Why do IVPN and Proton VPN have camera permissions?

Privacy Guides recommends 3 VPNs: Mullvad, IVPN and Proton. According to Exodus Privacy reports, Mullvad doesn’t require camera permissions but IVPN and Proton have access to camera permissions. I looked though Proton VPN on my phone and couldn’t find any need for it to access the camera e.g. even when users can report error logs, there is no option to upload a picture that comes from the phone image gallery/camera.

IVPN: Report for net.ivpn.client 2.10.12 - εxodus
Proton: Report for ch.protonvpn.android 5.12.48.0 - εxodus

I obtained these links from the respective app pages on the Aurora Store, under the “Privacy” section.

Well if they do, you don’t have to grant camera permissions. That’s one of the permissions that requires user input. I’m not sure what the use could be, maybe they have some feature where you scan a QR code or something. I wouldn’t use exodus as it can make non-issues seem like a big deal.

why not just email their support teams and ask?

1 Like

Proton has some kind of qr code recovery workflow, could be related:

5 Likes

Thank you for your responses, everyone. May I ask what other alternatives are there to Exodus? I just want to find trustworthy audits to trust (I have heard of Cure53 but they seem to only audit apps that are already in the security sphere and pay for these audits)

Yeah any auditing firm really, exodus isn’t an audit it’s just listing the permissions the app has. Usually companies have to pay to have those done though.