Why has the READ_PHONE_STATE permission been added?

Question

In the latest beta version I just published to the Play Store, I notice that the READ_PHONE_STATE has been added since the previous version.

I haven't added this myself. All I can recall doing since the previous version is using v9.6.0 of various play-services libraries (was v9.4.0):

compile 'com.google.android.gms:play-services-location:9.6.0'
compile 'com.google.android.gms:play-services-places:9.6.0'
compile 'com.google.android.gms:play-services-auth:9.6.0'

Would this have done it? I can't see it documented. Can I get rid of the permission?

And I've ensured that all the of the libraries I'm using match the main app, as per this answer... makes no difference in my case.

EDIT

OK based on this article, I've delved into my log output to find:

ADDED from [Meteogram:jobdispatcher:unspecified] C:\Users\Me\AndroidStudioProjects\Meteogram\app\build\intermediates\exploded-aar\Meteogram\jobdispatcher\unspecified\AndroidManifest.xml:37:25-84 android:uses-permission#android.permission.READ_PHONE_STATE

But nothing has changed in the jobdispatcher library (which I imported into my project as a gradle module) since the last version.

EDIT2

Here is a bit more from that log, and my feeling is that maybe it is due to the play-services library version as suspected?

ADDED from [Meteogram:jobdispatcher:unspecified] C:\Users\Me\AndroidStudioProjects\Meteogram\app\build\intermediates\exploded-aar\Meteogram\jobdispatcher\unspecified\AndroidManifest.xml:37:17-87
    android:name
        ADDED from [Meteogram:jobdispatcher:unspecified] C:\Users\Me\AndroidStudioProjects\Meteogram\app\build\intermediates\exploded-aar\Meteogram\jobdispatcher\unspecified\AndroidManifest.xml:37:25-84
android:uses-permission#android.permission.READ_PHONE_STATE
IMPLIED from C:\Users\Me\AndroidStudioProjects\Meteogram\app\src\pro\AndroidManifest.xml:2:1-12:12 reason: com.google.android.gmscore.integ.client.location has a targetSdkVersion < 4
activity#com.google.android.gms.common.api.GoogleApiActivity

The targetSdkVersion < 4 matches with the other answer linked above, but is there anything I can do in this situation, since the play-services library is not mine?

EDIT3

I found an answer... rather than delete this question I'll leave it up, with solution, in case it's useful for others (and in case someone else has a better solution!)

EDIT4

Looks like it has been fixed in 9.6.1.

Answer 1

I eventually found this, which reports the same issue. One workaround is mentioned in Answer #3, which is to remove the permission "manually" (my assumption is that the permission is only required for very early Android versions, which is OK for me since my minSdk is 16):

<manifest ...
    xmlns:tools="http://schemas.android.com/tools"
    ... >

<uses-permission
    android:name="android.permission.READ_PHONE_STATE"
    tools:node="remove" />

Answer 2

This issue is present in Play Services v 12.0.0 as well. There's an open issue tracker on it here. It seems the issue is present for both permissions:

• android.permission.READ_PHONE_STATE
• android.permission.WRITE_EXTERNAL_STORAGE

It will probably be fixed with 12.0.1 as we saw with the 10.0.1 fix (from the original question).

Until then, I recommend removing the permission manually from the manifest as stated in the answer by drmrbrewer.

Update
12.0.1 has been released as of March 28, 2018, where this issue was addressed. See the release notes here.

Adds missing minSdkVersion in -license artifacts to prevent automatic inclusion of READ_PHONE_STATE and READ_EXTERNAL_STORAGE permissions.

Answer 3

Update #2: Version 10.0.1 fixes the issue again.

Update: this also occurs in version 10.0.0 of Google Play services, as reported in this post.

Previous Answer:

Per this post in the Android Developers G+ Community, one of the moderators (me) posted this comment:

I already reported this issue internally yesterday when a developer pointed it out, the fix has already been made internally, and an updated SDK is coming soon

And the updated SDK is now available - use the 9.6.1 Google Play services dependency.

Answer 4

For those who are looking for the issue related to version 12.0.0 of Firebase, just upgrade to version 12.0.1. It was a mistake in the packaging for 12.0.0 and was resolved in 12.0.1.

Check the release notes: https://developers.google.com/android/guides/releases

Answer 5

If you're not experienced with Android (like me!) and you were not sure where drmrbrewer's snippet should go, the answer is in your main app/manifests/AndroidManifest.xml file, like this:

  <manifest xmlns:android="http://schemas.android.com/apk/res/android"
      xmlns:tools="http://schemas.android.com/tools"
      package="com.your.package">

      ...

      <!-- attempt to combat this issue: https://stackoverflow.com/questions/39668549/why-has-the-read-phone-state-permission-been-added -->
      <uses-permission
          android:name="android.permission.READ_PHONE_STATE"
          tools:node="remove" />
      <uses-permission
          android:name="android.permission.WRITE_EXTERNAL_STORAGE"
          tools:node="remove" />
  </manifest>

Answer 6

Faced same problem. Just checked that Google release new version. Update to 12.0.1 or to latest version. This problem will be gone.