

On the other hand, tucked away, immediately after perhaps the most innocuous permission, is the most invasive: full Internet access. That's something you would reasonably expect from a keyboard application. How much data does it really need to download without telling you? Quite why a keyboard needs the ability to not just download files, but do so without telling the user, certainly is worrying. The ability to download files without notification is where it starts to get properly concerning - note that these permissions are tucked away at the bottom of the list, so you must scroll to reach them. Alternatively, they could use ASEC containers to transparently get more storage space on your SD card, without requiring any access to your persona files on the SD card. Ideally, Google would only use the secure /data/data storage, and therefore wouldn't need this. The ability to modify or delete the contents of USB storage is somewhat strange, but while it does allow access to all your data stored on your "SD card," there's unfortunately no real way to do this in any more granular way. This makes sense, and is something justifiable for a keyboard. That's fair enough-Google obviously want to add your contact names to the spell-checker and auto-complete databases. I have absolutely no idea why this is needed, nor why people are willing to give this information over. That means it's possible for them to see what Google/Dropbox/ Twitter/Microsoft Exchange/Facebook accounts you have available on your phone. This means it has the ability to know who you are, and all of the Email (and other) accounts you have available on your device. First off, Google Keyboard has access to your own contact card, and accounts on your device. Let's take a look at what's going on here. For your viewing pleasure however, I have brought the list together into a single view.

Take note that I had to edit up the below image, as the Play Store web interface does its best to prevent you from seeing the full list of permissions in one view, Even with a 20" monitor in vertical orientation, it still chose to hide most of them within this scrolling view. Despite these applications having direct access to every key you press, in entering every URL you visit, text message or Email you send, and password you type, it appears few people actually consider the permissions used by their keyboard, and the implications of this.
