Some members here have been concerned about what the Android compatibility layer will do for security on the Sailfish OS and if indeed the security levels on Sailfish could be compromised in any way due to Android app compatibility.
It has been well documented that Android is a prime target for malware and other viruses so it is natural that people might be concerned under the circumstances.
Here is a tweet from Jolla where they address those concerns that any of you may have had:
Latest posts by jollatides (see all)
- Jolla: Weekly News Roundup V2 - October 30, 2013
- Jolla: Weekly News Roundup - October 21, 2013
- Sailfish: The App Story To Date - October 18, 2013

Security bu isolation rocks!
This could be really great news. I guess this will protect us from Google and their urge to invade our privacy. I hope this will not mean the android compatibility will turn out to be a bad experience with half working applications. I’m sure Jolla will be able to make this a great feature, so they have my blessing.
I think you’re like me – I really hate the way so many apps ask for your location and need access to contacts etc etc – it feels like such an invasion of privacy – and this goes for a lot of Android, IOS and WP apps often created by independent app makers. In some cases depending on the app itself, these details are truly required for the app to function, but in other instances I cannot see how a specific app requires all the information it claims is needed.
I think the only way to get away from this is not download those apps that make you feel uneasy – this will send a clear message to the app makers that this is a step too far for many.
So the answer in this case, is that those particular invasive Android apps will of course act in the same way as they do on Android. If they say they need access to this or that, then that’s what you can expect – at least you are pre-warned.
If you value your privacy over the function of the app you can always opt out or hopefully the native sailfish app makers will consider this point of view.
It’ll be interesting to see how they do this.
They’re presumably going to have to have some way for the Android apps to access your contacts, photos, accounts, calendar etc stored in the Sailfish side. If Android is totally isolated then you’d have to have two sets of everything.
On the other hand, I can see why sandboxing Android is desirable!
I definately hope that none of the android apps have any kind of access to calendars, contacts, accounts, photos, or any other personal data, otherwise what’s the point in sandboxing that unprivate app pit (android)
At most, you would have to manually give permission to the dalvik to access each kind of personal user data, so that we have some sane private defaults
Precisely! That’s exactly why I don’t even own a smartphone at the moment. It just doesn’t feel right to carry a tracking device with me all the time. It’s not only the apps, but aslo the OS itself. I just don’t trust Google, Apple and Microsoft with their inexplicable privacy policies. That’s why Jolla and Sailfish OS will be perfect for me (or at least the best option there is).
Tips:
-www.startpage.com (it’s an alternative search engine with privacy in mind)
-www.srware.net (SRWare Iron is a faster version of chrome, since it doesn’t try to invade your privacy)
Maybe the Sailfish Dalvik is a better VM than the Android Dalvik when we speak of security. It’s a pity that Nokia killed Symbian. It was the second best mobile operating system (after MeeGo/Maemo).
dont know why i am fascinated by nokia eos camera and 808 camera, cant decide between nokia pureview or swipe
lol, when Google’s official apps are themselves malware, this comment is just a joke!
this stupid reply button always puts the reply in a very confusing position in the thread. please correct this.
My reply was in response to Ben.
There are no security concerns if you’re smart about what you download! Android is not the huge target for malware that some claim it is. That is a myth spread by isheep(& other Google haters) & antivirus providers who want you to think you need their android app. The problem with android malware comes mostly from pirated versions of paid apps, which sometimes have been modified maliciously from the legal version. If you pay developers for their work instead of stealing it you’re unlikely to get malware.
“There are no security concerns if you’re smart about what you download! Android is not the huge target for malware that some claim it is. ”
You’re saying that Android doesn’t have malware as long as you don’t download any? Very weak argument.
How about if you can give empty or fake contactlist etc (those would exist by default). in dalvik, and can give all permissions, but the app would still be isolated?
Sure this won’t work with all apps, some needs gps etc, but maybe you could choose which one can have access to actual data.
Pingback: Problemi di sicurezza con le app Android: risolti | JollaIt
I’d like to see an OS where the user is asked to deny, grant, revoke, fake… data access for apps, if tizen or SAILFISH OS can do this… i will be a fanboy of it, if not.. i don’t see any advantage over ios android wp, because developers will try to access my data the same way they do it in other platforms.
It would be nice the option to optionally block apps from accessing:
Network
UUID
Phone Number
Email
Contacts
Camera
Location
Microphone
Photo, audio, video libraries
GPS
Identities
ETC…