Local-only processing
APK bytes, device metadata, logs, and settings never leave the operator's computer through this product.
Local only · Privacy on
Security & privacy by design
Your devices, your files, your data. Package bytes and device lists stay on your computer. The only optional network exception is an anonymous active-user pulse (host OS) while Install Dock is open — disclosed in the Privacy Policy.
Privacy principles
Aligned with the desktop app — local deploy and inspect, honest disclosure of the presence pulse.
No accounts or cloud
There is no sign-in, no license server, and no remote configuration backend.
Anonymous presence only
No analytics SDKs or crash reporters. While open, the app may send host OS plus a random install id for active-user counts — not packages, devices, or logs.
Privacy Mode default
Recents, serial numbers, and full paths are redacted until the operator explicitly reveals them.
Technical boundaries
ADB is a local child process. The desktop app does not expose a product HTTP API.
- ADB communicates with localhost (127.0.0.1:5037) — not a product backend
- Core flows work with host networking disabled after ADB is available
- Packages are treated as untrusted input — no executing DEX or native code on the host
- Android signature and package manager rules are never bypassed
- Apple/macOS security (Gatekeeper, SIP, provisioning) is never bypassed
- No Magisk, bootloader unlock, SELinux disable, or exploit-root of production devices
Confirmations — never silent fleet
Mutating actions require an explicit confirm. Downgrade needs a second confirm. Multi-device USB queue (Advanced Mode) is serial with a per-target confirm — there is no install-to-all.
- Confirm device, package, operation, and hash before install or uninstall
- Second confirmation for downgrade where Android allows
- Interrupted sessions require verify-before-retry before another mutating confirm
- Exports, deletes, and clear-data paths stay behind confirmation gates
View device stays local
View device mirrors the selected USB Android screen for operator control on this computer. It must not be read as remote administration.
- Stream prefers local H.264 (or stills) to 127.0.0.1 only — not an OBS or public web publish URL
- Input and dropped APK installs target the selected USB serial only
- Not wireless ADB, not VNC, not MDM, and not phone monitoring
Advanced Mode is opt-in
Higher-risk controls stay off until you enable Advanced Mode. They never unlock OS security for you.
- Runtime permissions via pm grant / pm revoke with confirmation
- Special-access toggles via AppOps — not fake “on” from dumpsys alone
- Per-app UID firewall only when a privileged shell already exists (adb root on userdebug/eng, or su on an already-rooted device)
- Install Dock will not flash Magisk, unlock bootloaders, or disable SELinux
Honest limits
We state what the product cannot claim so operators are not surprised in the field.
- Progress is elapsed / indeterminate — ADB does not report transfer bytes
- Certificate fingerprints are extracted locally; full apksigner digest verification is not claimed
- IPA deploy needs a Mac, Apple device tools, and exactly one paired device
- .dmg is never auto-run; .exe / .msix / .rpm / AppImage are identified, not executed
Built-in guarantees
Every release follows these constraints — not optional add-ons.
- Package files and device lists are not uploaded
- No user accounts or cloud sync
- No analytics SDKs or crash reporters
- Anonymous active-user pulse only (host OS + random install id) while the app is open
- ADB communicates with the device over USB / local tools — not a product backend for deploy
- Privacy Mode is on by default in the desktop app
- Mutating actions require confirmation — never silent fleet install
Operator responsibility
You control the USB cable, the package files, and USB debugging access. Confirm device, package, operation, and hash before any change.
Full disclosure of the anonymous active-user pulse is in the Privacy Policy.
Ready to deploy locally?
Install on your computer, connect a USB Android device, and keep every byte on your machine—no account required.