Zalo

Zing · Zalo is a messaging and social app that delivers fast private chats, calls, and file sharing across mobile, desktop, and web.

Native (iOS + Android) Communication Zalo Group
Bundle ID com.zing.zalo
Version analyzed 26.05.01
Build framework Native (iOS + Android)
Detection confidence Medium
SDKs detected 8
Analyzed 2026-06-15
Static + runtime analysis

SDKs detected

8 SDKs found across 6 categories. Click any SDK to see every other app that uses it.

All SDKs
From manifest + Info.plist

Permissions requested 20 sensitive

72 permissions requested at runtime. Colors reflect platform sensitivity tier.

Read contacts sensitive

Read the user's contacts data.

Modify contacts sensitive

Add, modify, or remove contacts.

Approximate location sensitive

Access approximate location (network-based).

Read phone state sensitive

Read phone state, network info, and the device's phone number.

Read phone numbers sensitive

Read the device's phone numbers.

Make phone calls sensitive

Initiate a phone call without going through the dialer UI.

Answer phone calls sensitive

Answer an incoming phone call.

Read storage sensitive

Read files from shared external storage. Replaced by READ_MEDIA_* on Android 13+.

Write storage sensitive

Write files to shared external storage. No-op for apps targeting Android 11+.

Precise location sensitive

Access exact location via GPS, cell, and Wi-Fi.

Media location metadata sensitive

Read location metadata embedded in shared media files.

Camera sensitive

Take pictures and record video.

Microphone sensitive

Record audio from the microphone.

Connect to Bluetooth devices sensitive

Connect to paired Bluetooth devices.

Find accounts on device sensitive

Read the list of accounts known to the device.

Read call log sensitive

Read the user's call log.

Post notifications sensitive

Post notifications to the system.

Read images sensitive

Read image files from shared storage.

Read videos sensitive

Read video files from shared storage.

Selected photos and videos sensitive

Access only photos and videos the user explicitly selected.

Act as account authenticator standard

Act as the AccountAuthenticator for the AccountManager.

Manage accounts standard

Manage accounts in the AccountManager.

Reorder tasks standard

Move tasks within the back stack.

Write sync settings standard

Write account sync settings.

Read sync settings standard

Read account sync settings.

com.google.android.providers.gsf.permission.READ GSERVICES standard
Vibrate standard

Control the vibrator.

Internet access standard

Open network sockets.

Set wallpaper standard

Change the system wallpaper.

Foreground service: microphone standard

Required for foreground services of type microphone.

Foreground service: camera standard

Required for foreground services of type camera.

Network state standard

Read connectivity information.

Wi-Fi state standard

Read Wi-Fi connection information.

com.android.launcher.permission.INSTALL SHORTCUT standard
Get running tasks standard

Read information about currently running tasks.

Run at startup standard

Receive the BOOT_COMPLETED broadcast.

Wake lock standard

Keep the device awake.

Modify system settings standard

Modify system settings. Granted from system settings.

Modify audio settings standard

Modify global audio settings.

Disable keyguard standard

Disable the keyguard if it is not secure.

Bluetooth (legacy) standard

Connect to paired Bluetooth devices on Android 11 and below.

Send sticky broadcast standard

Send sticky broadcasts.

READ PROFILE standard
com.zing.zalo.permission.BIND ZALO SERVICE standard
zing.zalo.permission.ZALO SERVICE standard
FLASHLIGHT standard
Fingerprint authentication standard

Authenticate using fingerprint hardware.

Display over other apps standard

Draw windows on top of other apps. Granted from system settings.

In-app billing standard

Use Google Play Billing for in-app purchases and subscriptions.

com.huawei.android.launcher.permission.CHANGE BADGE standard
com.sonymobile.home.permission.PROVIDER INSERT BADGE standard
com.anddoes.launcher.permission.UPDATE COUNT standard
com.majeur.launcher.permission.UPDATE BADGE standard
READ APP BADGE standard
USE FULL SCREEN INTENT standard
Biometric authentication standard

Authenticate using biometric hardware.

Schedule exact alarms standard

Schedule alarms that fire at an exact time. Granted from system settings; denied by default on Android 13+.

Change Wi-Fi state standard

Change Wi-Fi connectivity state.

com.google.android.gms.permission.AD ID standard
Foreground service: location standard

Required for foreground services of type location.

Foreground service: data sync standard

Required for foreground services of type dataSync.

Foreground service: special use standard

Required for foreground services of type specialUse.

Foreground service: media processing standard

Required for foreground services of type mediaProcessing.

Foreground service standard

Run a foreground service.

NFC standard

Perform I/O over NFC.

com.zing.zalo.permission.BROADCAST FROM VIDEO PROCESSING standard
com.zing.zalo.permission.C2D MESSAGE standard
com.google.android.c2dm.permission.RECEIVE standard
com.google.android.finsky.permission.BIND GET INSTALL REFERRER SERVICE standard
ACCESS ADSERVICES ATTRIBUTION standard
ACCESS ADSERVICES AD ID standard
com.zing.zalo.DYNAMIC RECEIVER NOT EXPORTED PERMISSION standard

Frequently asked questions

What FlyTrap detected inside Zalo.

What is Zalo built with?

Zalo by Zalo Group is built with Native (iOS + Android). FlyTrap determined this by analyzing the app's compiled binary, not from anything the developer published.

What SDKs does Zalo use?

FlyTrap detected 8 third-party SDKs inside Zalo, including Firebase Analytics, Firebase Cloud Messaging and Firebase Crashlytics. They span areas such as Analytics, Push Notifications, Crash Reporting and Authentication. The full list, grouped by category, is on this page.

What permissions does Zalo request?

Zalo requests 72 permissions. 20 of these are sensitive, such as Read contacts, Modify contacts and Approximate location. Each is listed above with its platform sensitivity tier.

Is Zalo safe to use?

FlyTrap reports what an app contains, it does not issue a safety verdict. Zalo requests 72 permissions (20 sensitive) and bundles 8 third-party SDKs. Reviewing those alongside the developer helps you decide what you are comfortable granting.

What platforms is Zalo available on?

The version FlyTrap analyzed targets Android.