I've reread your comments, and realized I might have answered a different question in my comment before :) In theory, you could request broad permissions, and

I've reread your comments, and realized I might have answered a different question in my comment before :) In theory, you could request broad permissions, and have an interpreter sitting inside your app, dynamically loading its own code over the wire, so you'll never have to update from the app store (unless you want more permissions granted). But as far as I understand, this is forbidden by the Play Store policies (e.g. Facebook got told off for doing this https://arstechnica.com/information-technology/2013/04/google-bans-self-updating-android-apps-possibly-including-facebooks/ https://arstechnica.com/information-technology/2013/04/googl... ). Although I'd imagine it's easy to slip such code past reviewers, unless your app is very popular and worthy a more thorough review that can catch it. Also I'd imagine there is some grey area there, e.g. your whole app could be a webview simply displaying web frontend -- surely it's okay to dynamically load javascript? Not sure how the policy works in such cases.