Resolving "query_all_packages" Permission Error - Quixxi Shield

Issue when publishing the app: QUERY_ALL_PACKAGES permission

Quixxi will add QUERY_ALL_PACKAGES permission when enabling any one of the following permissions:

Integrate Malware detection SDK

Terminate app when lucky patcher is installed on the device.

Why QUERY_ALL_PACKAGES Permission is Requested

The Quixxi shield uses the QUERY_ALL_PACKAGES permission to collect a list of apps installed on a device. This is required for two specific security features:

• Malware Detection: To scan for known malicious applications.
• Lucky Patcher Detection: To identify the presence of this hacking tool.

If these two options (Malware Detection and Lucky Patcher Detection) are enabled in your shielding configuration, the permission will be included in the final shielded app.

How to Manage This Permission

You can control whether this permission is added. If you disable both Malware Detection and Lucky Patcher Detection in the Shield Options, Quixxi will not include the QUERY_ALL_PACKAGES permission in your app.

Common Scenario & Recommended Fix

This permission requirement most frequently causes conflicts in fintech and banking applications. If you encounter a build or compliance error related to QUERY_ALL_PACKAGES, the standard solution is to:

Disable the following in your shield configuration:

• Malware Detection
• Lucky Patcher Detection

This removes the permission dependency and allows the shielding process to complete successfully.

----

For Fintech & Banking Apps

This permission requirement most frequently causes conflicts in fintech and banking applications. 

Fintech and banking apps can get approval from google by submitting required explanation and documents  

How to Request Google Play Approval for QUERY_ALL_PACKAGES

If your app requires the QUERY_ALL_PACKAGES permission, you must justify its use to Google Play during the declaration process. Below is a recommended explanation you can adapt.

Core purpose and Justification

Our application integrates the Quixxi Shield security solution to protect against sophisticated hacking, cheating tools, and malware that target in-app revenue and user data.

The QUERY_ALL_PACKAGES permission is required by Quixxi Shield to reliably detect and block thousands of known malicious and tampering tools—many of which dynamically alter their package names at runtime to evade detection. Without this permission, our security solution cannot perform the comprehensive scan needed to identify these threats, leaving the app vulnerable to attacks that have previously caused significant revenue loss and brand damage.

Supporting Documentation

To better understand how Quixxi Shield uses this permission to detect and prevent misuse, you can refer to the following demonstration video:

[Link to video: How Quixxi Shield Detects and Blocks Malicious Applications]

Note: Other than Fintech and Banking apps it is difficult to get approved by google.

Exceptions

Google Play may provide a temporary exception to the following apps that do not qualify as permitted uses designated above.

• Real-money gambling apps where the core purpose of the app is real-money gambling and where the app requires broad package visibility in order to comply with technical standards mandated by applicable geofencing regulations.
• Apps that have a verifiable core purpose facilitating financial-transactions involving financially regulated instruments (for example, dedicated banking, dedicated digital wallets) may obtain broad visibility into installed apps solely for security-based purposes.

In accordance with our Personal loans policy, use for the purpose of any personal loan, credit, or reason facilitating access to personal loans is not eligible for this exception.

Developers are encouraged to proactively implement alternative security or fraud prevention solutions that do not rely on the QUERY_ALL_PACKAGES permission.

Permitted uses of the QUERY_ALL_PACKAGES permission

Permitted uses involve apps that must discover any and all installed apps on the device, for awareness or interoperability purposes may have eligibility for the permission. Permitted uses include device search, antivirus apps, file managers, and browsers.

Apps granted access to this permission must comply with the User Data policies, including Prominent Disclosure and Consent Requirement, and may not extend its use to undisclosed or invalid purposes.

• Other references (link)