In reference to that, I'm more concerned about what they do that isn't explicitly mentioned. Until not long ago, there was no permission denial for reading the

In reference to that, I'm more concerned about what they do that isn't explicitly mentioned. Until not long ago, there was no permission denial for reading the sdcard/external storage area of Android devices (even now it's generally set to be disabled by default for legacy reasons). Given the amount of stuff apps store on there, an unethical app could have a field day mining such information. Although apps should take responsibility for what they store or do not store on an sdcard that doesn't always happen. Android really needs a sandboxed area for each app on the external storage and alternatively require an additional permission for universal sdcard access if it's needed (like by file explorer apps). That may be hard to do with the fact that even FUSE backed emulated sdcards found on some devices are still pretending to be a FAT-like filesystem.