Why does SEP Mobile request permission to send SMS messages

Products

• Endpoint Protection Mobile

Issue/Introduction

SEP Mobile is protecting against SMS phishing. During the activation process, the end-user is asked to allow SEP Mobile to send and view SMS messages.

Why does SEP Mobile request permission to send SMS messages?

Resolution

SEP Mobile requests the send SMS permission due to Android requirements.

For an Android device to be able to handle sensitive data like SMS messaging, Android requires the app to be the default handler for the function and to request the permission group for the function. For SMS, the permission group includes the SEND SMS ability. 

However, it should be noted that SEP Mobile does not actually send SMS messages, and this permission is only used to scan SMS messages for the SMS Phishing protection feature. 

Additional Information

References: https://developer.android.com/guide/topics/permissions/overview

https://developer.android.com/guide/topics/permissions/default-handlers

https://help.symantec.com/cs/sep_mobile/SEPMOBILE/v135251584_v127904070/Enabling-the-SMS-phishing-detection-on-Android-devices?locale=EN_US