We utilize Google play store to avoid fake “ProtonMail apps” being distributed. The Play store provides security functionality that only allows the owner of an application to publish updates to the application. This keeps our users safe from malicious apps that may try to impersonate ProtonMail.For more details, please see related discussion here.
We plan on hosting the ProtonMail Android APK in the future.
Device & app history: Helps save battery life while using the ProtonMail app, and keeps your app secure by allowing PIN lock functionality. This permission gives the app the ability to know if it is being actively used or in the background of the device.
Identity: Allows push notifications when you receive new messages through the ProtonMail app. Unfortunately this is the only solution to provide push notifications at this time. We will continue to look for alternate solutions.
Contacts: ProtonMail syncs your device contacts with the app, allowing you seamless access. Contacts from your device are not uploaded to your ProtonMail account.
Photos/Media/Files: Access to files is needed to send and receive attachments.