Why runtime permissions protect user privacy in Android Kotlin - The Real Reasons

The Big Idea

What if your app could respect user privacy without losing functionality?

The Scenario

Imagine installing an app that asks for all your personal data upfront, like your location, contacts, and camera access, without explaining why. You feel uneasy but have no choice but to accept or skip the app.

The Problem

This all-or-nothing approach is risky. Apps get access to sensitive info even if they only need part of it. Users lose control, and their privacy can be easily violated without their clear consent.

The Solution

Runtime permissions ask users for access only when the app really needs it. This way, users understand why the app wants certain data and can choose to allow or deny each permission separately.

Before vs After

✗ Before

Manifest: <uses-permission android:name="android.permission.CAMERA" />
App starts with all permissions granted.

✓ After

if (checkSelfPermission(Manifest.permission.CAMERA) != PackageManager.PERMISSION_GRANTED) {
  requestPermissions(arrayOf(Manifest.permission.CAMERA), REQUEST_CODE)
}

What It Enables

Users gain control over their personal data, granting permissions only when necessary, which builds trust and protects privacy.

Real Life Example

A photo app asks for camera access only when you tap the button to take a picture, not when you first open the app.

Key Takeaways

Manual permission requests give apps too much access upfront.

Runtime permissions ask users at the right moment, improving control.

This protects user privacy and builds trust in apps.

Practice

1. Why do Android apps request runtime permissions instead of asking for all permissions at install time?

easy

A. To protect user privacy by asking only when the permission is needed

B. To make the app install faster

C. To reduce the app size

D. To avoid asking the user any questions

Solution

1. Step 1: Understand runtime permissions purpose

   Runtime permissions ask users only when a feature needs access, protecting privacy.

2. Step 2: Compare with install-time permissions

   Install-time permissions ask all at once, which can overwhelm users and reduce control.

3. Final Answer:

   To protect user privacy by asking only when the permission is needed -> Option A

4. Quick Check:

   Runtime permissions = protect privacy [OK]

Hint: Runtime permissions ask only when needed, protecting privacy [OK]

Common Mistakes:

• Thinking runtime permissions speed up installation
• Believing runtime permissions reduce app size
• Assuming runtime permissions avoid user prompts

2. Which Kotlin code snippet correctly checks if the app has permission to access the camera before requesting it?

easy

A. if (checkPermission(Manifest.permission.CAMERA)) { /* permission granted */ }

B. if (hasPermission(Manifest.permission.CAMERA)) { /* permission granted */ }

C. if (ContextCompat.checkSelfPermission(this, Manifest.permission.CAMERA) == PackageManager.PERMISSION_GRANTED) { /* permission granted */ }

D. if (requestPermission(Manifest.permission.CAMERA)) { /* permission granted */ }

Solution

1. Step 1: Identify correct permission check method

   ContextCompat.checkSelfPermission returns permission status in Android Kotlin.

2. Step 2: Verify correct comparison

   Compare result to PackageManager.PERMISSION_GRANTED to confirm permission granted.

3. Final Answer:

   if (ContextCompat.checkSelfPermission(this, Manifest.permission.CAMERA) == PackageManager.PERMISSION_GRANTED) { /* permission granted */ } -> Option C

4. Quick Check:

   Use ContextCompat.checkSelfPermission == PERMISSION_GRANTED [OK]

Hint: Use ContextCompat.checkSelfPermission with PERMISSION_GRANTED check [OK]

Common Mistakes:

• Using non-existent methods like checkPermission or hasPermission
• Calling requestPermission instead of checking permission
• Not comparing to PERMISSION_GRANTED constant

3. Given this Kotlin code snippet, what will be the output if the user denies the permission request?

if (ContextCompat.checkSelfPermission(this, Manifest.permission.LOCATION) != PackageManager.PERMISSION_GRANTED) {
  ActivityCompat.requestPermissions(this, arrayOf(Manifest.permission.LOCATION), 100)
} else {
  println("Permission already granted")
}

medium

A. Nothing printed immediately; permission request dialog shown

B. Permission already granted

C. App crashes due to missing permission

D. Permission denied message printed

Solution

1. Step 1: Analyze permission check condition

   Permission is not granted, so requestPermissions is called to ask user.

2. Step 2: Understand immediate output

   requestPermissions shows dialog asynchronously; no immediate print happens.

3. Final Answer:

   Nothing printed immediately; permission request dialog shown -> Option A

4. Quick Check:

   Permission request dialog shows, no immediate print [OK]

Hint: requestPermissions shows dialog, no immediate output printed [OK]

Common Mistakes:

• Assuming println runs before user responds
• Expecting crash without handling permission denial
• Thinking denial message prints automatically

4. What is wrong with this Kotlin code snippet for requesting permission?

ActivityCompat.requestPermissions(this, arrayOf(Manifest.permission.READ_CONTACTS), 1)
if (ContextCompat.checkSelfPermission(this, Manifest.permission.READ_CONTACTS) == PackageManager.PERMISSION_GRANTED) {
  println("Permission granted")
}

medium

A. println statement should be outside the if block

B. Permission check is done immediately after request, before user responds

C. Manifest.permission.READ_CONTACTS is not a valid permission

D. requestPermissions method is called with wrong parameters

Solution

1. Step 1: Understand requestPermissions behavior

   requestPermissions shows dialog asynchronously; user response is not immediate.

2. Step 2: Identify timing of permission check

   Checking permission immediately after request will not reflect user's choice yet.

3. Final Answer:

   Permission check is done immediately after request, before user responds -> Option B

4. Quick Check:

   Check permission after user response, not immediately [OK]

Hint: Check permission after user responds, not right after request [OK]

Common Mistakes:

• Checking permission immediately after requestPermissions call
• Assuming requestPermissions blocks until user answers
• Misusing permission constants

5. An app needs to access the user's location only when showing nearby stores. How should it use runtime permissions to protect user privacy best?

hard

A. Request all permissions including location at install time

B. Request location permission immediately when the app starts

C. Never request location permission and guess location from IP

D. Request location permission only when the user tries to view nearby stores

Solution

1. Step 1: Identify when location is needed

   Location is needed only when user views nearby stores, not before.

2. Step 2: Apply runtime permission best practice

   Request permission only at the moment feature is used to respect privacy and reduce prompts.

3. Final Answer:

   Request location permission only when the user tries to view nearby stores -> Option D

4. Quick Check:

   Request permission when feature used, protect privacy [OK]

Hint: Ask permission only when feature needs it, not before [OK]

Common Mistakes:

• Requesting permission too early at app start
• Requesting all permissions upfront at install
• Avoiding permission request and guessing location