Google Quietly Put a Content Scanner on Android Phones, Now It’s Opening It to Apps

Millions of Android phones have a Google system service called Android System SafetyCore installed on them. Many users never knowingly downloaded it. Now Google is expanding what sits behind it.

Android’s new ContentSafetyManager API allows applications to request on-device classification of content, returning results such as allowed, warning, blocked or unclassified. The API is part of a new Android content-safety framework documented by Google this month.

SafetyCore is best known for Google’s Sensitive Content Warnings feature in Messages, which can detect potentially sensitive images and warn users before they view or share them. Google says the processing happens entirely on the device.

That is an important distinction. SafetyCore is not documented as a tool that secretly scans every photograph stored on an Android phone. 

Instead, an app has to request classification. But that system is now being built into Android’s broader application framework.

The Android App You May Not Remember Installing

SafetyCore began appearing on Android devices in 2024 as a Google system service. Its package name is com.google.android.safetycore. Unlike an ordinary app, it can appear among a phone’s system applications rather than something a user remembers downloading.

Google’s Play Store listing describes it as the underlying technology for Android safety features and shows more than 1 billion downloads. The service supports Android 9 and later.

Its arrival generated questions from users who found it installed without a conventional app-installation process. Google’s explanation is straightforward: SafetyCore provides on-device content classification for integrated safety features.

“SafetyCore is only active when an application integrates with SafetyCore and specifically requests content to be classified,” Google says.

It Is Not Just About Nudity

The most visible use is sensitive-content detection. But SafetyCore is designed as a content-classification service, rather than simply a nude-image detector.

Google says its technology can classify content for safety purposes while keeping the processing on the device. It says images, classification results and identifiable information are not sent to Google’s servers. The new Android framework makes that capability more explicit.

ContentSafetyManager lets an application submit specified content for classification. Android can then return a result indicating that the content is allowed, requires a warning, is blocked or cannot be classified.

The app does not simply receive unrestricted access to the phone’s stored images. It requests classification of content. That distinction matters because claims that SafetyCore gives every app the ability to “scan your photos” go beyond Google’s current documentation.

Google Is Turning SafetyCore Into Android Infrastructure

This is where the story changes. SafetyCore was introduced as a system service supporting Google’s safety features. Android’s new APIs create a broader framework for applications to use content-safety capabilities through the operating system.

Google’s documentation also includes a ROLE_CONTENT_SAFETY role for applications that “view and restrict content for the user.” The framework is still under development. The new APIs are documented at Android API level 10000 rather than a numbered public Android release.

So this is not evidence that every Android app can already use SafetyCore. It is evidence that Google is building the infrastructure for applications to request system-level content classification.

What Google Says About Privacy

Google’s position on the most sensitive question is clear. SafetyCore performs its classification on the device, and Google says the content and classification results are not sent to its servers.

The new API does not change that stated architecture. It changes who can potentially use it.

For Android users, that means the unfamiliar system service they may have noticed on their phones is becoming part of something larger than Google Messages. SafetyCore started as a behind-the-scenes component for Google’s safety features.

Google is now turning that capability into an Android platform service that applications can request. The scanner may still be running locally. But the list of apps that can ask Android to use it is what is changing.