Android 15's Privacy Features, and What Android 16 Adds Next
Assisted by AI

Android 15's Privacy Features, and What Android 16 Adds Next

Android 15 is not new. Google released the first developer preview in February 2024, and the finished version reached Pixel phones in October 2024. What is new this month is a look at what comes next. On May 13, 2025, Google set out the security features and the redesign coming with Android 16, which is due in the second quarter. Here is what Android 15 actually changed for privacy, and what Android 16 adds.

From preview to phones

Google published the first Android 15 developer preview on February 16, 2024. Its privacy items were aimed at developers, including Privacy Sandbox updates, new Health Connect data types and partial screen sharing, so "users can share or record just an app window rather than the entire device screen."

Google released the source code on September 3, 2024 and began the Pixel rollout on October 15. Other phone makers follow their own timetables. Samsung started its One UI 7 rollout on April 7, 2025, after what 9to5Google called "a delay of nearly 6 months compared to when Google first released Android 15."

What Android 15 changed for privacy

image

The headline feature is private space. "Private space in Android 15 acts like a digital safe on your phone," Google wrote at launch. It is a separate area for sensitive apps, behind an additional layer of authentication.

"When private space is locked, apps remain virtually invisible to others and are hidden from your apps list, recent apps view, notifications and settings." Users can also hide the fact that the space exists.

Android 15 also targets fraud. Apart from a few exceptions, such as wearable companion apps, one-time passwords are now hidden from notifications, which Google called "a common attack vector for fraud and spyware." During screen sharing, private notification content is hidden, and so is the screen while users enter passwords or card numbers.

Some protections announced alongside Android 15 do not need it. Theft Detection Lock "uses AI to help keep your data safe" by locking a phone that senses it has been snatched. Remote Lock lets owners lock a phone from any device with their phone number and a security check. Google says both are "now available for most Android 10+ devices." Android 15 itself adds extra checks before a thief can remove the SIM or turn off Find My Device.

What Android 16 adds

Android 16 arrives earlier than usual. In October 2024, Google moved its major release to the second quarter "to better align with the schedule of device launches across our ecosystem." The final scheduled beta arrived on April 17, 2025, with "the developer APIs and all app-facing behaviors" final.

On May 13, Google set out the security side:

  • Advanced Protection: one device-level setting that turns on "Google's strongest security for mobile devices," aimed at at-risk people such as journalists, and at anyone who prioritizes security. It requires Android 16.
  • In-call protections: during calls with people who are not in your contacts, Android blocks turning off Google Play Protect, sideloading an app for the first time, and granting accessibility permissions. The last two need Android 16.
  • Lock screen codes: when the phone is not on Wi-Fi and has not been unlocked recently, Android 16 hides one-time passwords on the lock screen.

The same day, Google announced Material 3 Expressive, "one of our biggest updates in years." Google said it "builds on Material You," with springier animations, updated dynamic color themes and customizable Quick Settings. Pixel owners can try it first "later this year," and a Pixel beta with some of the changes followed on May 20.

What changes for developers

image
image
image
image

Android 15 gave developers single-tap passkey sign-in, a way to detect when an app is being screen recorded, and stricter rules against task hijacking. Android 16's biggest change is timing. "The Q2 major release will be the only release in 2025 to include behavior changes that can affect apps," Google said. Android 16 also adds "stronger security against Intent redirection attacks," and Google has asked developers to start testing local network protections planned for a future release.

What users and developers can take from it

  • The version number is only part of the story. Theft Detection Lock and Remote Lock work on most Android 10+ phones. Private space needs Android 15 from the phone maker, and some makers shipped it months after Pixel.
  • Privacy is moving from settings to defaults. Hidden codes, blocked actions during calls and a single Advanced Protection switch make the safe choice automatic at the risky moment, instead of relying on users to find a setting.
  • Developers have less slack. With behavior changes arriving a quarter earlier, apps that handle logins or payments are best tested against the Android 16 beta now.

Update: what happened next (October 2026)

This article was first published on May 28, 2025. Here is how the story has developed since then:

  • June 2025: Google released Android 16 on June 10 to most supported Pixel devices, without Material 3 Expressive. Google said the Q3 update would provide "much of the new visual polish associated with Material Expressive."
  • August 2025: Google announced that from 2026, "Android will require all apps to be registered by verified developers" before users can install them on certified devices, starting in a few countries. It cited "over 50 times more malware from internet-sideloaded sources than on apps available through Google Play."
  • September 2025: Android 16 QPR1 brought Material 3 Expressive to Pixel 6 and newer phones on September 3.
  • December 2025: Android 16 QPR2, released December 2, delayed SMS messages containing a retriever hash for most apps by three hours, "to help prevent OTP hijacking."
  • June 2026: Android 17 arrived on June 16. Its privacy changes include a location button that grants precise location for the current session only, a contact picker that avoids the broad contacts permission, and a new permission for apps that talk to devices on the local network. Two days later, Google set September 30, 2026 as the start of developer verification in Brazil, Indonesia, Singapore and Thailand, with a global rollout planned from 2027. Unregistered apps can still be installed through adb or a new "advanced flow."

Private space protected apps from people holding the phone. The releases since have focused on the people on the other end of a call or a download link.

Sources

Frequently asked questions

Subscribe to Weekly Insights

Get weekly insights on AI, SEO, and Growth Marketing delivered to your inbox. No spam, just the good stuff.

Prefer not to subscribe? Feel free to follow me on LinkedIn for the same insights and to connect