Google has rolled out an API for Android developers which allows them to have more control over how their apps are downloaded, according to a report. The API – dubbed “Play Integrity” – is said to carry a new functionality that forces users to only download the app through the Google Play Store, effectively blocking sideloading. It checks for the app’s status and if it is found to be “unlicensed”, the API can block it from running on the Android device.
Android Play Integrity API
Android’s Play Integrity API was first introduced at Google I/O 2024 in May and it has recently received this new ability. The API checks for “interactions and server requests are coming from genuine app binary running on a genuine Android device”, according to Google.
In a report, Android Authority’s Mishaal Rahman highlighted that the API’s new feature allows developers to overlay a new dialogue box that says, “Get this app from Google Play”, if it has been sideloaded from a third-party source on the Android device. Users can choose to install the app again from the Google Play Store by selecting the Install from Play option. This is reported to replace the sideloaded version of the app with the official version.
In a post on X (formerly Twitter), tipster AssembleDebug revealed that one of the most prominent apps that have recently started enabling this feature is ChatGPT – OpenAI’s conversational chatbot powered by artificial intelligence (AI). Other reported apps include Tesco and BeyBlade X.
App Access Risk Feature
In addition to the blocking of sideloaded apps, the Play Integrity API is reported to have another new functionality called “app access risk”. This feature is capable of verifying whether a user has installed apps that could capture the contents of the device’s screen or control its actions. It can then prompt them to close the application, potentially protecting them from malicious apps that can record screen while using sensitive applications.
However, Google says not all apps that meet the criteria will trigger the new app access risk prompt.
