AppReviewFix
Guideline library
Google Play — Trust & Safety

Hostile Downloaders — Hostile downloaders

Official source: Google Play Developer Program PoliciesTopic overview: The review process, app quality and enforcement
What this guideline means

Apps that exist primarily to download and install other applications, especially without clearly disclosing that behavior before the user installs them, are treated as a distinct malicious pattern separate from ordinary malware.

Why apps actually get flagged

Often seen in "optimizer" or "cleaner" utility apps whose actual function, once installed, is silently prompting the install of several unrelated apps rather than doing the advertised cleanup.

A real example

"Your app's primary function is to download and install other apps without adequately disclosing this behavior, per the Hostile Downloaders policy under Mobile Unwanted Software."

The short version, in more detail

Apps whose main purpose is to download and install other apps, especially without disclosing that behaviour before installation, are treated as a distinct malicious pattern. It is often seen in utility apps such as optimisers or cleaners that, once installed, silently prompt the installation of unrelated software instead of doing what they advertised.

Why this rule exists

The Play Store is a trusted source of apps, and a downloader that installs other software behind the user's back turns that trust into a distribution channel for unwanted or harmful apps. Such behaviour is often paired with deception about what the app does. The policy separates this pattern from ordinary malware so that apps that serve mainly as installers can be dealt with directly.

What this guideline covers

  • Apps that download or install other apps.
  • Disclosure of installer behaviour before installation.
  • Utilities that bundle unrelated installs.
  • The difference between legitimate app stores and hostile downloaders.

What usually triggers this rejection

  • A cleaner or booster that prompts installs of several unrelated apps.
  • Installing software without clear consent.
  • An app whose real function differs from its description.
  • Silent downloads triggered in the background.
  • Offers that are presented as required steps.

How reviewers evaluate it

  • Reviewers run the app and watch for installation prompts.
  • Automated analysis flags downloader behaviour.
  • They compare the advertised function with real behaviour.
  • Play Protect can warn or block such apps.

Common misunderstandings

  • Optional recommendations are different from forced or hidden installs.
  • A small amount of unwanted installing is still a violation.
  • Legitimate app stores have their own approval and are treated differently.

Common questions

Can an app recommend other apps?

Yes, if recommendations are clear, optional and honest.

What is Play Protect?

Google's security service that scans apps for harmful behaviour.

Is this the same as malware?

It is a related but separate pattern focused on installing other apps.

Platform rules change often. This page is a plain-language explanation written by AppReviewFix, not official guidance. Check the current Google Play Developer Policy Center for the exact wording.

Got this exact rejection?Paste it in and get a diagnosis specific to your app, free.
Decode my rejection
Related guidelines
2.5.1 — Public APIs only2.5.2 — Self-contained apps2.5.3 — Malware transmission2.5.4 — Multitasking background servicesMalware — Malware policy
AppReviewFix
ProductDecoderPricingGuideline library
CompanyAboutFAQContact
ResourcesGuidesTopic overviewsCommon rejection reasons
LegalTermsPrivacy
© 2026 AppReviewFixBuilt by a developer, not a committee.