:58:a7:
                    d0:10:2e:87:2a:8e:b4:bd:e2:31:96:55:ee:c9:2b:
                    6b:77:c7:e4:7e:f0:c7:92:5c:2b:78:58:dd:24:2c:
                    1c:26:f9:6b:30:de:fd:f0:61:c2:94:41:ed:51:3c:
                    2b:31:47:40:37:e1:4a:7b:d9:cc:31:a5:d9:51:b7:
                    61:c4:4f:28:f5:8d:e0:db:5a:39:0e:69:eb:57:0a:
                    98:2b:8b:eb:87:18:cb:80:1b:8d:15:d8:f8:cf:85:
                    96:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D5:21:75:58:00:5F:B3:14:76:9D:29:A3:65:0B:75:6E:72:BF:08:12
    Signature Algorithm: sha256WithRSAEncryption
         69:13:3d:03:b8:09:03:3e:68:67:f8:7f:9b:2a:11:19:db:f3:
         a7:2f:3b:db:49:7d:aa:e9:dd:a2:ef:2d:9f:20:98:f0:4b:4a:
         23:da:ea:71:e5:06:6b:50:47:39:d1:df:ed:81:93:cb:b2:83:
         1a:4a:62:d8:d7:33:cb:d8:27:37:43:40:ec:23:64:e2:b0:49:
         fb:38:fd:95:10:5a:bf:4f:9c:c4:ca:bf:10:ff:eb:a5:11:d0:
         21:5a:4c:cf:bc:18:27:d2:21:8c:37:1a:98:62:58:1b:68:36:
         b2:11:44:44:d5:82:a9:d6:99:6d:30:81:01:5c:1a:76:c3:53:
         c3:85:5d:02:ea:c8:51:18:a2:b0:c4:b6:3b:90:7f:b4:f4:8f:
         22:41:6f:8e:f1:f2:1b:cc:ff:73:61:8d:95:ec:44:e8:5f:60:
         82:94:22:64:7e:f3:5a:7f:1a:73:ef:8c:98:cb:00:bb:f4:81:
         ac:98:3e:f5:10:fc:c7:e5:80:3b:c3:df:fb:d3:5c:84:34:a3:
         df:44:52:09:fd:a7:4a:eb:2b:93:5b:86:87:af:ff:c8:5f:9e:
         72:15:2f:9e:71:32:fe:fd:84:07:ca:f5:67:52:7b:c4:b5:c9:
         9d:23:b7:0e:63:b0:3d:34:8c:60:86:02:7a:cb:1d:88:8c:97:
         ca:17:84:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Hybrid Analysis Link.

Note links from Chinese websites:

1 手机被警察局装了MFsocket,求解是什么软件?_百度知道

最佳答案: 检测 暴恐音视频的更多关于警察强制安装mfsocket的问题>> 普通

2 [求助]公安局有权未经过同意就安装app到手机吗?-『..._看雪安全论坛

2016年8月31日 - 办身份证,警察插入一个类似POS机的东西,说要收集手机数据! 过后发现被装了:MFSocket.apk 百度一查 发现:http://zhidao.baidu.com/question/7553921019... 普通

3 手机被警察装了MFSocket软件 - 华为Mate10系列问题反馈 花粉俱乐部

2018年3月29日 - 网上搜了下是监控软件 很不爽 手机都不想要了 卸载或恢复出厂设置有用吗? 手机被警察装了MFSocket软件 普通

4 我可以告警察局吗他们给我安装MFSocket_百度知道

最佳答案: 可以起诉,如果对警察做出的侵犯隐私的措施不服的,是可以向法院提起行政诉讼的。如果公民没有违法行为,警察是不得随便监控他人隐私的。 依据《中华人民共和...更多关于警察强制安装mfsocket的问题>> 普通

5 手机被警察装了MFSocket软件 - 华为Mate10系列问题反馈 花粉俱乐部

2018年3月29日 - 网上搜了下是监控软件 很不爽 手机都不想要了 卸载或恢复出厂设置有用吗? 手机被警察装了MFSocket软件 普通

6 被安装MFSocket这个软件-中关村在线手机论坛

2018年10月26日 - 被安装MFSocket这个软件1278浏览/ 3回复thinkyang_qb 0精华210帖子 等级:Lv.1...刚来东莞被警察请到派出所,... 普通

7 请问,MFsocket 是什么APP……???_小米Max_MIUI论坛

2017年12月15日 - 请问,MFsocket 是什么APP……???,昨天,公司让我们去派出所,然后警察给我们安装了一个软件叫 MFsocket 的软件,我百度了一下好像是是监控软件!请问,有谁... 普通

8 大神们 求救! 手机被安装了MFsocket 请问如何将它从手_..._百度贴吧

2018年12月15日 - 大神们 求救! 手机被安装了MFsocket 请问如何将它从手 只看楼主 收藏 回复阿百川吖x因人而熠 1因为我在xx上学 学校会定期检查手机这次检查被安装... 普通

9 ...手机过安检被jc用usb链接手机安装了mfsocket软件,百..._百度贴吧

2018年4月28日 - 请教大神,手机过安检被jc用usb链接手机安装了mfsocket软件,百度说是监控软件,谁知道怎么解除监控以及卸载呀,虽然不影响使用,但是心里别扭呀。 久之轩 ...

Instructions for Using Bluetooth and WiFi (Electromagnetic) Analyzer Tool

Simple Steps to Use

1. Start the app to start scanning for Bluetooth devices around you. You can save specific device by clicking on the list of discovered devices, and you can change the name of the device to something you can remember.

2. Subsequently you can scan for only those you saved in your saved list. This helps to identify known devices you recorded previously.

3. The app also has another function called history. This will just record all the known devices every time you press record history. Every similar device will get their count incremented. This helps to identify devices that are always around you.

4. This app only runs in your device and does not communicate with our servers. There is no information transfer from your device out to anywhere from our app.

Explanation on Permission Required

approximate location (network-based) - for access for Bluetooth scanning

full network access & view network connections - for access for Bluetooth scanning

pair with Bluetooth devices & access Bluetooth settings - for access for Bluetooth setting

Surveillance - Find & Track Bluetooth WiFi Devices is Discontinued

Surveillance - Find & Track Bluetooth Devices is Discontinued

It was launched on April 27, 2018. In the 14 months of being "alive", there was 380k downloads.

We really hope the message of "being tracked via your EM signals" was spread to as many as we can.

Thank you for being part of the journey.

New App - Disable Camera

Disable Camera

Temporary disable the camera function - One touch on screen to on/off the Cam.

Disable / Enable Your Device Camera

Use Case: 

1. You suspect one or more apps are using your camera without your knowledge
2. You are in some secure location that camera usage is forbidden
3. You don't want someone to use your phone to take some pictures
4. Your camera is disabled by some apps and you want to re-enable it (works only if it was disabled using Device Admin - Disable Camera)

Disable or enable your camera. One touch on the screen and the camera is disabled. No apps will be able to use the camera. Some of these apps may crash if they do not handle unavailability of camera gracefully.

This app uses the Disable Camera function in Device Admin, and thus this app will require activation in the device admin menu setting. To uninstall this app, you have to deactivate the app in the device admin menu setting first. Then you can proceed to uninstall the app.
Tips: Some application use this method to make it difficult for users to uninstall them.

Features:

➤ Free, No ADS and No root required
➤ Simple to use, no manual required
➤ Supports Phones, Tablets, Android™ TV Boxes
➤ Supports Android™ KitKat, Lollipop, Marshmallow, Nougat, Oreo, Pie, Q
➤ Good resource management, No frills, minimum RAM & CPU
➤ App do not use any CPU or RAM when it is not activated via touch
➤ When activated, the app will enable or disable the camera and then kill itself
➤ Safe and Privacy focused, no servers and DOES NOT connect to the Internet
➤ No Android™ Permission required, zero, none, period
➤ Check the permission required by other similar apps and you will agree that this is the BEST app for Camera Enabling/Disabling in comparison

We develop this app because we need it for some of the suspect phones we deal with. This app serve our needs and may be useful to you.

For peace of mind, for privacy, for not trusting anyone.

Now Available in Google Play Store

A Big Thank You to Our Patron

A Big Thank You to Our Patron

Thank you Jonathan Mark Lunsford. We do not know who you are or where you are, but your generosity, acknowledgement and support really really spur us on to continue development of useful apps for people.

💓💓💓

Thank you Sir.

Android One Update in Feb 2019

Android One Update Status in Feb 2019

Following the previous post on Android One, this is a screen shot of Mi A2 phone with the February security updates.

Screenshot of a Mi A2 phone

Mi A2 is a phone from Xiaomi on the Android One program. So far updates are regular in the Android One phones. If you like your phones to be regularly updated, look for a phone on the Android One program.

Screenshot taken by our app, Device Information (Zero Permission App).

Zero Permission App - Clipboard data

Android Q Adds New Permissions for Clipboard Access and Blocks Background Clipboard Reads

One of the function that our app, Device Information (Zero Permission App), provides is to display the data or information in the Android clipboard. This demonstrates to the user that sensitive data such as document, passwords, SSNs if copied may be leaked to Android app that reads the clipboard without user knowledge.

Our app has no permission and thus it is safe to download and test. It displays information on Android device with zero permission required. The goal of the app is to spread the message of the danger of information leakage via Android app.

The good news is when Android Q arrives, the problem of malicious apps copying the clipboard data may finally be patched. Android Q is found to have new permissions, READ_CLIPBOARD_IN_BACKGROUND, for applications to request if they required clipboard access. This will definitely blocks some of the malicious apps that steal information or uses this as a covert channel to communicate with another app.

Android is definitely moving in the correct direction for closing this vulnerability. The problem of relying on users to keep abreast of the numerous permissions may not be a good security fallback.

How to Remove "Mi Store" from Mi A2

How to Remove "Mi Store" from Mi A2 (Android One)

You could use our app, Zero Permission App, to find the number and types of installed applications in your Mi A2, Android One, phone. One of the function of the app is to list the possibly sideloaded apps and you may find apps such as the list below in your brand new Mi A2 phone.

1. Caping
2. Mi Store
3. Google Pinyin Input
4. Mi Community

All the above apps can be easily uninstall from the device except for Mi Store. It does not appear in the application list under the device setting. One method we used to uninstall this app is as follows:

1. Google https://apkpure.com/mi-store/com.mi.global.shop
2. Download the apk (version 3.2.1) from Chrome
3. Allow installation from known source in Chrome
4. Install the apk
5. Go to setting/app listing and uninstall the app, Mi Store
6. Go to setting and search install from unknown
7. Remove install from unknown for the Chrome

And the app Mi Store will no longer be in your device.

Just sharing, it works for us and thus it may work for you too.

The problem or technique used by Xiaomi seems to be a play on the app id. We will investigate further and report if there is any findings.

PS: Mi Feedback is a system app and thus no way to uninstall without rooting.

New App - Contacts Companion

Contacts Companion to Complement Android Contact Application

Secure Operations: Backup, Restore, Export and Delete functions supported

Contacts Companion - Backup, Restore, Export, Delete Contact Data via VCard

Use Cases:

1. When you try another application which requires permission to access your contact data, you may want to temporary delete all your data.
2. When you suspect some app is copying your contact data and you want to deploy a honey contacts (similar concept to a honeypot)
3. When you do not want to use any of the contacts sync (e.g. Google, Samsung) and you would like to personally backup and secure your contact data

Features:

✓ Free, No ADs and No root required
✓ Simple to use, no manual required
✓ Supports Phones, Tablets, Android TV Boxes
✓ Supports Android KitKat, Lollipop, Marshmallow, Nougat, Oreo, Pie
✓ Good resource management, No frills, minimum RAM & CPU
✓ Backup, restore, export, delete your contact data
✓ Safe and Privacy focused, no servers and DOES NOT connect to the Internet
✓ No Android Permission required except READ/WRITE contacts
✓ Check the permission required by other similar apps and you will agree that this is the BEST app for a contacts companion app

Required Permission:

✓ Read your contacts - For backup, export functions
✓ Modify your contacts - For restore, delete functions

There are no other permissions, thus your contacts data will not leave your device, use by others.
Precisely there is no other permissions, we can export your contacts only via system copy. You can paste it in a notepad application or paste to an email to send for backup. We recommend using "Cryptography Tool" to encrypt your data before sending it over the Internet.

Get It Here

Coming Soon:

1. Replacing all contact names with random names
2. Replacing all contact number with random numbers
3. Multiple backups

How to Solve Android App Icon Showing Default in Oreo (API 26) and above

Problem: Android App Icon is not using your generated PNG images in Oreo, Pie and above

Explanation:

Using Android Studio, the IDE by default generated the use of adaptive icons in a new project. However, adaptive icons will only work for API 26 and above. So your app may be showing your generated icons blissfully until you tested on Oreo or Pie, where it seems to be defaulted back to the standard icon.

Standard Launcher Icon

Standard Round Launcher Icon

To solve the problem, you just have to delete the adaptive icons from the folder mipmap-anydpi-v26 and mipmap-anydpi by deleting the two folders.

This is because if a resource is found in mipmap-anydpi-v26, it will always take precedence if API level is 26 or more (Oreo). The next precedence is mipmap-anydpi.

So if you are not using adaptive icons, just do the above and your generated PNG icon images will be showing in Oreo onward.

Instructions on Using Bluetooth and WiFi (Electromagnetic) Analyzer Tool

Simple Steps to Use

1. Start the app to start scanning for Bluetooth devices around you. You can save specific device by clicking on the list of discovered devices, and you can change the name of the device to something you can remember.

2. Subsequently you can scan for only those you saved in your saved list. This helps to identify known devices you recorded previously.

3. The app also has another function called history. This will just record all the known devices every time you press record history. Every similar device will get their count incremented. This helps to identify devices that are always around you.

4. This app only runs in your device and does not communicate with our servers. There is no information transfer from your device out to anywhere from our app.

Explanation on Permission Required

approximate location (network-based) - for access for Bluetooth scanning

full network access & view network connections - for access for Bluetooth scanning

pair with Bluetooth devices & access Bluetooth settings - for access for Bluetooth setting

What is Android Security Patch Date and Why It is Important (Update)

What is Android Security Patch Date and Why It is Important

Following the previous post, we just took the picture of an Mi A2, an Android One phone, in the store on 8 November 2018.

Xiaomi A2 Lite Model (Android One) Phone with Security Update 1 November

The security patch date is shown as 1 November 2018. We are amazed by the recency of the Google Security updates. 

Android Security Patch Date and Its Importance

What is Android Security Patch Date and Why It is Important

Most people are aware of terms like Android 4, 5, 6, 7, 8 and 9, or terms like Jelly bean, Lollipop, KitKat, Marshmallow, Nougat, Oreo and Pie. Most will also understand the Android operating system is newer and better for higher version of Android. However some people may not be aware that Google also provides security updates to the Android operating systems via security patches. The purpose of these updates is to fix vulnerabilities or flaws of the Android operating system.

Android Security Patch Date

It is possible to tell when was the last security update applied to your device (see our tool in Zero Permission App). And using the information provided Google Security Bulletin, you will know the technical details of possible vulnerabilities in your device. Your device may not be patched against the most recent security exploits if the security patch date is too long ago. If there are security patches provided (by device manufacturer or by your carrier), your device will almost certainly be configured to automatically download and apply the patches. There is nothing much you can do if there is no security patch provided by your device manufacturer or your telco carrier.

For older Android devices, or devices that are not patched recently, you need to be aware that the device may be vulnerable. By taking these measures, you can significantly reduce the opportunities of attack.

1. Enable the Pin lock, Pattern lock or fingerprint lock on the device

2. Disable developer option and disable ADB debug and disable installation of apps from "Unknown Sources"

3. Do not sideload application

4. Never open documents or application installers (APK files) that you are not expecting, even if it looks like it's from someone you know

5. Ensure your phone is regularly backed up, or sync your contacts/data/etc with one of the major companies such as Google, Samsung

6. Make sure Google Play Store is updated and Play Protect is turned on

7. Make sure all applications in your device are updated.

8. Regularly download the well known Anti-virus applications and perform a full scan

9. If your device is more than two years old, consider replacing the device.

If you are shopping for a new device, you may want to look for a manufacturer that provides timely security patches. You may want to take a look at Android One program. Launched in 2014, Android One is a series of devices that run the unmodified Android operating system. It defines hardware and software standards to provide a consistent user experience and improved security through frequent updates and Google Play Protect. Android One phones will receive the latest version of Android from Google’s hardware partners. However, Google’s partners may not be able to send out these updates in a timely manner. All partners are expected to provide software updates for at least eighteen months after the phone’s initial launch. This means that all phones will receive at least one major software update and several smaller security updates in their supported lifetime. We checked a Xiaomi A2 model phone in a shop in early October and the security patch date is September 2018, and that is impressive. (Note: we are not affiliated to Xiaomi in any direct or indirect ways)

After you get a new device, you may want to harden your device as per this previous post.

New App - Screen Lock

New App - Android Screen Lock

Use Case: Pressing the power button to power off the screen may cause damage to the button through wear and tear. To stop using the power button to off the screen, we develop this simple app to lock the screen once the app is touched. To power on the device, use the fingerprint sensor or double tap on the screen (supported in a few models).

A simple screen lock button for Android devices

Tips: Even if you did not enroll your fingerprint in the device, the screen will power on once your finger is placed on the fingerprint sensor.

Lock your device screen. One touch on the screen and the screen is locked. Use any of your existing methods to unlock (Pin, Patterns, Fingerprints). Free yourself from the device power button. This is another one of our Zero Permission Apps.

Tips: If your device is using MIUI platform, then look for the desktop widget to achieve the same function and you do not need this app. Most Xiaomi models provide this function out of the box.

This app uses the Force Lock function in Device Admin, and thus this app will require activation in the device admin menu setting. To uninstall this app, you have to deactivate the app in the device admin menu setting first. Then you can proceed to uninstall the app. 

Tips: Some application use this method to make it difficult for users to uninstall them.

Features:

➤ Free, No ADS and No root required

➤ Simple to use, no manual required

➤ Supports Phones, Tablets, Android TV Boxes

➤ Supports Android KitKat, Lollipop, Marshmallow, Nougat, Oreo

➤ Good resource management, No frills, minimum RAM & CPU

➤ App do not use any CPU or RAM when it is not activated via touch

➤ When activated, the app will lock the screen and then kill itself

➤ Safe and Privacy focused, no servers and DOES NOT connect to the Internet

➤ No Android Permission required, zero, none, period

➤ Check the permission required by other similar apps and you will agree that this is the BEST app for Quick Screen Lock in comparison

We develop this app because we need it and the app we are using previously is by loewe (com.lsc.lock) but it is not actively maintained. The app by loewe is fantastic but does not support some of our Samsung phones. This app serve our needs and may be useful to you.

Get it here on Google Play Store.

Have fun and God Bless.

Why Google Play Developer Program Policy Update is Good for Users

Why Google Play Developer Program Policy Update is Good for Users

On 9 Oct 2018, we received an email from Google informing of changes in the Developer Program Policies. The changes are summarized as shown:

• Malicious Behavior include surveillance and commercial spyware apps.
• Designed for Families program requirements and Primarily Child-Directed Declaration guidelines to help ensure accurate representation of an app's targeted age group.
• User Data and Permissions policies, including adding specific restrictions on the use of the Call Log and SMS permission groups.
• Developers have 90 days (that is 7 January 2019) from the date of this announcement to make your apps compliant with this updated Call Log and SMS permissions policy.
• Enforcement section to explain the extent of our policy coverage, including the actions that we may take on apps that violate our policies.

Developers must now explicitly declare data collection and usage, and cannot hide behind other long lengthy disclosures. Access to call logs and sms logs will also be removed for non default apps.

All these new updates, may not be retroactively applied to existing apps. So be extra cautious when you download an app that is not updated for a very long time.

A big Thumbs up.

New Zealand to order tourists to hand over phone password at border

Please Unlock Your Device for Your Safety

Many people have denounced a new law in New Zealand under which will allow border officials to demand that tourists unlock any electronic devices. This include mobile phones and laptops so that they can be searched if officials suspect the tourist. Under this new Customs and Excise Act 2018, tourists who refuse could face prosecution and a fine of up to NZ$5,000 (£2,500). The devices may be retained or confiscated if the tourists refuse to cooperate.

New Zealand: Hand over phone password at border or face $3,200 fine

Our Android App Updates

Update on our Android App Development journey

Since we started in January 2018, we have eight Android applications listed in Google Play Store.

1. Anger (Boredom) Management

This app is our small rebellious voice against countless mindless stupid meetings. We decided to take some actions by developing this tongue in cheek app.

Install: 100+

2. Device Information

A tool to demonstrate the capabilities of a simple Zero Permission App.

Install: 1000+

3. Switch DNS (WiFi / Bluetooth / 3G / 4G / LTE) 

Switch your DNS setting to other free DNS servers of your choice. It runs as a VPN service in order to set the DNS setting.
Install: 1000+

4. Quick Check for RottenSys, AsiaHitGroup, APT-C-23 RottenSys

Quick check and scan for RottenSys, Trojan.AsiaHitGroup, Trojan.SMS.AsiaHitGroup, Adware.AsiaHitGroup, APT-C-23 , Cosiloon malware files in your Android Phones, Tablet, TV.
Install: 1000+

5. Secret Notes AES-256

Secure your secret notes with AES-256 encryption with this Zero Permission App. Our only PAID app in Google Store currently.

Install: 10+

6. Cryptography Tool (AES256/CBC/PKCS5)

Secure your secret text with AES-256 encryption with this Zero Permission App.

Install: 10+

7. Web API Automation

Developed a POC app for one customer. Not for general distribution.
Install: 1+

8. Surveillance - Find & Track Bluetooth WiFi Devices Surveillance

This tool opens your electromagnetic (EM) eyes to the number and types of radiation around you. It allows you to observe and track the EM aura around devices and people.

Install: 50,000+

We are happy to reach the top 20% (top 760,000 out of estimated 3.8 million apps) download for our Surveillance app. Thank you to all for your support and review.

New App - Cryptography Tool

New App - Cryptography Tool Using AES256/CBC/PKCS5

Secure your secret text with AES-256 encryption with this Zero Permission App.

Typical use cases: posting secret notes in social media, posting your personal notes in online journal, sharing secrets with someone else online, verify backup of data from Secret Notes AES-256. 

This app encrypt your text in any language using the so far unbroken AES-256 scheme. The encryption used for securing your notes is AES-256, refer to https://en.wikipedia.org/wiki/Advanced_Encryption_Standard, one of the strongest encryption scheme. Every text you type into this app are encrypted with your encryption key or password. The key or password is not stored in any form in your phone or anywhere else. 

We have started Zero Permission App (ZPA) initiative on our website, an initiative to provide peace of mind to users by aiming to have no (ZERO) required permission in Android, but still providing innovative and effective features.

IMPORTANT 1: There is no way to retrieve the password if you cannot remember your password. Your password is not stored anywhere and by anyone. We will only be able to help you recover your encrypted text if we have figured out a way to break AES-256, and we have NOT yet done so.

IMPORTANT 2: We will only support this app downloaded direct from Google Play. There are risks that the encryption may be weakened, malware infection, tracking logic added if you download the app from elsewhere.

IMPORTANT 3: Please use a more complex and hard to guess password to protect your notes. Yes, your birthday or phone number is easy to guess.

Features:

➤ No ADS and No root required

➤ Simple to use, no manual required

➤ Supports Smartphones, Tablets

➤ Supports Android KitKat, Lollipop, Marshmallow, Nougat

➤ Good resource management

➤ No frills, run with minimum RAM and CPU

➤ No unnecessary function in the app (to enhance security)

➤ No Android Permission required, zero, none, period

➤ Safe and Privacy focused, no servers and DOES NOT connect to the Internet

➤ Only your password (and pray you must not forget) can unlock your secret text

➤ Check the permission required by other similar apps and you will agree that this is the BEST app for securing your text in comparison

Get it here on Google Play Store.

Have fun and God Bless.