Loading page
About this tool
India-first audit of address, always-on location, contacts and SMS permissions in food delivery apps.
The Food Delivery App Permission Audit scores a food or grocery app against the three things it must do: locate the delivery address, take payment and track one live order. Fifteen permissions are weighted by sensitivity, with background location treated as optional rather than core — live order tracking runs through a foreground service with a visible notification, so 'Allow all the time' buys the app a movement history it does not need. The audit is written India-first, where masked in-app calling already connects you to the delivery partner without any call log or SMS access.
Open Food Delivery App Permission Audit on AltFTool — it loads instantly in your browser.
Add your input to the workspace.
Adjust the options until the result looks right.
Copy or download the output and put it to work.
Live tracking is a foreground service job, so 'all the time' location is treated as an optional extra, not a requirement.
Indian platforms connect you to a rider through a routed number, so call log and CALL_PHONE grants score as exposure.
The revoke list is ordered by sensitivity, so the biggest win is at the top rather than buried in a checklist.
No. Tracking an order you placed runs in a foreground service with a visible notification, which works while the app is open or in the notification shade. ACCESS_BACKGROUND_LOCATION only adds tracking after you leave the app, and Google Play classes it as a restricted permission needing a core-functionality declaration.
Usually for a 'send a meal to a friend' or referral feature, which needs one phone number typed in, not the whole address book. Granting it uploads details of people who never agreed to anything, so it scores as unnecessary.
No. Android's SMS Retriever and SMS User Consent APIs deliver the single matching login message to the app with no permission at all. Full READ_SMS access exposes every bank alert and private message on the phone for no extra function.
Yes, in most cases — saved addresses work without it and you can search by locality or pincode. Precise location mainly speeds up dropping a pin on a new address, so 'While using the app' is a reasonable middle ground.