I’ve been writing about Android since 2011, with a focus on device reviews, Samsung and Google Pixel hardware, and the latest happenings in the ecosystem. In my entire writing career, I’ve reviewed more than 75 Android phones.
Carrying both a Samsung or Pixel flagship and an iPhone as a daily driver provides me with deep insight into how Android works and how it compares to iOS.
I have been writing for Android Police since 2021, covering news, how-tos, and features. You can find my previous work on Neowin, AndroidBeat, Times of India, iPhoneHacks, MySmartPrice, and MakeUseOf.
When not working, I tend to mindlessly scroll through X, play with new AI models, or go on long road trips. You can reach out to me on X or drop a mail at rajesh@androidpolice.com.
Sign in to your Android Police account
Google has made several privacy-focused improvements to Android as part of recent releases to protect unsuspecting users from scammers and malicious actors. Building on that, the company has announced another change in Android 18 that will prevent apps from directly writing to contacts in your phonebook.
Google’s initial announcement on October 21 flew under the radar, but community manager Mishaal Rahman posted a thread on X to bring attention to this change. As he rightly points out, apps that need to save even a single contact request the WRITE_CONTACTS permission, which allows them to add or modify any contact in your phonebook.
This is an issue, as it opens the door for malicious apps to silently change numbers or add fake contacts to your phonebook with names resembling your friends or family.
To safeguard users, starting with Android 18, Google will provide a standardized contact editor interface. This will ensure that apps that only need to add or edit some contacts do not require the more powerful WRITE_CONTACTS permission. Mishaal also shared a mock-up UX of the half-sheet contact editor in the X thread that users will see.
A full-screen editor is also available to enter more details, like the person’s email address, company name, birthday, etc.
None of this means that it’s the end of third-party contact managers, dialers, or spam blockers. Instead, on Android 17 and later, they can request access to the new MANAGE_CONTACTS permission to continue functioning.
This permission will go live with the upcoming Android 17 QPR2 release. Then, starting sometime in 2027 and “not earlier than the upcoming Android release,” Google will require apps that need access to the MANAGE_CONTACTS permission to submit a declaration through the Play Console.
A safer phonebook, with fewer surprises
Users will need to enable this permission through Settings > Special app access > Manage contacts, rather than through a regular permission pop-up. Google also says an app cannot qualify for this broader access simply because its developer wants to keep a custom contact editor instead of using the standardized interface.
This move has another benefit. Google says existing contact editors don’t always behave consistently across Android phones. Some don’t carry over information an app provides, while others save a contact when the user swipes back or presses the back button by accident.
By standardizing the edit interface, Google will ensure that saving or updating a contact works consistently across Android phones.