[question]: How to remove Android Permission Location from Android Manifest?

[herotha]

How can we help?

When I submit to Play Store, I just noticed my app has extra Android android.permission.ACCESS_COARSE_LOCATION.
Is there anyway to omit that permission from my App Manifest?
I just upgraded OneSignal SDK to version 5.0.3. And I don't want my user know I have this permission inside my app.

Code of Conduct

• I agree to follow this project's Code of Conduct

[jennantilla]

Hi @herotha thanks for reaching out!

Did you previously have location sharing enabled?

Adding android.permission.ACCESS_COARSE_LOCATION is part of the location sharing setup but this is not required to use the OneSignal SDK. If you don't want to track location, you can remove this, although I am unsure if any other SDKs or libraries in your app may need it.

Thanks for the additional information!

[herotha]

Hello @jennantilla

No, I don't enable location sharing in my project.

I just updated OneSiginal SDK from 4.X.X to 5.0.3 and my project got this extra android.permission.ACCESS_COARSE_LOCATION in Android manifest.

When I checked on the merged manifest, I found out that OneSignal library has this permission (screenshot).

My current project's scope needs only OneSignal Push Notification Service. Other services, for example, SMS, email, location sharing ... so on, are not in my project scope yet.
So, can I remove that location permission from my Android manifest project? Because it is against my current project user's privacy and policy, which app does not use location permission.

[herotha]

Oh, @jennantilla this is my Onesignal integration

on App build.gradle

on Application class

[brismithers]

Hi @herotha, one possible solution is, rather than include the entire com.onesignal:OneSignal dependency, you can update your App's build.gradle to only specify the individual modules you want included:

dependencies {
  implementation 'com.onesignal:core:[5.0.0, 5.99.99]'
  implementation 'com.onesignal:in-app-messages:[5.0.0, 5.99.99]'
  implementation 'com.onesignal:notifications:[5.0.0, 5.99.99]'
}

[herotha]

Thanks @brismithers .
This solution works for me.

[nan-li]

Users of the native OneSignal Android SDK can remove the location module from dependencies. Closing this issue as resolved.

We are investigating how to address this in OneSignal's cross platform SDKs as brought up in the linked issue on Unity above.