App Sandbox and Data Boundaries
Understand how Android separates app identities, private data, shared storage and privileged system areas.
Understand how Android separates app identities, private data, shared storage and privileged system areas.
Core ideas
Use these points to build an accurate technical model before changing the device.
- Each installed app normally runs under its own Linux user identity.
- Private app data is different from media and documents in shared storage.
- Root, debugging and accessibility privileges change the normal trust boundary.
Decision rule
Grant access according to the task, not because an app asks during first launch.
Apply it on your phone
Record the device facts, source and expected result. Make one reversible change, observe the outcome, and keep the evidence needed to undo it.
Official reference
Use the platform documentation below to verify details that can change between Android releases.