Download apk installation files from playstore without logging

grayway2

I do believe that I'm not the only one and I want to get rid of playstore even if it's sandboxed because some apps clearly communicate within the same profile (with the playstore). I could probably install the playstore in the owner profile then push the apps to another profile but I don't want and I don't feel comfortable to have the playstore installed anyway.

I'm trying to find a secure way to directly download apk files from the playstore. Some apps have no github or another offical deposit place and it's pain in the ass to find the legit installation files.

Play services with network off will remain installed because some apps won't lauch without it.

SgtSurehand

grayway2 if such secure way of installing apps existed, someone would come up with it by now. I am pressed for time right now but will post here later with my workaround and its limitations.

freezet

grayway2 directly downloading from playstore is not possible without getting logged by google.

natoal

I believe there is a way to get the apk file from already installed apps. You could transfer those files from a profile that has google play

There's also apkpure and aurora store but some say they're not as secure

grayway2

natoal I used to directly download apk files thanks to a website just by providing a playstore web link but that service no longer exist and it was probably not secure (couple years ago)

You have to trust apk pure and for aurora store I don't feel comfortable to connect to a shared account.

grayway2

SgtSurehand The other day, I created a fresh new profile after reseting my phone and a new gmail account through sandbox google play store interface. My idea was to give Google only my IP address, the model of my device and I was fine that Google knows what apps were installed on that profile. But then, I installed Vivaldi because Vanadium was only for my banking apps and Brave was for another task. I logged in my amazon account through Vivaldi and what I see ? A fucking pop-up with my name and the gmail address (that fucking browser was asking me if I was OK to save my password on that google account)

I did not forget about app communication within the same profile but was expected Vivaldi to not integrating such things.

We really need app communication scopes. Next time, I will probably install the playstore in the owner profile then push the apps to other profiles and keep them disabled in the owner.

SgtSurehand

I have downloaded a number of apps from apkpure, apkmirror and Aurora and their hashes on comparison were always(!) identical. Not saying they always will be, but if you get apk for same app from three different sources and their hash is identical, don't worry about naysayers, do your thing as long as you know what those apps ask for in terms of permissions, run well without Play services and what libraries they contain and their execution is alright with you. More often than not these libraries are dysfunctional or tied to pseudo identity rather than your real identity.

grayway2

SgtSurehand I can tell you that I did install apps from apkpure, apkmirror, aurora store or apk combo and never had issues. The idea to check three different hashes is good. It's not really time consuming but it's kinda the only solution to avoid installing playstore.

Thanks to GrapheneOS devs, sandboxed google playstore is running like a regular android apps but because of app communication within the same profile it can become invasive and gather private information from another apps and it ruins everything.

SgtSurehand

Because of a bunch of paid apps, I tried giving sandboxed Google Play a chance but was never comfortable running it for more than couple of days before shredding it. Idea of running several profiles doesn't sound appealing to me, not least because of Media DRM issue. Secret lies in restriction of your app use. You wouldn't put wrong fuel in your car, wouldn't swallow food that is going to kill you in the long run so why using apps and services where you are the product. I just steer clear.

natoal

Lucky Patcher allows you to get the APK file of Android apps iirc, there might be other programs which are less shady