Hi,<p>I work at Facebook, more specifically, I've spent a considerable chunk of my time working on our Android app and the Android permissions we request. (I also worked on that same area before I joined Facebook)<p>These permissions were actually added several months ago, long before the WhatsApp deal was announced. There's no connection.<p>I want to correct some of the misrepresentations in the article.<p>The WRITE_CALENDAR permission: As many app developers will know, this permission is needed by any application that wants to create a calendar feed in the unified Android calendar storage, and create/modify events in it. In particular, the Facebook app would like to give you the option to import your Facebook events so that you can see them side-by-side with your other calendars like Google Calendar, corporate Exchange accounts and so on. We don't need to be able to send event invites or updates to attendees by email, but we can't divide the pre-set Android permission into any smaller pieces.<p>We use the READ_SMS permission to automatically read SMS codes from people who have turned on 2-factor authentication (called Login Approvals) for their accounts, or for phone confirmation messages when you add a phone number to your Facebook account. Unfortunately, the Android permissions system doesn't allow us to specify that we would like to be able to read only SMS messages from a specific number—the one we use to send these codes.<p>In general, we would love to be able to ask only for the permissions we need for the specific features we expect people to use. However, Android doesn't allow permission requests on demand; we have to request all permissions that cover each feature at install time, and people must choose to accept or deny all of them at once.<p>If you have specific questions about other permissions that our app requires, don't hesitate to ask, and I'll do my best to explain how they're used. We also have an official Help Center page that covers a lot of this material at <a href="https://www.facebook.com/help/210676372433246" rel="nofollow">https://www.facebook.com/help/210676372433246</a>.