Privacy in Personalization Apps: Why a Wallpaper App Should Never Need the Internet
A wallpaper, widget or clock app has everything it needs on the phone already: the screen, the clock, and whatever you typed into it. It does not need the internet to do its job, and if it asks for network access, the access is for something other than the job. Usually that something is ads, analytics or both.
This article explains what the Android network permission actually allows, how to check whether an app has it, what the alternatives look like, and why we think “no network permission” is the single clearest privacy claim a personalisation app can make.
What “network access” means on Android
Android apps declare the permissions they use in a manifest. Most permissions you think of, such as camera, location and contacts, are runtime permissions: the app has to ask, and you see a prompt.
Network access is different. INTERNET is classed as a normal permission. It is granted automatically at install and you are never asked. There is no toggle in Settings to revoke it on stock Android. The only way to know is to look it up, and the only way to be sure an app is not sending anything is for the app not to have the permission at all.
Once an app has network access, it can:
- Load and display ads, and report which ones you saw.
- Send analytics: how often you open it, which screens you use, your device model, your rough location from your IP address.
- Send crash reports, which frequently include the state of the app at the time, and can include whatever you had entered.
- Fetch remote configuration, which lets the developer change behaviour after you installed it.
- Sync your settings to a server, which means your data now exists somewhere other than your phone.
None of these are necessarily sinister; many are standard practice. But none are needed to draw a number on your home screen, and all are impossible without the permission.
How to check an app
On Google Play, before installing
Open the listing, scroll to About this app, and tap App permissions (sometimes under “See more”). Network access appears in the Other group as “have full network access” or “view network connections”. If it is not listed, the app cannot connect.
Also read the Data safety section. Developers fill this in themselves, so it is a statement rather than an audit, but a listing that says “No data collected” and “No data shared” is a claim the developer can be held to.
After installing
Settings, then Apps, then the app, then Permissions shows runtime permissions only, so network access will not appear there. The Play listing is the reference.
Ads are the tell
If an app shows ads, it has network access, full stop. Ads cannot be served offline. So “free with ads” also means “connected”, whatever the privacy page says.
What about the wallpaper photo?
A wallpaper app needs to read the photo you want behind the counter. Historically this meant a broad storage or “photos and media” permission, which gave the app access to your whole library.
Since Android 13, and on older versions through Google Play system updates, apps can use the photo picker instead. The picker is a system screen; the app receives only the one file you chose and nothing else. It does not require any permission. A well-behaved wallpaper app in 2026 uses the picker and never asks for storage access.
What a private personalisation app looks like
Putting the above together, here is a reasonable checklist for any wallpaper, widget or clock app:
- No
INTERNETpermission. Not “we don’t use it”, but not declared at all. - No ads, which follows from point one.
- No account or sign-in. There is nothing to sync.
- Photo access via the system picker, not a library-wide permission.
- Data safety: nothing collected, nothing shared.
- Uninstall removes everything, because there is no server copy.
An app that meets all six cannot leak your data even if its developer wanted it to, was compromised, or sold the app. That is a stronger guarantee than any privacy policy, because the operating system enforces it.
The trade-offs, honestly
Building without network access costs the developer some things. Bugs have to be reported by users. There is no usage data, so decisions about what to improve are guesses informed by reviews and support email. There is no revenue from ads, so the app has to be paid, free, or supported some other way.
We think those are the right trade-offs for an app whose entire input is your birth date and a photo, but it is fair to say they are trade-offs.
How TimeBorn is built
TimeBorn declares no network permission. It cannot connect to anything, show an ad, or send a crash report. Your birth date, your face and precision choices, and a private copy of the one photo you picked through the system picker stay on the device, and uninstalling removes all of it. The only permission it declares is “run at startup”, which is granted automatically and lets the widget re-arm its refresh after a reboot; you will never see a permission prompt. It is free, with nothing to unlock. You can read the privacy policy in full, or see the app itself.