Blocks submissionGoogle Play

From 27 January 2027, READ_CONTACTS needs a declaration that the Contact Picker is not enough

What is checked This rule is decided by code from the built app and the listing: android.built.manifest, console.google.declarations.

Applies when permission:android.permission.READ_CONTACTS

In force from 2027-01-27

Checked from built, not yet uploaded, on a test track, submitted and in review, published

The rule, in our words

• Preview: Permissions and APIs that Access Sensitive Information: This is the version of the sensitive-permissions policy that takes effect on 27 January 2027, previewing the April 2026 updates. For location: request the minimum scope (coarse over fine, foreground over background); apps targeting Android 17 (API 37) or later that need precise location only for one-time, user-initiated actions must use the Android location button with the onlyForLocationButton manifest flag, and ACCESS_FINE_LOCATION is granted only where neither the location button nor coarse location can support the declared features. Any location request, including the location button, goes through a Play Console declaration and review; background location is limited to core user-facing features, and foreground-service location must follow a user action and stop when that action completes. New Contacts rule: apps targeting Android 17 or later may request READ_CONTACTS only where the Android Contact Picker is not enough, and must file a Play Console declaration explaining why. The rest of the existing policy (SMS/Call Log, photos, all-files, package visibility, accessibility, install packages and the other listed permissions) remains as before.

Okkok never stores the stores' text. Each item above is our paraphrase, and the link is the page it rests on, verified unchanged by fingerprint on every run.

The other store

• Google makes the picker-first rule mandatory for contacts with a declaration; Apple states a preference. google-stricter
• From January 27, 2027 Google reviews every location request through a declaration; Apple has no declaration or review form for location. google-stricter

Check your app

pip install git+https://github.com/petresandu-cloud/okkok
okkok audit path/to/app

The report names this rule as google.contacts-picker-from-2027 and says what to do, who does it, where, and how it knows.