Search code examples
androidandroid-security

Protected Android industry app


We have some Android apps are installed to our company smartphones with Android 7.

Sometimes our users uninstall those apps or making dificult to use it properly.

We asked our Android developers investigate posibility to prevent users to

  1. Uninstall app
  2. Stop services
  3. Turn off Mobile Data or WIFI services

They answerd is impossible to do it at all.

Well... We like to configure Android devices for special company usage with strong restrictions as described above.

Is it possible to archive it using Android SDK? Is any posibility to do it?

Thank you!

--------- UPDATE #1 ------------------------------------------------

I gues the best idea is to use Android Device Administration API https://developer.android.com/guide/topics/admin/device-admin.html

and mix it with approaches described

Require a password to uninstall/remove application

Android - Start service on boot

Application without app launcher icon

I mean once we install custom enterprise app APK we can also install app/service without ICON and is having 'special' name so user cannot by his knowlidge identify it by icon (no icon at all) and by service name (it should mimic a native Android Service). This non-icon-service should listen activites user does and prevent to execute him to do dangerous activity by activating PIN/PASSWORD screen. Well user shouldnt know PIN/PASSWORD.

This kind of workaround looks likes a legal fishing way to avoid breaking stuff we need like

  1. Uninstall app
  2. Stop services
  3. Turn off Mobile Data or WIFI services

---------- UPDATE #2 --------------------------------

The conclusion is the only including app in firmware is only way to make app undeletable 100%. There is no other options.

---------- UPDATE #3 and the last one ------------------

Utilize and complement Android's enterprise features


Solution

  • The link you posted in the comment says it all.

    All you have to do first is to root the devices and then make the your apps System apps using (ES file explorer, Titanium backup, /system/app mover ★ ROOT ★ ...) and then unroot the devices.

    Also you can you a parental control app like (Norton Family Parental Control , Net Nanny , Qustodio Parental Control , Mobicip ....) check this link.

    As for a legal and secure way you can always contact the company and ask to include your apps as system apps.