Ctrl+Z Therapy
CasesQuick answersGuides10-minute checklistHow we testCartoonSend it in

Android app asks for contacts? Google Play's new rule from January 27, 2027

Ship ItChecked against the official sourceNot legal advice.

Source checked 29 Oct 2026 · Published 29 Oct 2026 · Last reviewed 29 Oct 2026 · By Ctrl+Z Therapy (how we test)

The short answer

Google Play's Contacts Permission policy says apps that target Android 17 or later (API level 37+) may only request the READ_CONTACTS permission if the Android Contact Picker is not sufficient. Apps that don't need broad access must use the Contact Picker, which Google describes as a more secure, easy-to-integrate alternative that minimizes data collection. Policy compliance is mandatory from January 27, 2027 for all apps that target Android 17 or later.

What to do

  1. Check whether your app requests READ_CONTACTS.
  2. Only using contacts to share files, collaborate, invite or refer someone to join a service, or choose a contact to transact with? Google says such apps typically should not request the permission. Use the Android Contact Picker instead.
  3. Really need broad access? Complete a declaration in the Play Console to demonstrate your access needs and justify why the Contact Picker is insufficient.
  4. Ask your AI tool: "Check whether this Android app requests READ_CONTACTS. If it's only used to invite people or pick a contact, replace it with the Android Contact Picker."

Good to know

  • Google Play says a 30-day automatic self extension will be available in the Play Console.

Source

Checked on 29 Oct 2026. Prices, limits and settings change, so check the source before you rely on them. Not legal advice.

Related