xoxop After updating to Android 17 (on GrapheneOS), I noticed that my apps (third-party apps like WhatsApp, Pinterest, Reddit, Brave, Signal, etc.) have the "Nearby devices Allowed to keep app working" permission enabled by default. Why is that?
It is only LAN access that is permitted, ie for the app to connect to other devices in the same Wifi network as you are in. This was always permitted in Android 16 and earlier versions. "Allowed to keep working" just means LAN access is still permitted, not Bluetooth or similar things which is only permitted if put as "Allowed".
It is set like this by default to preserve behavior from Android 16, where LAN access was always permitted if Network access is.
xoxop Is there a risk of being tracked with this permission enabled?
Yes, an app on your device may announce itself to other devices on your Wifi network, and also see other devices on your Wifi network. This can be used both for the app to track which network you are on, and for other devices on the network to track you.
For example, Spotify may annouce your account ID to all devices on the local network in order to find compatible speakers or allow for multiple devices queueing songs to play without conflict.
xoxop Is it better to disable it?
Yes. You almost always want to disable Nearby Devices permission completely. Unless you want the app to be able to connect to other devices on your local Wifi network.
DeletedUser1006 So just installed some random apps and seems this permission is set by default upon install, is there a way to disable it like the way you can disable the sensor permission from being granted on a new app install?
No. However, this permission will only be granted automatically for apps targetting Android 16 or earlier, so gradually fewer and fewer apps will get this permission by default. It is quite possible a future Android version will stop granting this permission automatically too, when Google feel app developers have had a fair chance to update their apps.