Privacy
Privacy Policy
This policy covers the Android app webOS Dev Mode Manager.
- Package name
me.symon.aphanes- First published
- 9 September 2026
- Last updated
- 9 September 2026
The short version
The app has no account, no sign in, no sync and no server of its own. It talks directly to the LG webOS TVs that its user has paired with it, over the local network. Nothing about a person, a phone or a TV is collected, stored remotely, profiled, sold or shared for advertising. There is no analytics, no crash reporting and no telemetry of any kind.
Who is responsible
The app is developed and published by Symon, an independent developer, as a personal project. Questions about this policy can go to privacy@symon.me.
The app is not affiliated with, endorsed by, or connected to LG Electronics Inc. or the webOS Open Source Edition project.
What stays on the phone
The following is created and held on the device only. None of it is transmitted anywhere, and none of it is readable by the developer.
- Paired TVs: their names, their network addresses and their identifiers.
- The Developer Mode pairing key and passphrase for each paired TV, held in the Android keystore through encrypted platform storage.
- The Developer Mode session token read from a paired TV.
- Cached hardware and firmware details of a paired TV, so a detail page can be shown before the TV answers.
- App settings such as the chosen theme and accent colour.
Automatic cloud backup and phone-to-phone transfer are switched off for this app, so none of the above is copied off the device by Android either.
What leaves the phone
Two kinds of traffic exist. The first is between the phone and the paired TV itself, over the local network, using SSH. That traffic carries device credentials and commands, it never passes through any third party, and the TV is the user’s own hardware.
The second is a closed list of three requests to the public internet. Each runs only because a person opened the screen or started the action that needs it. None runs in the background, on a schedule, or at launch.
The Homebrew catalog
To: repo.webosbrew.org
When: When the catalog screen is opened
Sends: Nothing about the user or their TVs. It is a plain read of a public file.
A package download
To: Whichever host the catalog entry names, usually github.com
When: When an install is started
Sends: Nothing about the user or their TVs. Downloaded bytes are checked against the SHA-256 hash published in the catalog and refused on a mismatch.
The Developer Mode session check
To: developer.lge.com, operated by LG Electronics Inc.
When: When a device detail page is opened
Sends: The Developer Mode session token read from that TV. This is the only request that carries anything at all.
The session check is worth stating plainly. A Developer Mode session belongs to LG: they issue it, they time it, and their server is the only thing that knows how much of it remains. The TV cannot answer the question, so there is no local alternative. The token is sent to LG for that one question and for nothing else, and it is sent over HTTPS. What LG does with a request to their own service is governed by LG’s privacy policy, not this one.
Any request necessarily reveals the phone’s public IP address to the host being contacted, as every internet request does. The app adds no identifier of its own to these requests.
What is never collected
- No name, email address, phone number or account of any kind.
- No location data, precise or approximate.
- No contacts, messages, call logs, photos or files beyond a package file the user picks deliberately.
- No advertising identifier, and no advertising of any kind.
- No analytics, usage statistics, crash reports or performance telemetry.
- No third-party software development kits that collect data.
Permissions
The app requests one Android permission: internet access. It is needed to reach a paired TV on the local network and to make the three requests listed above. The app requests no location, contacts, storage, camera, microphone or telephony permissions. Choosing a local package file to install uses the Android system file picker, which grants access to that one chosen file without a storage permission.
Retention and deletion
Because nothing is collected or held remotely, there is nothing stored elsewhere to request the deletion of. Data held on the device is removed by the user directly: deleting a paired device from the app removes that device’s credentials, cached details and session token immediately. Uninstalling the app removes everything it stored.
Children
The app is a developer tool for managing television hardware. It is not directed at children, and it neither seeks nor knowingly holds information about them.
Changes to this policy
If the list of outbound requests above ever changes, this page changes with it in the same release, and the date at the top is updated. Material changes will also be noted in the app’s changelog.
Contact
Questions, corrections or concerns about this policy can go to privacy@symon.me, or be raised as an issue on the project’s public repository.