SubSense

Security

SubSense asks for permission to manage your YouTube subscriptions — a permission worth being careful with. This page explains, in plain language, how that access is protected and why there is very little to attack in the first place.

Verified through Google’s OAuth review

SubSense’s access to YouTube goes through Google’s app verification process for sensitive OAuth scopes. Google reviewed what the app requests and what it does with that access, and approved it. The consent screen you see at sign-in is the verified one — and signing in happens with Google’s own sign-in flow, so SubSense never sees your password.

Official APIs only

The app talks to one place: Google’s official YouTube Data API, over HTTPS. No scraping, no third-party services, nothing in between your device and Google.

No servers to breach

SubSense operates no servers, databases, or cloud infrastructure that touch your data. Everything is analyzed and stored on your device. Your subscription data exists in exactly two places: your Google account and your own phone.

  • No third-party analytics, advertising, or crash-reporting SDKs — the app is completely ad-free.
  • On Google Play, SubSense’s Data safety declaration is “No data collected, no data shared”.
  • On Android, OAuth tokens are never stored by the app at all — they are fetched on demand through Google Play services, which manages its own secure cache. The app keeps only a signed-in flag.

Minimal permissions

SubSense requests exactly two YouTube permissions — the minimum for what it does:

  • Read your subscription list (youtube.readonly) — to organize and analyze your feed.
  • Manage your YouTube account (youtube.force-ssl) — used for exactly one action: unsubscribing you from channels you individually selected and confirmed. Nothing is ever removed automatically or in the background, and Undo re-subscribes you.

The exact scopes and how they’re used are documented in the Privacy Policy.

You stay in control

  • Every unsubscribe starts with a list you reviewed and ends with your confirmation — that’s a product rule, not a setting.
  • On Android, Settings → Delete My Data revokes SubSense’s access to your Google account and wipes everything local. See Delete your data.
  • You can also remove SubSense’s access directly from your Google account at any time at myaccount.google.com/permissions.

Report a security issue

If you believe you’ve found a security vulnerability in SubSense, email support@subsenseapp.com with “security” in the subject line. Please don’t include your Google account details in the report.

SubSense uses and transfers information received from Google APIs in accordance with the Google API Services User Data Policy, including the Limited Use requirements. SubSense is not affiliated with, endorsed, or sponsored by YouTube or Google. YouTube is a trademark of Google LLC.