Need HELP on android storage permissions.

Hi all, by reading a lot of stuff I got confused. One of my apps need to read external storage as it is user generated content platform.
My problem is that my app have permissions, but after I deny them app still can access phone storage.

So by google policy in one place they say that app need to ask permissions and in other google artikle they say that android 10 don`t
need permissions to enter storage.

All Files Access Permission
Files and directory attributes on a user’s device are regarded as personal and sensitive user data subject to the Personal and Sensitive Information policy and the following requirements:

• Apps should only request access to device storage which is critical for the app to function, and may not request access to device storage on behalf of any third-party for any purpose that is unrelated to critical user-facing app functionality.
• Android devices running R or later, will require the MANAGE_EXTERNAL_STORAGE permission in order to manage access in shared storage. All apps that target R and request broad access to shared storage (“All files access”) must successfully pass an appropriate access review prior to publishing. Apps allowed to use this permission must clearly prompt users to enable “All files access” for their app under “Special app access” settings. For more information on the R requirements, please see this help article.

https://support.google.com/googleplay/android-developer/answer/9888170
By default, apps targeting Android 10 and higher are given scoped access into external storage, or scoped storage. Such apps can see the following types of files within an external storage device without needing to request any storage-related user permissions:

• Files in the app-specific directory, accessed using getExternalFilesDir().
• Photos, videos, and audio clips that the app created from the media store.

https://developer.android.com/about/versions/10/privacy/changes

To make Goofle happy and not let them screw you in the future.
Make your app or part of it only accessible if users accept storage access.
I do not code java anymore but I believe you can get such results by .checkSelfPermission which can return true or false and continue from there.

Hope this helps!

If the app is able to access the sd card even though you have not allowed it permission to do so then ti si probably that your phone has been rooted. When a phone is rotted it loses its integrity and sometimes faces issues liek this. You should therefore check your device adn make sure that it is not rooted first.

I think that what you are dealing with is a ,alicious app. There are so many apps out there that are just like that. They have the ability to bypass some of the security protocols put in place by the operating system. you should restart your phone adn then reinstall the app to see if it will still do the same. If it persists then you should delete the app.