There is another way to transfer the data off the device. You can make another app, that has the same sharedUserId and that app has the internet permission. Tha

There is another way to transfer the data off the device. You can make another app, that has the same sharedUserId and that app has the internet permission. That app can see the data of the non-permission app and send the collected data via its internet permission anywhere. Apps with a sharedUserId have the super set of permissions of all apps they share the user id with. The user does not see that when installing either app.