Sideloaded apps can’t access Accessibility API in Android 13

Developer Esper has discovered that Google will no longer allow sideloaded apps that come from an unknown source to access Android 13’s Accessibility API. The new measure only applies to apps that don’t come from a download platform.

According to Mishaal Rahman, Esper’s senior technical editor, sideloaded APKs from app stores like the Play Store, or download platforms like F-Droid, will still be able to access the Accessibility API. However, apps that come from unknown sources will no longer be able to use the api after which a message will also appear in the accessibility menu stating that the accessibility functions are limited. According to Rahman, Google wants this measure to prevent the accessibility functions in Android from being abused.

According to the man, the restriction will also not apply to sideloaded apps that use the session-based package installation api. Sideloaded apps that use the non-session package installation api to complete their installation will be subject to the restriction. At least, if they come from an unknown source. “The latter API is often used by apps when they are sideloaded onto the device via a browser, a mail client or a messaging app,” Rahman said.

According to Rahman, developers of apps that use the Accessibility API in Android 13 should disclose the origin of their app if they want to avoid problems for their customers. This can be passed to the operating system via the setPackageSource api.

Notification in the accessibility menu of imposed restriction