DEV Community

Cover image for The Secret App That Scans Your Photos Without Asking
Martijn Assie
Martijn Assie

Posted on

The Secret App That Scans Your Photos Without Asking

#safetycore #android #cellphone #smartphone

The Secret App That Scans Your Photos Without Asking

Most Android users believe they're in control of what runs on their phones. After all, you only use the apps you've installed, right?

Not quite.

Hidden deep inside every modern Android device is an app you didn't download, you can't see in your app drawer, and you never gave permission to. Its name is Android System SafetyCore, and its job is to quietly scan the photos on your device.

You read that right: photos you've taken, stored, or shared may be checked in the background by software you never chose to install.

How SafetyCore got on your phone

SafetyCore didn't arrive through the Google Play Store like normal apps. Instead, it was pushed to millions of Android devices through a Google Play Services update sometime in 2023. This means it bypassed the usual app installation process where you'd see what permissions an app wants and decide whether to grant them.

One day it simply wasn't there, and the next day it was — running silently in the background, analyzing your images without fanfare or notification.

This method of deployment is particularly concerning because Google Play Services updates are considered critical system updates. Your phone downloads and installs them automatically, often without even telling you it's happening. Most users assume these updates only contain security patches or performance improvements, not entirely new applications that scan their personal content.

What SafetyCore actually does

According to Google's documentation, SafetyCore is designed to identify potentially inappropriate or explicit images on your device. When it detects such content, it can blur the image and display an age verification prompt asking if you're over 18 before allowing you to view it.

This happens primarily in Google Messages when someone sends you an image, but SafetyCore's scanning capabilities extend beyond just incoming messages. The app has access to your device's storage, which means it can potentially analyze any image file on your phone.

The stated goal is admirable: protecting users (especially minors) from unwanted explicit content. However, the implementation raises several red flags that privacy-conscious users should understand.

Why it matters

Google explains SafetyCore as a "safety feature" — designed to filter explicit images and keep people protected. On paper that sounds fine. In reality:

  • It runs on every device, not just kids' phones
  • It comes via silent updates, without warning
  • It has full internet access even though Google claims the scanning is "local"
  • It bypasses the normal permission prompts you see with other apps
  • It updates itself automatically without user consent
  • It operates with system-level privileges that regular apps don't have

It's the kind of system app most users never even notice, but once you know about it, it's hard to ignore.

The fact that SafetyCore runs on adult devices by default is particularly problematic. While content filtering might make sense for parental controls on children's devices, having it active on every Android phone assumes all users want their images pre-screened by Google's algorithms.

The privacy problem

The biggest issue isn't just what SafetyCore does — it's the way it was introduced. It never asked for your consent. It updates itself automatically. And it hides under system processes where almost nobody will look.

The internet access contradiction

Perhaps most concerning is SafetyCore's internet connectivity. Google claims that image scanning happens entirely on your device — a process called "on-device processing." This should mean that your photos never leave your phone and aren't sent to Google's servers for analysis.

However, SafetyCore maintains active internet permissions and regularly communicates with Google's servers. This raises obvious questions: if the scanning truly happens locally, why does the app need constant internet access?

Possible explanations include:

  • Downloading updated content detection models
  • Sending usage statistics or scan results to Google
  • Receiving new filtering rules or policy changes
  • Uploading image hashes or metadata for analysis

Google hasn't provided clear transparency about exactly what data, if any, SafetyCore transmits. For privacy-focused users, this lack of clarity is deeply troubling.

Hidden from view

Unlike every other app on your phone, SafetyCore has no user interface. You can't open it, configure its settings, or see what it's doing. It operates entirely in the background, making decisions about your content without your knowledge or input.

This invisibility means most users have no idea the app exists, let alone that it's analyzing their personal photos. Even tech-savvy users might miss it unless they specifically look for system apps in their device settings.

Automatic updates

SafetyCore updates itself through Google Play Services, which means new versions can be pushed to your device without your knowledge or consent. These updates could potentially expand the app's capabilities, change its behavior, or modify what data it collects — all without notifying you.

This is fundamentally different from regular apps, where you can choose whether to install updates and can read about what changes each version brings.

The broader implications

SafetyCore represents a troubling trend in the tech industry: the gradual erosion of user control over personal devices. When companies can silently install monitoring software that analyzes private content without explicit consent, it sets a dangerous precedent.

Consider what this means for:

Digital autonomy: Your phone should work for you, not monitor you. Having hidden apps scan your content undermines the basic principle that you should control what happens on your own device.

Informed consent: Every other app must ask permission to access your photos. SafetyCore was granted this access through a system update without any clear opt-in process.

Transparency: Users deserve to know what software is running on their devices and what it's doing with their data. SafetyCore's invisible operation violates this principle.

Trust: When companies install monitoring software without clear disclosure, it damages the trust relationship between users and technology providers.

For me, that crosses the line. If an app has access to images on my phone, I want to know when it's running, what it's sending, and how I can stop it.

What you lose by keeping SafetyCore enabled

Beyond the privacy concerns, SafetyCore can impact your device's performance and battery life:

Battery drain: Constantly scanning images in the background consumes processing power and battery. Users have reported improved battery life after disabling SafetyCore.

Storage access: The app maintains persistent access to your device's storage, which can slow down file operations and photo management.

Data usage: SafetyCore's internet connectivity means it may use your mobile data or Wi-Fi bandwidth for its communications with Google's servers.

False positives: The app's content detection isn't perfect. Users have reported legitimate images being incorrectly flagged or blurred, creating frustrating user experiences.

What you can do

Here's the good news: you can shut it down. You don't need root access, and you don't have to hack your phone. The settings are already there — you just need to know where to look.

The process involves several steps:

  • Cutting off its internet privileges
  • Restricting its background activity
  • Disabling or even uninstalling it (depending on your device)
  • Removing hidden "always-on" data permissions

Device-specific removal instructions

The exact steps for disabling SafetyCore vary depending on your phone manufacturer and Android version. Here are detailed instructions for all major Android device brands:

Samsung Galaxy phones

Method 1: Direct disable

  1. Open Settings
  2. Tap Apps or Application Manager
  3. Tap Filter and sort or the three-dot menu
  4. Select Show system apps
  5. Scroll to find Android System SafetyCore
  6. Tap on it and select Disable
  7. Confirm when prompted

Method 2: Through Device Care (One UI 4.0+)

  1. Open Settings > Device care
  2. Tap App optimization
  3. Tap the three-dot menu > Advanced
  4. Find SafetyCore and add it to Deep sleeping apps

Method 3: Battery optimization

  1. Settings > Device care > Battery
  2. Tap Background app limits
  3. Add SafetyCore to Sleeping apps or Deep sleeping apps

Google Pixel phones

Standard method:

  1. Settings > Apps
  2. Tap See all apps
  3. Find Android System SafetyCore
  4. Tap Disable or Uninstall (if available)

Remove special permissions:

  1. Settings > Apps > Special app access
  2. Find Apps that can always use data
  3. Toggle OFF SafetyCore if present
  4. Check Device admin apps and remove SafetyCore if listed

Battery restriction:

  1. Settings > Battery > Battery usage
  2. Find SafetyCore in the list
  3. Tap it and select Restricted

OnePlus phones (OxygenOS)

  1. Settings > Apps & notifications
  2. See all apps > three-dot menu > Show system
  3. Find Android System SafetyCore
  4. Tap Disable
  5. Go to Battery optimization and set to Optimize

Additional OnePlus steps:

  • Settings > Privacy > Permission manager
  • Remove SafetyCore from sensitive permissions
  • Settings > Apps & notifications > Special app access
  • Remove from Unrestricted data

Xiaomi phones (MIUI)

Enable developer options first (if needed):

  1. Settings > About phone
  2. Tap MIUI version seven times rapidly
  3. Return to Settings > Additional settings > Developer options

Disable SafetyCore:

  1. Settings > Apps > Manage apps
  2. Filter icon > System apps
  3. Find Android System SafetyCore
  4. Tap Uninstall or Disable

MIUI-specific privacy settings:

  • Settings > Privacy protection
  • Analytics > Turn off data collection
  • Ad services > Opt out of personalization
  • Usage & diagnostics > Disable automatic sharing

Huawei phones (EMUI/HarmonyOS)

  1. Settings > Apps
  2. Apps (top menu)
  3. Filter icon > System apps
  4. Find SafetyCore > Disable
  5. Battery settings > Manage manually > Close after screen lock

Huawei privacy controls:

  • Settings > Privacy > Permission manager
  • Review and revoke SafetyCore permissions
  • Settings > Apps > Apps > Special access
  • Remove from data usage exceptions

Oppo phones (ColorOS)

  1. Settings > App Management
  2. Three-dot menu > Show system apps
  3. Find Android System SafetyCore
  4. Tap Disable

ColorOS additional steps:

  • Settings > Battery > App Battery Management
  • Find SafetyCore and set to Smart
  • Settings > Privacy > App permissions
  • Revoke unnecessary permissions

Vivo phones (FunTouch OS)

  1. Settings > Apps & permissions > App manager
  2. Filter icon > System apps
  3. Find SafetyCore > Disable

Vivo privacy settings:

  • Settings > Privacy and security
  • Permission manager > Review SafetyCore permissions
  • Data usage > Remove from exceptions list

Motorola phones

  1. Settings > Apps & notifications
  2. See all apps > three-dot menu > Show system
  3. Find Android System SafetyCore
  4. Disable

Realme phones

  1. Settings > App management
  2. Three-dot menu > Show system apps
  3. Find SafetyCore > Disable
  4. Settings > Battery > Battery optimization > Optimize

Nothing phones

  1. Settings > Apps
  2. See all apps > Menu > Show system apps
  3. Find Android System SafetyCore
  4. Disable

Additional hardening steps (all phones)

After disabling SafetyCore, take these extra precautions:

Remove data permissions:

  • Before disabling, go to SafetyCore's app info
  • Tap Permissions
  • Revoke Storage, Photos, Camera, and Microphone access

Block background data:

  • In SafetyCore's app settings
  • Turn OFF Background data
  • Turn OFF Unrestricted data usage

Battery optimization:

  • Ensure SafetyCore is set to Optimized battery usage
  • Add it to Sleeping apps if your phone has this option

Monitor after updates:

  • Check these settings after major Android updates
  • System updates may re-enable disabled apps
  • Quick check: Settings > Apps > System apps > look for SafetyCore

What happens when you disable SafetyCore

You will lose:

  • Automatic image blurring in Google Messages
  • Age verification prompts for flagged content
  • Some backend content analysis features
  • Certain parental control integrations

You will keep:

  • Full camera and photo functionality
  • Normal photo sharing and messaging
  • All other Google services and apps
  • Manual parental controls (if separately configured)
  • Third-party content filtering apps

You will likely gain:

  • Better battery life
  • Improved privacy and data control
  • Faster photo operations
  • Reduced background data usage

The bottom line

SafetyCore represents everything wrong with modern tech companies' approach to user privacy and consent. It was installed without permission, operates without transparency, and can't be easily removed by average users.

While Google's intentions may be good, the execution undermines user autonomy and informed consent. In a world where we're increasingly concerned about digital privacy, having hidden apps scan our personal content is unacceptable.

The instructions above will help you regain control over your device and your data. Whether you choose to disable SafetyCore completely or just restrict its permissions, the important thing is that you're making an informed choice about what runs on your phone.

Your device should work for you, not monitor you. Taking back control isn't paranoia — it's digital self-defense.

Frequently Asked Questions

⭐ What exactly is Android System SafetyCore?

SafetyCore is a hidden system app that Google pushed to Android phones through Play Services updates. It scans your images for inappropriate content and can blur photos while asking for age verification. The problem is it runs on all devices without asking permission first.

⭐ Can I completely uninstall SafetyCore from my phone?

Some phones allow full uninstallation, but most only permit disabling it. The good news is that disabling SafetyCore stops it from scanning your photos and prevents most of its background activity, which achieves the same privacy goals.

⭐ Why does SafetyCore need internet access if scanning is local?

Great question that Google hasn't clearly answered. While they claim scanning happens on your device, SafetyCore maintains internet permissions to receive updates, send usage data, and potentially communicate with Google's servers in ways that aren't transparent to users.

⭐ Is it safe to disable SafetyCore on my Android phone?

Absolutely. Disabling SafetyCore won't break your phone, affect core Android functions, or void your warranty. Your camera, photos, messaging, and all other apps will continue working normally. You'll just lose some automatic content filtering features.

⭐ Will disabling SafetyCore affect Google Messages or other apps?

Google Messages will work perfectly after disabling SafetyCore. You simply won't see the blurred image warnings anymore, which is exactly what most users want. All messaging, photo sharing, and communication features remain fully functional.

⭐ Can SafetyCore turn itself back on after I disable it?

It might try to re-enable during major Android system updates. That's why it's smart to check your settings after big updates and repeat the disable process if necessary. The steps only take a minute to verify.

⭐ Why is SafetyCore installed on adult phones by default?

Google hasn't provided a clear explanation for this decision. Many adult users find it running on their devices without any notification or choice in the matter. Disabling it simply gives you back control over your own device and personal content.

⭐ What's the difference between disabling and restricting SafetyCore?

Disabling completely stops the app from running and scanning your photos. Restricting permissions (like removing storage access) limits what it can do but may still allow some background activity. For maximum privacy, disabling is the better option.

Thanks for reading! If this guide helped you reclaim control over your Android device, give it a reaction and consider following for more privacy-focused tech tutorials. Your personal data deserves protection, and you deserve to know what's running on your own phone.

Top comments (0)

Some comments may only be visible to logged-in visitors. Sign in to view all comments.