Files
Dateien (com.google.android.documentsui) is the system-level document picker and file manager that ships with Android. 6 verified scans across 5 devices find 0 trackers - no advertising, analytics, or attribution SDKs in the bytecode. The permission list is short: RECEIVE_BOOT_COMPLETED lets the component register itself after reboot, and QUERY_ALL_PACKAGES lets it enumerate installed apps to surface storage providers from other apps. Both are consistent with what a system file manager actually needs to do.
Read from the bytecode.
A file manager with 0 trackers and 2 permissions is about as lean as a shipped Android component gets. QUERY_ALL_PACKAGES is the one permission worth a second look: it lets the app see every installed package on the device, which is broader than most apps need. For a file manager that must discover which other apps expose document storage providers, this is a functional requirement - but the same permission has been misused in other contexts for app inventory profiling. Static analysis cannot confirm which use applies at runtime. Everything else here is unremarkable.
This is static analysis of the APK bytecode installed on real devices: it proves which SDK classes and manifest permissions ship in the app, not what the app transmits at runtime. Traffic analysis is a different measurement.
Hidden inside the code.
What it asks for.
Allows enumeration of all installed apps. Expected here for discovering document storage providers, but the same permission can be used for app inventory profiling.
Lets the component start after device reboot. Standard for system components that need to register services early in the boot sequence.
Keep reading.
How to Check If an Android App Is Safe Before Installing
Before you install any Android app, here is how to check if it is safe: permissions, trackers, developer reputation, and...
What is a tracker in an app, and why should you care
A tracker is third-party code the developer bundled in. It reads device IDs, coarse location and your app list, with no ...
Similar risk profiles.
Scan Files yourself.
Get the full report on your device - with real-time DEX analysis, permission auditing, and breach monitoring. Free, no account needed.