Sideloaded apps on Android: how to see them and what to consider

Before you change anything

What sideloading is

Sideloading means installing an app without an app store: from an APK file you download or receive, from another app on the phone, or from a computer connected by cable. Android allows it, but asks you to give permission to each app that installs others.

Apps from Google Play and other app stores go through that store’s review. Sideloaded apps do not. Google’s help page warns that if you download apps from unknown sources, your phone and personal information can be at risk.

How to see where an app came from

Menu names differ between phone makers and Android versions. If you cannot find a screen, use the search bar at the top of Settings.

Why it matters for monitoring apps

An app that is meant to stay hidden does not have to pass an app store’s review if it is installed from a file by someone with access to the phone. That is why a stalkerware check looks at where apps came from.

A sideloaded app with a normal, visible icon is not a finding by itself. Plenty of useful apps are installed this way. It becomes worth a closer look when sideloading is combined with other signs, for example:

• the app has no icon, or its icon was switched off;
• it has accessibility access or notification access;
• it is a device admin app;
• its name looks like a system service.

For more on apps without an icon, see find hidden apps on Android.

If you sideload an app yourself

Sideloading can be a reasonable choice. A few habits reduce the risk:

How Applore treats it

In Needs your review, sideloading is one signal, never a verdict on its own:

• What counts as a store. Google Play, F-Droid and several phone makers’ stores, such as Galaxy Store, Huawei AppGallery, HONOR App Market and Palm Store, count as app stores. Other installers count as sideloaded.
• Where it came from. For each flagged app, Applore says whether it was installed from Google Play, another store, an APK file opened on the phone, a computer over USB, or another app.
• Levels. A sideloaded app with a visible icon is shown as High only when it is corroborated: for example it has both accessibility and notification access, or its name mimics a system app. A sideloaded app with a hidden or disabled icon combined with sensitive access can reach High. Weaker combinations show as Worth a look. A match with the known stalkerware list shows as Known monitoring app from any source.

The check runs on your phone and is free, with no ads. How detection works lists every signal, and the privacy policy explains what it reads.

What Applore cannot do

Applore cannot tell who installed a sideloaded app or why. Android does not always record where an app came from, for example with some file managers.

Get support

If you find a sideloaded app you did not install, read before you remove a suspicious app before removing it. Removal can alert the person who installed it and deletes evidence you may want later. Applore includes support contacts for India, the United States and the United Kingdom, plus global options; see domestic abuse and cyber crime hotlines. If you are in immediate danger, contact your local emergency number. More guides are on the safety guides page.