家人手机安装相机或翻译 APP 前：A Bilingual Permission and Source Routine

使用场景 / Scenario: 家里有人准备给父母或孩子的手机安装一个相机滤镜、翻译、扫描或语音输入 APP。页面看起来很漂亮，按钮写着 “fast download”，但你不确定它是否来自真正的开发者，也不知道为什么它要通讯录、麦克风、相册、位置和悬浮窗权限。This bilingual guide gives you a calm routine: check the source first, connect permissions to the real task, test with limited access, and clean up after the app is no longer needed.

你可以先收藏一个中立资源，例如 GitHub Pages app safety resource hub，也可以把 Gist quick checklist 发给家人。The point is not to make every family member read a technical article. The point is to give them a small routine they can repeat before tapping Install.

Quick checklist / 快速核对:

• 先确认开发者名称：official store, developer site, or known publisher page.
• 把权限和任务对应起来：camera app needs camera; translation may need microphone; neither should automatically need contacts.
• 不要为了一个滤镜或翻译功能安装 “cleaner booster” 或未知插件。
• 第一次使用时选择 “only while using” or limited photo access when available.
• 测试结束后检查权限、通知、后台启动和订阅页面。

Source first: 不要从按钮开始

很多风险不是来自复杂攻击，而是来自太快相信一个按钮。A family member may search an app name and open the first page with a large green download button. That page may be a mirror, a clone, or an advertising page that sends the user through several redirects. Start from the source instead. If the app is famous, check the official store listing or developer website. If it is a small tool, look for a consistent publisher name, support page, privacy policy, and recent update notes.

中文环境里还要注意“同名 APP”。一个名字可能对应多个地区版本、多个开发者，甚至完全不同的功能。Do not decide based on icon similarity alone. Ask: who publishes it, what problem does it solve, and where will updates come from? If the answer is unclear, it is safer to wait than to install during a rushed family support call.

Permission mapping / 权限和真实任务要匹配

A camera filter app can reasonably request camera access and limited photo access. A translation app may request microphone access for voice input and camera access for image translation. A scanner app may request camera and storage permission. But contacts, SMS, call logs, accessibility service, notification listener, VPN profile, and “display over other apps” are high-trust permissions. They should have a clear reason, not a vague promise of optimization.

给家人解释时，不要说“所有权限都危险”。Better: say “每个权限都应该有理由.” If a translation app requests location, ask whether regional language suggestions truly require precise location. If a camera app asks for contacts, ask what feature uses contacts. If the app works after denying a permission, keep it denied. If it refuses to work without unrelated permissions, choose another app.

A small testing routine / 小范围测试

Install one app at a time. Open it with limited permissions. Try the exact feature you need: one translation, one scan, one photo edit. Do not sign in with a main account unless the source is clear and the app really needs account sync. If the app pushes you to install another cleaner, keyboard, plugin, or “security certificate,” stop. Useful apps may show upgrade prompts, but they should not force unrelated tools as part of basic setup.

For family phones, create a simple note: app name, publisher, install source, reason for installing, and permissions allowed. This sounds boring, but it helps later when someone asks why the phone has a new notification or why storage is full. The GitHub checklist repository can be adapted into a family note without making it technical.

Decision tree / 判断流程

If the app handles only a temporary task, such as translating a menu during a trip, use it with limited permissions and remove it after the task. If it becomes a daily tool, spend more time reviewing the publisher, privacy settings, backup options, and subscription terms. If the app asks for accessibility service or notification reading, treat it as sensitive even if it looks like a simple utility. If a family member cannot explain why the permission is needed, choose a safer alternative or use a web tool.

If there are two similar apps, pick the one with clearer source information and fewer unrelated permissions, not the one with more dramatic advertising. If neither is clear, wait. A delayed install is usually less costly than cleaning up an account or privacy problem later.

What to avoid / 避免事项

• 避免安装带有 mod, unlocked, bypass 等字样的版本。
• 避免为了相机、翻译或扫描功能，授予通讯录、短信、无障碍或通知读取权限。
• 避免在不确定来源的 APP 里登录主邮箱、支付账号或社交账号。
• 避免一次性装很多类似工具；出问题时很难定位。

FAQ / 常见问题

Can my parents just use the official store? 通常可以，而且这是最简单的默认选择。但仍然要看开发者名称、权限和订阅提示。

Is microphone permission always bad? 不是。翻译或录音功能可能需要麦克风。The question is whether the permission matches the feature you are actually using.

What if an app already has too many permissions? Revoke the unrelated ones, test again, and uninstall if the app refuses to run without a clear reason.

How often should we clean up? 每月一次就够：remove unused apps, reduce permissions, and turn off promotional notifications.