Can a deleted app track me or install malware/spyware?

[deleted]

I downloaded XManager from the official website, as I was curious, and installed Spotify through it.

I've just deleted this app now, only a few minutes later.

Could this app have done anything like install malware or spyware on my device, or am I just being paranoid.

I don't think it has or can, but just wanna make sure.

Thanks.

de0u

[deleted] Reboot, verify your device's signing key hash, and you should be fine.

yore

[deleted] You can also verify with the Auditor app if you're able to.

Docs:
https://attestation.app/tutorial

GrapheneOS There's cryptographically secure verification of all the firmware, OS images and APEX module updates with downgrade protection. GrapheneOS extends this to system app updates which aren't normally covered by Android Verified Boot.

[deleted]

de0u thanks for that, will do that now.

[deleted]

de0u just did this, the device signing key hash is the exact same as on that site, I just overreacted lol. Thanks again for your help

de0u

[deleted] The device signing key hash is the exact same as on that site.

That means your system partition is unmodified, so it's pretty unlikely there is any persistent outcome. GrapheneOS's system integrity checking is better than Google's stock OS, so you should be in good shape.

[deleted]

de0u I also just downloaded and ran Hypatia and it detected 0 malware, so that's also good.

Ammako

[deleted] "malware scanners" on Android are snake oil, for what it's worth

Stephan-P

This discussion started off on the idea that the app Xmanager could possibly have installed malware (after its removal?).
Are there in fact any suggestions that could throw suspicion upon Xmanager?

[deleted]

Stephan-P I'm not sure, just got suspicious.

[deleted]

Ammako Hypatia is made by the people by DivestOS, another private operating system, so there's that. But I don't disagree with you.