Do not remove permissions of unused apps by default

basin

So far this feature (Manage app if unused, remove permissions) ) only did me harm. Is it possible to make it disabled by default and only enable for some app?

MineralWater

basin
You can disable this behavior for each app in the app settings of the single apps. Just uncheck this each time you install an app and for those you already have installed.

Murcielago

basin

So far this feature (Manage app if unused, remove permissions) ) only did me harm.

Could you explain in more detail what harm this feature caused?

Is it possible to make it disabled by default and only enable for some app?

As far as I know, there isn't a default setting for this.
You can disable it individually for each app in
App Info > Manage App if Unused.

There's also a list of apps where this feature has been enabled in Settings > Apps > Unused apps

littlerack

basin only did me harm

I like it, it's good it there. I can disable it for apps I know I trust

basin

Murcielago Could you explain in more detail what harm this feature caused?
I'm being logged off in apps that I use rarely.

MineralWater Just uncheck
I keep forgetting to uncheck that because I install apps often.

Murcielago There's also a list of apps where this feature has been enabled
They only get here when it's too late.

Novalissoide

basin They only get here when it's too late.

I agree. I always open app info on every app install, and uncheck the feature. It has also the benefit of that toggle, since it is very visible, works as a checkmark for having eyed through a new apps info-page after installing.

pixel2026

I strongly agree!

I cannot even imagine an App where I would use this "feature".
Instead I was horrified as soon as I noticed this toggle and had some funny hours to disable it for all App in all user profiles!

Any App that is only of temporary interest to me, will be deleted anyways.
But I have lots and lots of Apps that I will only use very rarely, up to Navigation Apps or even additional browser - what a horror when I then learn those Apps got basically deleted and made unusable.
What a strange idea even - I have understanding for some (optional) removal of permissions, so that the App needs to ask again for them after a long time being unused, but the rest of the things this toggle does is really undesirable!

pixel2026

BTW, while doing this, I also removed the permission to use Sensors for any and all Apps beside Navigation Apps.
Why does my Calculator (and most other Apps) need access to Sensors?!?

And, I removed the permission to use background data and to run in background for all Apps beside messaging Apps.

I really cannot understand those defaults for an apparently "secure" OS!

And, I cannot understand why there is no generic toggle - with a way to enable things for single Apps.
It is really extremely time consuming to fix this manually for all Apps!

On my iPhone, I had about 600 Apps and without the generic "disable background activity" button, I had given up ...
But yes, Apple has other toggles that can only be set for each App individually.

But why should GraphenOS not do this in a better way?
But why should GraphenOS not do this in a better way?
But why should GraphenOS not do this in a better way?

Johnnyloans

pixel2026 removed the permission to use Sensors
I really cannot understand those defaults for an apparently "secure" OS!

This is the default I'm pretty sure--no sensor permission. Thid was added some time ago:
settings > security > more security > allow sensors by default

Security and convenience are opposed. There are even more people that complain about why are things automatically disabled or a barrier. E.g. USB charging only + wired android auto.

Removing background data will only help your battery. An app will queue up its internet tasks until it has access to internet again. Then it's sent.

pixel2026

Johnnyloans

I seem to remember that I found and disabled this toggle only later and therefore all Apps got installed with the Sensor permission.
I also read that this is not recommended, but so far I noticed zero problems with this.

Yes, sane defaults are important - but for an OS that primarily get's installed because of security and privacy reasons, convenience should probably come second place 😉

BTW, not all Apps can cache and retry network connections! But I had a better feeling when such things would be disabled by default and need to be enabled manually!

Sane defaults for an OS that focuses on security and privacy!

pixel2026

About the Sensor topic, I found this thread with interesting details:

https://discuss.grapheneos.org/d/6310-why-so-many-apps-need-sensor-access

So far, I noticed no problems with disabling this permission, esp. not for the GraphenOS App Store Apps or those from Accrescent!

I see no reason to not disable this permission for new installations by default, really.

And about the mentioned "system components", I completely lack to understand why it is so hard to disable the permission where possible and not allow to remove this permission for the others. Yes, even after reading the explanation from the forum user GraphenOS in that topic.

I removed the permission from each App, but not from the about 100 "system components" that are shown in Security and privacy / Privacy controls / Permission manager / Sensors.