The mobile app is installed on the personal phone, therefore, it's more sensitive if the application will can personal information on the phone or abuse the phone services. Whenever the privacy information is handled, we will have to review the purpose and the needs.
The following table summarizes the techniques of identifying the privacy information access behaviors:
|
Category of privacy check |
Example of Android API calls |
|
Telephony identifiers |
Uses of APIs under the TelephonyManager will allow the application to read telephony services and state which may leak sensitive information, such as IMEI, SIM serial number, and cell ID. The examples of APIs (methods) under the TelephonyManager are getCellLocation(), getDeviceId(), getLine1Number(), getNeworkOperator(), getSimSerialNumber(). |
|
Audio/video interception |
There... |