Google will now automatically revoke permissions from harmful Android apps

Google’s malware scanning Play Protect service will now automatically turn off an Android app’s permissions if it’s potentially harmful. The feature is designed to prevent malicious apps from having access to your phone’s storage, photos, camera, and more.

Though you can still restore the permissions for these apps, Google will ask you to confirm your decision for “added security.” Google Play Protect runs scans on all the apps on your device, including those that have been sideloaded. If Google identifies a harmful app, it will remove it from the Play Store and then warn users if they have it installed on their phone.

Play Protect already has the ability to reset app permissions for apps you haven’t used in a while, and can automatically block or disable a harmful app depending on its severity.

Additionally, if you switch off Play Protect, Google will now display notifications on Chrome and Android asking you to reenable it.

Google is also fending off scammers’ social engineering tactics like those that convince users to turn off Play Protect while on calls “to download malicious Internet-sideloaded apps.” To prevent this, Play Protect will now no longer let you toggle off the service during phone and video calls, including those made through ”popular” third-party apps.

Google has been gradually expanding Play Protect to combat the evolving scams that pop up on its app store, with a recent update bringing live threat detection to Pixel devices, which can pick up on harmful app behavior in real time. This week, Google also introduced a new verification badge for VPNs to indicate that they meet specific security standards.