Android 15 has shaken up security habits and data compartmentalization. The updates at the end of 2024 are not just about interface tweaks: they change how applications access sensitive information and how developers distribute their products in Europe. We take stock of the most significant Android developments of the year, focusing on what public summaries overlook.
Android 15 Confidential Spaces: User Sandbox and Isolation of Sensitive Apps
Android 15 does not just offer a locked folder. The system introduces a confidential space that functions as a dedicated sandbox, where each application placed inherits distinct visibility and data access rules from the main profile.
Specifically, apps installed in this space (banking, encrypted messaging, health management) are protected by a PIN or biometric authentication separate from the main unlock. Notifications from these apps can be completely hidden, including content, and excluded from the recent apps view.
This mechanism goes beyond the old hidden notification options. It creates a hermetic perimeter: a third-party app running in the standard profile cannot detect the presence or query the data of an app confined in the confidential space. For enterprise fleets managed via Android Enterprise, this opens the possibility of separating a truly isolated personal profile without resorting to a third-party MDM. Technical publications on androidinside.fr regularly detail these advanced security mechanisms.
Sensitive Permissions and Background Activity Control on Android
Granular permissions are becoming the cornerstone of mobile security. Since Android 13, the system has gradually restricted background access. Android 15 takes this logic further by imposing explicit justifications for each sensitive permission requested by an app.
Three changes deserve the attention of developers and savvy users:
- The security libraries integrated into the system detect abnormal behaviors of an app in the background and can automatically revoke a permission that has remained unused for an extended period.
- Background activity control now reports apps that consume network or sensor resources without recent user interaction, with a dedicated system notification.
- Apps targeting the Android 15 SDK must precisely declare why they request access (fine location, microphone, camera), under penalty of rejection during the Google Play review.
For a user, this translates into a more readable privacy dashboard. For a developer, it is an additional compliance constraint to integrate from the design phase.
European DMA and Google Play: What Changes for Android App Distribution
The Digital Markets Act (DMA) has forced Google to modify the operation of its store in Europe. Developers can now direct users to alternative payment channels without exclusively going through Google Play billing.
Google has also relaxed some rules regarding third-party stores and sideloading. European manufacturers can pre-install competing app stores without additional friction imposed by Google. This opening remains regulated: apps distributed outside the Play Store must still meet the system’s security requirements, and Google retains control over the Play Protect APIs.
Concrete Consequences for Independent Developers
The European Commission has fined Google for anti-competitive practices related to its search engine and store. These decisions are not anecdotal: they reshape the maneuvering margins of Android app publishers in Europe.
A developer distributing via an alternative store gains pricing autonomy but loses the algorithmic visibility of the Play Store. The choice of distribution channel becomes a strategic arbitration, not just a technical question. We observe that the majority of mid-sized studios continue to favor Google Play for discoverability while testing direct channels for updates and in-app purchases.
Unknown Android Tips: Theft Detection Lock and Anti-Fraud Protection
Android 15 includes a feature called Theft Detection Lock that leverages the phone’s sensors and an embedded learning model to detect a snatching or a sudden movement characteristic of a pickpocketing. The smartphone locks instantly without waiting for the usual sleep delay.
The system complements this approach with a real-time anti-fraud protection module. During a phone call, if an app tries to manipulate the display or overlay a deceptive screen (a classic technique of tech support scams), Android blocks the overlay and displays a system warning.
Recommended Settings
These features are not all enabled by default. Theft Detection Lock can be configured in the security settings, under the “Theft Protection” section. We recommend checking that offline auto-lock is also enabled: it protects the device even when the thief cuts the network connection to prevent a remote wipe.
The combination of confidential space, theft detection, and enhanced permission control places Android 15 on ground that previous versions only covered superficially. Android security shifts from a reactive model to a preventive model integrated into the system, and this is the most significant change of the year for both users and developers.
