Why does Android warn me during install?
Short answer: because of what FinWise does, not because it's unsafe. Here's the honest, specific reason for every prompt — and how to verify it yourself instead of taking our word for it.
1 It's Android's rule, not a FinWise flag
Android shows "unknown sources" and Play Protect warnings for every single app installed outside the Play Store that asks to read SMS — automatically, with no manual review, no matter who built it or what it's for. A banking app, a to-do app, and FinWise all get the identical warning if installed the same way.
We can't turn this off from our side, and we wouldn't want to — it's a real Android safety feature. The only way to skip it entirely is Google Play Store distribution, which has its own tradeoffs we're weighing (see the note at the bottom).
2 Why FinWise asks for SMS access at all
FinWise's core feature is reading your bank's transaction alerts (the "Rs.500 debited..." texts) so you never have to type expenses by hand. That's the entire reason the permission exists — nothing else.
3 What actually leaves your device — and when
- Normal use: nothing. Your transactions, balances, loans and vault stay in a local database on your phone.
- Auto-Sync (opt-in): if you turn this on, an iPhone Shortcut or email-forward you set up sends message text to a private mailbox tied only to you. Your phone/browser fetches it, parses it locally, and the server copy is deleted — the server never reads or stores the content.
- AI Advisor (opt-in, needs your own API key): a summary of your finances is sent to the AI provider you chose (Claude or Gemini) only when you actively use that screen.
- Backup (your action only): a backup file is created and shared only when you tap "Export" — it goes wherever you choose to send it, never automatically.
4 How to verify this instead of trusting us
- Turn on Airplane Mode right after installing and log in — FinWise works fully offline, which wouldn't be possible if it needed to phone home constantly.
- Check your phone's own Data Usage settings for FinWise after a normal day of use — you'll see it's minimal, spiking only during Auto-Sync or an AI Advisor chat if you use those.
- Read the Privacy Policy — it says plainly what is and isn't collected.
- The app is signed with a release key tied to a real registered developer identity, the same as any Play Store app — Android shows this under the app's install details.