Apps deliberately refusing to work on modded devices

❗Article Status Notice: This Article is a stub

Notice: This Article Requires Additional Expansion

---

This article is underdeveloped, and needs additional work to meet the wiki's Content Guidelines and be in line with our Mission Statement for comprehensive coverage of consumer protection issues. Issues may include:

• This article needs to be expanded to provide meaningful information
• This article requires additional verifiable evidence to demonstrate systemic impact
• More documentation is needed to establish how this reflects broader consumer protection concerns
• The connection between individual incidents and company-wide practices needs to be better established
• The article is simply too short, and lacks sufficient content

How you can help:

• Add documented examples with verifiable sources
• Provide evidence of similar incidents affecting other consumers
• Include relevant company policies or communications that demonstrate systemic practices
• Link to credible reporting that covers these issues
• Flesh out the article with relevant information

This notice will be removed once the article is sufficiently developed. Once you believe the article is ready to have its notice removed, visit the Discord (join here) and post to the #appeals channel, or mention its status on the article's talk page.

Apps running on Android and potentially other operating systems can detect if the device has been modded and refuse to function if that is the case. This can happen if the device allows the user to run applications as root or administrator, has an unlocked bootloader or runs a different operating system than the one provided by the manufacturer.

How it works

Phones and PCs include a Trusted Platform Module : a chip independent from the device's CPU which can only run software signed by the device manufacturer. This chip allows applications to use a technique called remote attestation to detect if the operating system has been tampered with, and if so will block functionality or refuse to work altogether. If done properly, remote attestation is impossible to spoof, even by the owner of the device.

Why it is a problem

The owner of the phone is unable to do the following (while continuing to use applications that block modded devices)

• update the device operating system once it is no longer supported by the device manufacturer
• use alternative operating systems such as Linux or other Android-based operating systems that add new features
• remove all bloatware
• access all data stored on the device

Since many businesses and governments require their customers to download their proprietary application to their phones in order to use their services (see Forced app download), and many of those applications refuse to work on a modded device, people are left unable to modify their phone as they wish, as they then couldn't interact with those businesses which require or heavily encourage their app.

Examples

Android

Main article: Google Play Integrity API

• Google Wallet
• VPN by Google for Pixel
• Netflix
• McDonald's App
• Google Messages (RCS does not work when device is modded)
• Uber Driver
• Twitter/X
• Twilio Authy Authenticator
• ChatGPT