[Renate]

Originally Posted by bazookajoe

Moon+ doesn't require any permissions other than...

I'm not picking on Moon Reader, but the things listed under Settings > Apps > Permissions is a small subset of all the permissions.

Permissions in the Onyx reader:

Spoiler:

android.permission.ACCESS_KEYGUARD_SECURE_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.BATTERY_STATS
android.permission.BLUETOOTH
android.permission.CAMERA
android.permission.CHANGE_WIFI_STATE
android.permission.DUMP
android.permission.EXPAND_STATUS_BAR
android.permission.FOREGROUND_SERVICE
android.permission.GET_INTENT_SENDER_INTENT
android.permission.GET_TASKS
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.INTERNET
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.MANAGE_USERS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_LOGS
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.REORDER_TASKS
android.permission.STATUS_BAR
android.permission.SYSTEM_ALERT_WINDOW
android.permission.USE_FINGERPRINT
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_SETTINGS
com.android.email.permission.READ_ATTACHMENT
com.onyx.android.dict.TOKEN_SEARCH

Permissions in kcb.apk (main bit of Onyx utilities):

Spoiler:

android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_KEYGUARD_SECURE_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.BATTERY_STATS
android.permission.BIND_APPWIDGET
android.permission.BIND_DEVICE_ADMIN
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.BLUETOOTH_PRIVILEGED
android.permission.CALL_PHONE
android.permission.CAMERA
android.permission.CHANGE_COMPONENT_ENABLED_STATE
android.permission.CHANGE_CONFIGURATION
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.CREATE_USERS
android.permission.CRYPT_KEEPER
android.permission.DELETE_PACKAGES
android.permission.DUMP
android.permission.EXPAND_STATUS_BAR
android.permission.FOREGROUND_SERVICE
android.permission.INSTALL_PACKAGES
android.permission.INTERACT_ACROSS_USERS
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.INTERNAL_SYSTEM_WINDOW
android.permission.INTERNET
android.permission.MANAGE_ACTIVITY_STACKS
android.permission.MANAGE_DEVICE_ADMINS
android.permission.MANAGE_FINGERPRINT
android.permission.MANAGE_PROFILE_AND_DEVICE_OWNERS
android.permission.MANAGE_USERS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.NETWORK_SETTINGS
android.permission.PACKAGE_USAGE_STATS
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_LOGS
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.REORDER_TASKS
android.permission.REQUEST_DELETE_PACKAGES
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.SET_TIME
android.permission.SET_TIME_ZONE
android.permission.SET_WALLPAPER
android.permission.STATUS_BAR
android.permission.STORAGE_INTERNAL
android.permission.SUBSTITUTE_NOTIFICATION_APP_NAME
android.permission.SYSTEM_ALERT_WINDOW
android.permission.USE_FINGERPRINT
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_SECURE_SETTINGS
android.permission.WRITE_SETTINGS
com.android.browser.permission.READ_HISTORY_BOOKMARKS
com.android.chrome.permission.READ_WRITE_BOOKMARK_FOLDERS
com.google.android.providers.gsf.permission.READ_GSERVICES
com.google.android.providers.gsf.permission.WRITE_GSERVICES

Then there are the permissions that aren't in the AndroidManifest, like android.permission.ACCESS_FINE_LOCATION (which does appear in Settings > Apps > Permissions). I'm not saying that it's all evil. It looks like the FINE_LOCATION in the Onyx reader is so that it can know when "Twilight" is. And that is actually a part of a stock Android utility.