READ_MEDIA_IMAGES / VIDEOTo show the photos and videos already on your phone. They are read for display only.
ACCESS_MEDIA_LOCATIONLets the details panel read a photo's own EXIF. Location is never stored by us and never transmitted.
READ_MEDIA_AUDIOPlayer only. To list and play the music already on your phone. A file is changed only when you edit its tags or delete it, and Android asks you to confirm each time.
RECORD_AUDIORecorder only. Audio is written to a file on your device and stays there.
Storage accessFiles only. Needed to list, copy, move, rename and delete the files you choose to act on.
QUERY_ALL_PACKAGESLauncher only. A home screen has to list every installed app to show it. The list stays on the phone.
Notification accessLauncher only, and only if you turn on badges. It counts notifications per app to draw a dot; their content is not read or kept.
Accessibility serviceLauncher only, and only if you enable it. Used to open the notification shade, quick settings or recent apps, and to lock the screen, from a gesture. It reads nothing on screen.
READ_CONTACTSLauncher only, and only if you turn on contact search. Contacts are searched on the phone and never leave it.
INTERNET — Launcher weatherLauncher only, and off by default. With weather on, it sends the coordinates of the city you picked to Open-Meteo for a forecast, at most once every two hours. No account, no key, no identifier.
INTERNET — BrowserBrowser only. It loads the pages you open, sends what you type in the address bar to the search engine you chose, and talks to addons.mozilla.org to search, install and update extensions. Nothing about you is sent to us.
CAMERA, RECORD_AUDIO, LOCATION — BrowserBrowser only, and only when a site you opened asks and you allow it. The permission is passed to that site for that page; we receive nothing.
INTERNET — Player cover searchPlayer only, and only when you edit a track's tags and press Search under Search online. The search text, artist and album unless you change it, goes to Apple's iTunes Search API, and the covers it finds are downloaded to show you. Like any web request, Apple sees your IP address. Nothing else is sent, and nothing at all reaches us.
INTERNET — not requestedGallery ships without it. You can verify this in the app's permission list on Google Play.