Re: Pink circle on Home screen (Solved?)

Jim the Geordie <jim@jimXscott.co.uk> wrote:

It seems the problem is caused by an app 'Floating Notes'
If you got a chance to see my screenshot, you may have noted a small
yellow box (top Right) That is a minimised 'Floating Note'
If at any time that box is pulled down to see what it may be hiding,
then the Pink Circle Icon appears and conversely, if pushed up, it
disappears. Taa Daa
I have notified the Floating Notes 'compiler'

"Notes that keep visible while using other apps"

That app wants the draw-over permission.  Looking at the list of
permissions would've shown this app having that permission.  The Youtube
videos showed how to determine which apps have the draw-over permission,
and can disable that permission.  Killing the backgrounded app would've
also eliminated its screen icons.

From your screenshot showing the pink icon with downward arrow, yep,
there is an icon at the upper right, but you must have the optioned
enabled to minimize the notes to an icon.  The circle with underscores
looks to have some text that might be a capital F or P.  Without knowing
the Floating Notes app, no way to associate that icon with the pink one.

"Synchronize your notes across all your Android devices"

That sure sounds like this app uploads your notes to a server, and the
app also downloads your notes from a server to synchronize across
devices.  There is no mention the client (app) encrypts the data before
transit.

https://play.google.com/store/apps/details?id=com.jsvmsoft.stickynotes

Click on "About this app", and then click on Permissions, View Details"
where "draw over other apps" (aka SYSTEM_ALERT_WINDOW) is a permission
for this app.  Yet the details say this app is compatible with Android
4.4, and up.  However, draw over other apps wasn't supposedly available
until Android 6.0.  I have Android 8.0.0.  At first, I didn't find the
draw-over permission.  Had to drill a bit more to find it, and it is
listed.  Hard to find.

At the Play Store app page, there is no mention of just how note sync is
performed, like if you need the app on each endpoint device to transfer
the notes, or if their server is involved, and if so how is your note
data protected from their prying eyes.  Their web site notes there is a
Pro version, no mention of how to buy it, so it's probably an in-app ad
in the free app.  I didn't see a price for the Pro version.  Neither was
a list of what features would be uncrippled in the free version when you
pay for the Pro version.  There are no technical details at the Play
Store or their web site.

Note: If the permission is not listed, you may have to go into Developer
Options (after you enable it) to grant the permission.

https://floatingnotes.com/privacy.html
Did you read this?
They make claims of securing your data, but no mention just how they do
that.  Plus, all they need is your permission to access your data.  No
password, or other encryption mechanism to undo to let them see your
data.  No mention of endpoint encryption by their client app to totally
eliminate them seeing your data.

Usually when an app asks for permissions, the user get prompted on the
app's install to authorize or deny access to the permission.

https://usa.kaspersky.com/blog/android-8-permissions-guide/16300/
Display over other apps
  What it is: This permission allows the app to display its own windows
  on top of any other apps.

  The danger: Malicious apps can hide important warnings from view, and
  also superimpose fake forms for entering credit-card details or
  passwords over legitimate app windows. This permission is one of two
  key mechanisms used in so-called Cloak & Dagger attacks.

  Also, this permission is widely used by adware to shove ads into
  users’ faces more effectively, and by blockers, ransomware that
  overlays a phone’s interface with its own window and demands ransom
  for getting rid of it.

  All in all, most apps should not be given this permission.

  Where it’s configured: Settings -> Apps & notifications -> Advanced ->
  Special app access -> Display over other apps
 
While this permission can easily be abused, it does have some purpose.
For example, when you get a phone call, you see a popup telling you
about the phone call; else, when in some app with its window on the
screen, you won't know you got a phone call.