The ultimate privacy manager! XPrivacy can prevent applications from leaking privacy sensitive data.
XPrivacy can restrict the categories of data an application can access.
This is done by feeding an application with no or fake data.
There are several data categories which can be restricted, for example contacts or location.
For example, if you restrict access to contacts for an application,
this will result in sending an empty contact list to the application.
Similarly, restricting an application's access to your location
will result in a fake location being sent to the application.
XPrivacy doesn't revoke (i.e. block) permissions from an application,
which means that most applications will continue to work as before and won't force close.
There are two exceptions to this, access to the internet and to external storage (typically an SD card)
is restricted by denying access (revoking permissions).
There is no other way to implement this, since these permissions are handled by Android in a special way.
Android delegates handling of these permission to the underlying Linux network/file system.
XPrivacy will fake offline (internet) and/or unmounted (storage) state,
but some applications try to access the internet/storage nevertheless,
potentially resulting in crashes or error messages.
If restricting a category of data for an application results in problems for the application,
it is possible to allow access to the data category again to solve the issue.
By default, all newly installed applications will have no access to any data category at all,
to prevent a new application from leaking sensitive data right after installation.
Shortly after installing a new application,
XPrivacy will ask which data categories you want the new application to have access to.
XPrivacy comes with an application browser,
which allows you to quickly enable or disable applications' access to a particular data category
for example to view your calendar.
It is also possible to edit all data categories for one application.
To help you identify potential data leaks,
XPrivacy will monitor attempts made by all applications to access sensitive data.
XPrivacy will display an orange warning triangle icon as soon as data of a data category has been used.
If an application has requested Android permissions to access data in a data category,
this will be displayed with a green key icon.
XPrivacy will also display if an application has internet access,
indicating that the application poses a risk of sharing the data it obtains with an external server.
XPrivacy is built using the Xposed framework.
XPrivacy taps into a vast number of carefully selected functions of Android through the Xposed framework.
Depending on the function, XPrivacy conditionally skips execution of the original function
(for example when an application tries to set a proximity alert)
or alters the result of the original function (for example to return an empty message list).
XPrivacy has been tested with CyanogenMod 10, 10.1 and 10.2 (Android 4.1, 4.2 and 4.3),
and is reported to work with most Android version 4.0, 4.1, 4.2 and 4.3 variants, including stock ROMs.
Root access is needed to install the Xposed framework.