App permissions, explained
Exactly which Android permissions the StateNull-SecoM app requests, what each is for, and whether it is optional. We request each permission at the point of use and only what a feature needs. No Google Play Services, no Firebase, no analytics or advertising SDKs. Last updated 17 July 2026.
Core capture & communication
| Camera | Take the photos, document scans and video you capture; join video calls. Prompted when used. |
| Microphone | Record voice notes; audio during calls. Prompted when used. |
| Photos & media (read) | Import an existing image/video to seal, verify or attach. Scoped, prompted. |
| Notifications | Ring/alert incoming secure calls and case reminders. Optional, prompted (Android 13+). |
| Internet & network state | Sync end-to-end-encrypted data and place calls. |
| Location (fine/coarse) | Optional, off by default. Only for the forensic “where” tag on a capture; OS provider, no Google Play Services; never collected unless you enable it. |
| NFC | Optional. Read an ICAO passport / residence-permit chip to attach a self-read ID to a Trust-E agreement; disabled on devices without NFC. |
Reliable incoming calls (self-hosted, no Google push)
| Foreground service (data sync / microphone / camera) | Keep a call ringing and its media alive when the app is backgrounded — StateNull runs its own listener instead of Google FCM. |
| Full-screen intent, wake lock, vibrate | Show and ring a full-screen incoming-call screen and wake the device. |
| Run at startup, ignore battery optimisation | Restart the call listener after a reboot so calls still ring; ask to be exempt from Doze so ringing is not delayed. |
Organisation-managed devices only (MDM / UEM)
These are used only when your organisation enrols the device for management. They are not used on personal, unmanaged installs, and they are controlled by your organisation’s administrator — you are shown this and consent at enrolment.
| Installed-app inventory (query all packages) | Report a managed device’s installed-app list for security-compliance inventory to the organisation administrator. |
| Device administrator | Apply the organisation’s screen-lock/password policy and allow lock or wipe of a lost managed device. |