Developers can now block sideloading of their apps with this new API

Google has rolled out an API for Android developers that will give them more control over how their apps are downloaded, according to a report. The API – called “Play Integrity” – is said to include new functionality that forces users to only download the app from the Google Play Store, effectively blocking sideloading. It checks the status of the app, and if it is deemed “unlicensed,” the API can block it from running on the Android device.

Android Play Integrity API

Android’s Play Integrity API was first introduced at Google I/O 2024 in May, and recently gained this new capability. The API checks for “interactions and server requests that originate from a real app binary running on a real Android device,” according to to Google.

In a reportAndroid Authority’s Mishaal Rahman highlighted that the new feature of the API allows developers to overlay a new dialog box with the text ‘Download this app from Google Play’, if it has been sideloaded from a third-party source on the Android device. Users can choose to reinstall the app from the Google Play Store by selecting the Install from Play option. This would replace the sideloaded version of the app with the official version.

In a after On X (formerly Twitter), tipster AssembleDebug revealed that one of the most prominent apps to recently enable the feature is ChatGPT – OpenAI’s conversational chatbot powered by artificial intelligence (AI). Other apps reported include Tesco and BeyBlade X.

App Access Risk Feature

In addition to blocking sideloaded apps, the Play Integrity API is said to have another new functionality called “app access risk.” This feature can verify whether a user has installed apps that can capture the contents of the device’s screen or control its actions. It can then prompt them to close the application, potentially protecting them from malicious apps that can record the screen while using sensitive apps.

However, Google notes that not all apps that meet the criteria will trigger the new app access risk warning.