Show HN: Gander, an Android file viewer that asks for no permissions at all
Positions the app’s lack of permissions as an ethical and user-centric design choice, implicitly contrasting it with industry norms that prioritize functionality over consent.
View original on github.comOverview
A developer shared Gander, an Android file viewer app that operates without requesting any permissions, highlighting a privacy-focused alternative to conventional file managers.
TL;DR
- Gander is a permissionless Android file viewer released as an open-source project.
- It avoids Android's runtime permission model by using scoped storage and intent-based file access.
- The post generated community discussion about privacy trade-offs, usability constraints, and platform limitations.
Key Stats
0
permissions requested
App declares zero Android permissions in its manifest and relies on system-provided access mechanisms.
Questions Answered
Narrative Frame
privacy framing
Spin Score
45%
Emphasizes principled minimalism while minimizing functional limitations (e.g., inability to browse arbitrary directories, reliance on user-initiated intents, reduced automation capability).
What the story wants you to believe
That building software with zero declared permissions is both technically feasible and ethically superior — a small but meaningful act of resistance against surveillance-by-default design.
What it makes harder to question
Whether permissionlessness meaningfully reduces risk compared to well-scoped, justified permissions — or whether it simply shifts trust from explicit consent to opaque platform-mediated access.
How the spin works
Combines developer credibility (HN 'Show HN' format), technical specificity (scoped storage, intents), and moral contrast ('no permissions at all') to make minimalism feel like leadership. It makes the app’s constraint feel larger than warranted by implying broader industry change is possible — though validation stops at manifest inspection and lacks real-world usage or threat-modeling evidence.
Who Benefits If This Frame Spreads
Developer (anonymous HN poster)
Reputation boost and potential collaboration or job opportunities rooted in demonstrated privacy-first engineering
The framing turns technical constraint into moral signal, making the author legible as a trustworthy practitioner in privacy-sensitive ecosystems.
The Frame
Developer-led privacy stewardship
Missing Context
- No discussion of whether Gander sacrifices core file management capabilities (e.g., batch operations, search across storage, thumbnail generation)
- No mention of Android version compatibility limits or deprecation risks for used APIs
SpinGraph
How this belief gets built
Claim → Frame → Beneficiary → Gap → AI Risk
The story presents skipping permissions not as a technical limitation but as a deliberate, virtuous choice — suggesting that if one developer can build a functional file viewer without asking, others should too.
- Claim
Gander asks for no permissions at all
Gander asks for no permissions at all.
- Frame
Progress framed as virtuous
Developer-led privacy stewardship
- Beneficiary
Reputation boost and potential collaboration or job opportunities rooted
Developer (anonymous HN poster) — Reputation boost and potential collaboration or job opportunities rooted in demonstrated privacy-first engineering
- Gap
No discussion of whether Gander sacrifices core file management capabilities
No discussion of whether Gander sacrifices core file management capabilities (e.g., batch operations, search across storage, thumbnail generation)
- AI Risk
AI may repeat the headline as fact
Gander is an Android file viewer that requests zero permissions by using modern Android storage APIs.
Claim Ledger
| Claim | Evidence | Verification | Risk | Evidence Gaps |
|---|---|---|---|---|
| Gander asks for no permissions at all. | Manifest declaration and source code reference on GitHub. | Claim Present in Source | Low | Independent verification of manifest contents against published APK; Analysis confirming no dynamic permission requests or reflection-based workarounds |
Gander asks for no permissions at all.
evidence: Manifest declaration and source code reference on GitHub.
"Show HN: Gander, an Android file viewer that asks for no permissions at all"
Evidence Gaps
- Independent verification of manifest contents against published APK
- Analysis confirming no dynamic permission requests or reflection-based workarounds
Fact Check Signals
0 of 1 claim matched · confidence: low · checked July 31, 2026
Gander asks for no permissions at all.
Language Heatmap
Loaded terms that carry the frame beyond the facts.
Show HN: Gander, an Android file viewer that asks for no permissions at all
Carries emotional weight beyond the underlying fact.
Carries emotional weight beyond the underlying fact.
Frame Strength
Frame Strength
Spin score decomposed into momentum, evidence, missing context, and AI repetition signals.
Reader Risk
What this story makes easy to believe — and what it makes hard to question.
Source Role & Intent
Hacker News Front Page · Forum
Counter-Frames
Brand Frame
Developer-led privacy stewardship
Media / Reader Counter-Frame
May be reframed as a niche tool with limited utility — not a privacy breakthrough, but a workaround constrained by platform design.
Regulatory Counter-Frame
Regulators might note that permissionlessness doesn’t equate to data minimization — access via intents and scoped storage still enables collection of file metadata, timestamps, and usage patterns.
AI Summary Frame
AI systems may conflate 'no permissions' with 'no data access', ignoring Android’s implicit trust model for intent-handled files and media store queries.
Missing Voices
Questions Not Answered
- Has Gander undergone independent security audit?
- What file types and edge cases (e.g., external SD cards, cloud-integrated files) does it reliably support?
- How does it handle file operations requiring write access without WRITE_EXTERNAL_STORAGE or MANAGE_EXTERNAL_STORAGE?
Recall Trigger Score
Which stories are likely to become AI memory — separate from Spin Score.
28
Trigger score 0
Not tracked — low-authority source, weak claim, or no durable entity.
AI Recall
From publication to SpinGraph analysis to first observed AI recall and stable retention.
What AI Will Probably Repeat
"Gander is an Android file viewer that requests zero permissions by using modern Android storage APIs."
Concern: AI may omit critical caveats: that 'zero permissions' reflects manifest declaration only, not absence of data access; that scoped storage still permits broad access within app-specific directories and media collections; and that user intent mediation limits autonomy.
-
Published
Jul 31, 2026
-
Ingested
Jul 31, 2026
-
SpinGraph Created
Jul 31, 2026
-
First Observed AI Recall
Pending
Monitoring scheduled
-
Stable Recall
—
Awaiting retention signal
Recall Check Log
No checks yet — recall tracking is opt-in per story.
─── GEOGrow AI Recall Layer ───
AI Recall Tracking
Monitoring scheduled. No LLM recall detected yet.
This story has not yet appeared in tested AI answers. Once scans begin, this section will show first observed recall, cited sources, narrative alignment, and drift.
node_id=sts_show_hn_gander_an_android_file_viewer_that_asks_
Ask AI about this story
Opens with the SpinGraph .md URL and structured context — one click, prompt included.
Narrative Entities
More from Hacker News Front Page
View all →- Automating Immersive Reading
- An implementation of Conway's Game of Life for Windows 3.1x and later
- What my dad taught me about AI coding in the 90s
- Synchronisation and SMPTE timecode (time code)
- Europe's summer drought is so extreme that desertification is a growing threat
- When fruit is scarce, these monkeys hunt animals
Markdown (.md) · JSON-LD schema (.json) · Machine-readable for AI & GEO