Overview
ZeroLeaks is an Android app that scans the apps installed on your phone for security and privacy risks — risky permissions, potential malware, accessibility services, device-admin apps, and notification listeners — and gives you a plain safety verdict. It is built to run entirely offline: the app has no internet permission and cannot send your information anywhere.
Works Offline: No Data Collection
ZeroLeaks does not request the Android INTERNET permission. As a result,
the app is technically incapable of transmitting your data off the device. There
are no servers, no accounts, no analytics, and no crash reporting.
Everything ZeroLeaks examines is analysed on your device, in memory or in app-private storage. Nothing is uploaded, shared, or sold — there is no mechanism by which it could be.
Device Access: What We Read and Why
To audit your phone’s security, ZeroLeaks reads information about the apps you have installed. It requests two Android permissions:
- See installed apps (
QUERY_ALL_PACKAGES) — the app’s core function. This lets ZeroLeaks list the apps on your device and read each app’s requested and granted permissions, install source, and package details so it can assess risk. - Send notifications (
POST_NOTIFICATIONS) — used only to show an optional monthly reminder to run a new scan. You can decline or disable this at any time.
ZeroLeaks also reads special-access status from your system settings — which apps hold Accessibility, Device Admin, or Notification Listener access — because these are powerful capabilities relevant to a security review. This is read from the device and shown back to you.
ZeroLeaks reads all of this information only to display it back to you. It does not modify, delete, or interfere with any other app on your device.
Where Your Data Lives
Everything the app stores stays on your device, in app-private storage:
- Scan results — the most recent scan, stored in app-private preferences so the app can show you changes since your last scan.
- Your trusted-apps list — apps you have marked as trusted, so they aren’t flagged again. Stored on-device only.
- Your theme preference — a simple app setting.
Device backups are disabled for this app (allowBackup=false), so this data is
not copied into cloud backups.
Sharing a Report — Only When You Choose
ZeroLeaks includes an optional Export feature. If — and only if — you tap
Export, the app writes a report of your scan (a .csv file) to its own private
cache and hands it to Android’s standard share sheet, where you choose what
to do with it and which app receives it. The report is not sent anywhere
automatically, and the app has no ability to transmit it over the network.
What We Never Do
- Connect to the internet or transmit your data
- Store your data on any server (there are no servers)
- Read the contents of your other apps, files, or messages
- Require an account or sign-in
- Share or sell any information
- Show ads or use your data for advertising
Data Deletion
Because nothing is stored off your device, you control all of it directly:
- Clear app data in Android Settings → Apps → ZeroLeaks → Storage → Clear data, which erases scan results, your trusted-apps list, and your theme preference.
- Uninstall the app, which removes all app-private data.
Children
ZeroLeaks is a utility not directed at children under 13 and collects no data from users of any age.
Permissions Disclosure
ZeroLeaks requests the “See all apps” permission (QUERY_ALL_PACKAGES) because
its core purpose is to audit the security posture of every app installed on your
device — a use consistent with a device security tool. This information is used
solely to present the on-device security report described above and is never
transmitted off the device.
Changes to This Policy
We may update this policy occasionally; the date above reflects the most recent change. If a future version of the app adds any data collection or network access, this policy will be updated before that version ships, and the change noted in the app’s release notes.
Contact
Privacy questions or requests: [email protected]