4 ms·

Android asks for your permission on what information you want to give the app. iOS just simply gives it whatever it asks for, without asking you first.

brador 15y ago
Interesting. What else can an iOS app get access to without permission? location? browser history? other installed apps list? emails? notes? pics? vids? music list? podcast list? itunes username?
- rmc 15y ago
  In theory, all iOS apps are supposed to be reviewed by Apple and not allowed if they do Bad Things™. Walled garden and all that. In theory.
- reidmain 15y ago
  Location: Permission is asked for Browser History: There is no way to communicate directly with what Mobile Safari stores. Other installed apps list: Apps are sandboxed so it is impossible to know what else is installed. If you've developed one of the other apps you can share the same App ID which gives you access to the same storage space so you could create a flag to indicate one of your apps has been installed. Some apps respond to certain protocols so you can ask iOS if a given protocol will be handled and if it returns yes then you know the app is installed. Again because they are sandboxed you really can't do anything harmful and responding to the protocol only allows the other app to receive information, not expose it. Emails: No, the only way you can do anything with email is prompt the user to compose an email. Notes: Same as Mobile Safari. Pics: You can display a popup to the user that asks them to select an image from their camera roll/iPhoto and if they select a photo you then get a reference to an object that represents the photo. You can't just search their camera roll. EDIT: rbritton points out that with the AssetLibrary framework you can actually search through all pics/videos and for some reason it gives a location access prompt when you do. http://news.ycombinator.com/item?id=3563336 http://news.ycombinator.com/item?id=3563336 Vids: Same as pics. Music List: You can get a list of every song in the users library without asking for permission: Podcast list: Same as music list. iTunes Username: To my knowledge there is no way to access this but I've never been asked to so I really haven't spent time looking. In theory because you can access the Address Book you could make a best guess at which contact is the user and then assume one of their emails is their iTunes username.
  - rbritton 15y ago
    You can access the Picture/Video library since iOS 4. It does prompt at least once for location access (apparently since they can contain GPS metadata), but it does not mention anything about why it's asking for that location access. https://developer.apple.com/library/ios/#documentation/AssetsLibrary/Reference/ALAssetsLibrary_Class/Reference/Reference.html https://developer.apple.com/library/ios/#documentation/Asset...
    - reidmain 15y ago
      Really? It asks for location access to get access to your asset library? That is pretty stupid. Thanks for the heads up. I was unaware of the AssetLibrary framework.
      - spullara 15y ago
        This is because the photos contain GPS data about where they were taken.
        reidmain 15y ago
        Ah that would make sense. So that would mean that if you turn off location services any app could access your asset library without any prompt then. Good to know.
- bengl3rt 15y ago
  I can say for sure that iTunes username is not exposed. In fact, they won't even provide an opaque user ID, which makes correlating purchases through in-app purchase with server-side user accounts very frustrating. You can sort of fake it by correlating with a device UDID, but that is leaky and has a lot of edge cases.
  - United857 15y ago
    Furthermore, they've officially deprecated the UDID as of iOS 5 which means it'll be going away sometime after that.

brador 15y ago

Interesting. What else can an iOS app get access to without permission? location? browser history? other installed apps list? emails? notes? pics? vids? music list? podcast list? itunes username?

rmc 15y ago
In theory, all iOS apps are supposed to be reviewed by Apple and not allowed if they do Bad Things™. Walled garden and all that. In theory.
reidmain 15y ago
Location: Permission is asked for Browser History: There is no way to communicate directly with what Mobile Safari stores. Other installed apps list: Apps are sandboxed so it is impossible to know what else is installed. If you've developed one of the other apps you can share the same App ID which gives you access to the same storage space so you could create a flag to indicate one of your apps has been installed. Some apps respond to certain protocols so you can ask iOS if a given protocol will be handled and if it returns yes then you know the app is installed. Again because they are sandboxed you really can't do anything harmful and responding to the protocol only allows the other app to receive information, not expose it. Emails: No, the only way you can do anything with email is prompt the user to compose an email. Notes: Same as Mobile Safari. Pics: You can display a popup to the user that asks them to select an image from their camera roll/iPhoto and if they select a photo you then get a reference to an object that represents the photo. You can't just search their camera roll. EDIT: rbritton points out that with the AssetLibrary framework you can actually search through all pics/videos and for some reason it gives a location access prompt when you do. http://news.ycombinator.com/item?id=3563336 http://news.ycombinator.com/item?id=3563336 Vids: Same as pics. Music List: You can get a list of every song in the users library without asking for permission: Podcast list: Same as music list. iTunes Username: To my knowledge there is no way to access this but I've never been asked to so I really haven't spent time looking. In theory because you can access the Address Book you could make a best guess at which contact is the user and then assume one of their emails is their iTunes username.
- rbritton 15y ago
  You can access the Picture/Video library since iOS 4. It does prompt at least once for location access (apparently since they can contain GPS metadata), but it does not mention anything about why it's asking for that location access. https://developer.apple.com/library/ios/#documentation/AssetsLibrary/Reference/ALAssetsLibrary_Class/Reference/Reference.html https://developer.apple.com/library/ios/#documentation/Asset...
  - reidmain 15y ago
    Really? It asks for location access to get access to your asset library? That is pretty stupid. Thanks for the heads up. I was unaware of the AssetLibrary framework.
    - spullara 15y ago
      This is because the photos contain GPS data about where they were taken.
      - reidmain 15y ago
        Ah that would make sense. So that would mean that if you turn off location services any app could access your asset library without any prompt then. Good to know.
bengl3rt 15y ago
I can say for sure that iTunes username is not exposed. In fact, they won't even provide an opaque user ID, which makes correlating purchases through in-app purchase with server-side user accounts very frustrating. You can sort of fake it by correlating with a device UDID, but that is leaky and has a lot of edge cases.
- United857 15y ago
  Furthermore, they've officially deprecated the UDID as of iOS 5 which means it'll be going away sometime after that.