Learn · ServiceTag, the free app

Local-first design, privacy, and Android permissions

Where the ServiceTag app keeps your data, when it uses the network, and why it asks for each Android permission.

Guide 4 of 4

A separate product. ServiceTag is the free, open-source, local-first app for keeping your own equipment records on your own Android phone: install it on the phone you already have, with no extra hardware, no signup and no account. ServiceTagPro, the platform this site is about, is a different, commercial product: organizations sign up for it and their staff use ServiceTagPro accounts. Using ServiceTag never requires it.

ServiceTag is designed to be useful on one Android phone with no account and no server. The phone is the source of truth.

Local-first by design

  • NFC tags identify equipment; they do not contain its records.
  • Maintenance history stays on the phone and is auditable.
  • What is due, and the equipment's health, are recalculated from recorded facts.
  • Files are ordinary files in storage you choose.
  • Backups are explicit, logical and portable.
  • Reminders are scheduled on the phone; no outside reminder service is needed.

When it uses the network

Routine use needs no network at all. The app has only two deliberate outbound connections, and both happen only when you set them up or ask:

  • Save as document: downloading a web reference over HTTPS when you ask to keep it as an attachment;
  • Home Assistant season sync: reading from the Home Assistant address you configure.

The local Developer API listens only on the phone itself. The Home Assistant token is kept in the phone's secure key store and is never included in backups, exports or Transfer Packs.

Why it asks for each Android permission

Android permissions and what they are used for
PermissionWhat it is used for
NotificationsLocal maintenance reminders; asked when first needed, not at launch.
NFCReading and writing tags. Android shows no permission prompt for it.
Start at bootRe-arming reminders after the phone restarts.
InternetThe on-phone Developer API, Save as document, and Home Assistant.
LocationOnly for the Home Assistant option that works on your home Wi-Fi, because Android reveals the Wi-Fi name only with this permission. It is not used to find where you are.
Background locationOnly if you turn on background checks on your home Wi-Fi; refusing it simply keeps checks to when the app is open.
Wi-Fi and network stateRecognizing your home Wi-Fi and running network-aware work.
Attachments folderOnly the folder you pick, through Android's folder picker; not general storage access.

Backups and Transfer Packs carry equipment data, not device secrets, so a restored phone may ask you to re-enter a Home Assistant token.

How ServiceTagPro differs

ServiceTagPro is a hosted platform for organizations. Records live in each organization's ServiceTagPro workspace, every request is checked against the person's current access, and the ServiceTagPro Android app keeps authorized records available offline for a limited time. Personal ServiceTag data is never moved into ServiceTagPro automatically.

Keep reading

Full document on GitHub

  • NFC tags

    New to NFC? Start here

    What NFC tags are, how your phone already uses NFC, and which tag style to choose for indoor, outdoor or metal equipment.

  • NFC tags

    NFC privacy: what is actually on the tag?

    Why the tag needs no battery or internet connection, how the phone powers it, and what another person can learn by scanning it.

  • ServiceTag, the free app

    What the ServiceTag app can do today

    The released feature set and product boundaries of ServiceTag, the separate open-source app for keeping your own equipment records on your phone.

  • ServiceTag, the free app

    Local-first design, privacy, and Android permissions

    Where the ServiceTag app keeps your data, when it uses the network, and why it asks for each Android permission.