Scoped Storage: Why Apps Can't See All Your Files Now
Older versions of Android let almost any app with a single storage permission read most of the files on your phone. Scoped storage changed that. Apps now get access to their own folder by default, and to shared photos, videos and documents only in narrower ways. It is one of the quiet privacy improvements, and it explains why a "cleaner" or file app may now ask for something unusual.
- Under scoped storage, each app has its own private area and sees other files only through defined routes.
- Apps can use the system photo or file picker so you choose exactly what they get, without a broad permission.
- A special "all files access" permission exists for a few app types, and is worth a second look when an app requests it.
- It applies from Android 10 in a limited way and became broader from Android 11.
What changed
Android's documentation describes scoped storage as a model that gives each app access to its own app-specific directory and to media it created, while access to other shared files goes through system APIs and permissions.[1] It was introduced in Android 10 and made the default for apps targeting Android 11 and later. Before it, a broad storage permission could expose a lot of unrelated data.
How an app can get your files now
| Route | What the app gets |
|---|---|
| App-specific storage | Its own folder, with no permission needed. |
| Photo or file picker | Only the items you choose. This is the most private option. |
| Media permissions | Access to shared photos, videos or audio, depending on the Android version. |
| Storage Access Framework | A folder or document you select with the system picker. |
| All files access | A special permission granted in settings, meant for file managers, backup tools and similar apps. |
The "all files access" exception
Google allows a small group of apps, such as file managers or antivirus tools, to request broad access through the MANAGE_EXTERNAL_STORAGE permission, and Google Play restricts which apps may use it.[1] You grant it in a special settings screen rather than a pop-up. If a game or a simple utility asks for it, that is a reason to stop and ask why; see how to look at requests in our permissions routine.
Why it matters for privacy
- A random app cannot quietly read every document and photo.
- The picker model means you decide what an app sees, one selection at a time.
- Apps cannot clutter or snoop through each other's folders as easily.
It also reflects the idea behind the app sandbox: apps are isolated unless you open a door.
What you can do
- Prefer apps that use the photo picker over ones that ask for all photos.
- Check "All files access" in Settings and remove it from apps that do not need it.
- Be cautious with cleaner, booster and "free" file apps, which often ask for broad access.
- On a child's phone, review storage access when you review permissions.
A note for developers
If you build apps, prefer app-specific storage for your own files, the photo picker or Storage Access Framework for user content, and request broad access only when the app's core purpose needs it. Google Play restricts all files access to a limited set of use cases, so plan to justify it. Test on a range of Android versions, because behaviour differs between Android 10, 11 and later.
For users, the practical result is simple: apps that respect scoped storage ask for less and see less.
Frequently asked questions
What is scoped storage in Android?
It is a storage model that limits each app to its own folder and to media it created, with other files reached through pickers or permissions.
Which Android versions use scoped storage?
It was introduced in Android 10 and became the default for apps targeting Android 11 and later.
Why does a file app need "all files access"?
A file manager or backup tool may need to see files across the device. Google restricts which apps can use this permission.
Can I stop an app from seeing my photos?
Yes. Revoke its media or photo access in the permission manager, or use apps that let you pick individual photos instead.
Does scoped storage stop all file snooping?
No. It narrows access, but an app can still use permissions you grant. Review what you allow.
- Storage updates in Android 11 — Android Developers — scoped storage, media access and all files access.
- Application Sandbox — Android Open Source Project — how apps are isolated.