AppGuard

Choose, app by app, what each app can see. AppGuard changes how selected privacy-sensitive Android APIs behave inside the apps you pick. Target APKs are not modified, and nothing leaves your device.

_Home

App list with icons for each protected category

_Apps

_{Policy editor}

_{Network & SIM}

What it controls

Data	Modes
Location (`LocationManager`)	Allow · Restrict · Simulate a fixed position
Wi-Fi network identity (SSID, BSSID, MAC, local IP, nearby networks)	Allow · Restrict · Simulate a stable fake router
Phone & SIM (carrier, country, phone number, subscriptions)	Allow · Restrict ("no SIM") · Simulate a carrier
Android ID and device model/manufacturer	Allow · Simulate (stable per app, rotatable)
Contacts, call log and calendar	Allow · Restrict per source (reads return no entries)
Clipboard reads	Allow · Restrict (copy and keyboard paste keep working)
Sensors (motion, compass, environment, activity, body)	Audit only · Restrict by group

Also included:

Local audit log with filters and JSON/CSV export, plus a 7-day privacy report.
Templates (Strict, Anti-tracking, Personal data guard, or your own) and bulk actions.
Backup & restore of the whole configuration.
Kill switch on the home screen and as a Quick Settings tile.
Access notifications when a policy blocks something (optional).
Crash-loop protection: a policy is suspended automatically if it makes an app crash at start-up.

Every hook fails open: on any error, missing or corrupt configuration, the app keeps its normal behavior. System and emergency components (phone, SystemUI, Settings, Play services) can never be targeted.

Requirements

Rooted Android 10+ (tested on Android 14).
LSPosed or a fork such as Vector, with Xposed API 93 or newer.

Setup

Install the APK and enable AppGuard in the LSPosed manager.
Add AppGuard itself and every app you want to control to the module's scope.
Open AppGuard, go to Apps, pick an app, switch on Apply policy and choose modes.
Force-stop the target app (the policy page has a button for this) and open it again.

Limitations

AppGuard intercepts the public Java APIs listed above in the app's own process. Native code, Google Play services fused location, server-side fingerprinting and data an app collected earlier are not affected. Each policy page lists exactly what is intercepted and what is not.

Privacy

No network permission, accounts or telemetry. The audit log stays in AppGuard's private storage with bounded retention. Clipboard contents and real identifiers are never logged.

Source and support

Source code, issues and full documentation: https://github.com/imkamaran/AppGuard

Licensed under GPL-3.0.

First public release.

Privacy controls (per app)

Location via LocationManager: Restrict or Simulate a fixed position
Wi-Fi network identity: Restrict, or Simulate a stable fake router name and BSSID
Phone & SIM info: Restrict ("no SIM"), or Simulate a carrier (T-Mobile, Verizon, Vodafone UK, Telekom, Orange)
Android ID and device model/manufacturer: Simulate, stable per app and rotatable
Contacts, call log and calendar: Restrict per source (reads return no entries)
Clipboard reads: Restrict
Sensors: audit only, or Restrict by group

App

Home with protection status, per-category coverage and a 7-day privacy report
Templates (Strict, Anti-tracking, Personal data guard, your own) and bulk actions
Local audit log with filters and JSON/CSV export; optional access notifications
Backup & restore, Quick Settings kill switch, crash-loop protection
Light, dark and system themes with dynamic color

Requirements: rooted Android 10+ and LSPosed (or a fork such as Vector) with Xposed API 93+.
Add AppGuard itself and each app you want to control to the module scope.

Signing certificate SHA-256: df1930009ab9ccca5e45d07f45984c0ec75808c3bf9d32219ba02255e5286da6