> if the user allows it to access the SD card. And since majority of the people allows everything on their Android device<p>1. So basically, if you're installing an app AND you're allowing the app to access all of your phone (and its dirty secrets)<p>2. I don't see why whatsapp would encrypt the chats (I might be very wrong on this one), isn't it better if we can access them offline through a computer if the phone crashes?<p>3. Bigger picture: at first, dividing permissions and asking for the user to accept them was a good idea, but now we tend to accept anything because in the end, we want to use the app. Same problem with facebook login, google login, where we tend to accept whatever info websites request just to get to the app.