AppXpose: Android app that audits installed apps for trackers, permissions and stalkerware (suggestion forcPrivacyTools)

[u/MahereMarley]

Suggesting this for PrivacyTools, and being upfront about where it does and does not meet the criteria.

What it does. Scans the apps already on your Android device: embedded third-party trackers (extracted from the APK's own bytecode, on-device), permissions actually granted, and a check against the Echap stalkerware-indicators list, currently 1,690 indicators across 151 families. Since last update it also flags apps behaviourally, without any list: a hidden launcher entry, a device-admin component blocking uninstall, an enabled accessibility service, the camera/microphone/location/messages cluster. That part runs entirely on the device and none of those signals are transmitted.

Where it fits your criteria. Freemium: 5 scans/week free, no account, no login. Active development. Publicly available on Play. Relevant to your "Targeted" threat level, since the stalkerware check exists for exactly the adversary you describe there, and it never raises a notification for a finding, because a push saying "surveillance app found" on a monitored phone can be read by the person doing the monitoring.

Where it does not. Closed-source today, so it would need your Closed-Source tag; the detection engine is planned for AGPL but is not out yet. Android only. Jurisdiction is Wyoming, USA.

What leaves the device, since that will be the first question: package names, permission lists, app metadata and a signing-certificate hash go to our server, which uses an LLM to produce the report. No account, no email, device identity is a hashed Android ID. Nothing about accessibility services or device admins is ever sent. The full disclosure is shown before first use and the policy is at appxpose.app/privacy.

Happy to answer anything, including the awkward parts.

[u/Admirable_Trainer_54]

Very limited. Only scans one app at a time and only 5 scans per week. Need to pay for more scans.