How do you feel about zapstore doing absolutely nothing to prevent malicious apps from being listed in there? Do you think they should have a no telemetry standard? What do you think they should do to protect the user from malicious developers?
Half the apps you won't even know have google api activity, a profile install receiver which lets devs or google know hey you installed this app on your phone profile 1. I'd like to see some nostr apps that don't have telemetry or use more permissions then needed.
No app should have android.permissions.dump if you see an app with it in permissions list then delete it fast. This permission is a dangerous one because it accesses system level information as a superuser giving it access to many different pieces of information about your device such as.
* Screen Time
* Lock Count
* apps installed (which profile, user, system)
* total calls
* total sms
* wifi connections
* logcats (logs for every app & system crash reports)
* & much more
The app doesn't need to request specifics when it has dump it will have accesses to all information & it will be automatically given it. Only a 100% offline diagnostic app should have this. Apps do not need this permission you can look up this permission & read all about it.
#asknostr do you care about safety & spyware or do you just only give a damn about it being an app for nostr & nothing else?
Vyram Kraven
npub1k0…0zyu9
2026-08-12 06:16:38 UTC
Author Public Key
npub1k06ctulq8rcaen067tt6z3y6gxrqtsuje5em5lcn009zfpp0t7gqf0zyu9Published at
2026-08-12 06:16:38 UTCEvent JSON
{
"id": "206f2acad0106e66441297df646b7f58c7a0e2fd84b50121533d5745a47e89b2",
"pubkey": "b3f585f3e038f1dccdfaf2d7a1449a418605c392cd33ba7f137bca24842f5f90",
"created_at": 1786515398,
"kind": 1,
"tags": [
[
"alt",
"A short note: How do you feel about zapstore doing absolutely no..."
],
[
"t",
"asknostr"
],
[
"r",
"https://android.permissions.dump/"
],
[
"client",
"Amethyst"
]
],
"content": "How do you feel about zapstore doing absolutely nothing to prevent malicious apps from being listed in there? Do you think they should have a no telemetry standard? What do you think they should do to protect the user from malicious developers?\n\nHalf the apps you won't even know have google api activity, a profile install receiver which lets devs or google know hey you installed this app on your phone profile 1. I'd like to see some nostr apps that don't have telemetry or use more permissions then needed.\n\nNo app should have android.permissions.dump if you see an app with it in permissions list then delete it fast. This permission is a dangerous one because it accesses system level information as a superuser giving it access to many different pieces of information about your device such as.\n\n* Screen Time\n* Lock Count\n* apps installed (which profile, user, system)\n* total calls\n* total sms\n* wifi connections\n* logcats (logs for every app \u0026 system crash reports)\n* \u0026 much more\n\nThe app doesn't need to request specifics when it has dump it will have accesses to all information \u0026 it will be automatically given it. Only a 100% offline diagnostic app should have this. Apps do not need this permission you can look up this permission \u0026 read all about it.\n\n#asknostr do you care about safety \u0026 spyware or do you just only give a damn about it being an app for nostr \u0026 nothing else?",
"sig": "9206d5515c7f3e297f78f4a380e46bc4a52812cb7e946c2cd8e7347e092f27f25fe234062ffb609cbe1fb42b2b5d6dc1a6e0fc89397626a6f5a9802492877f7c"
}