HACKER Q&A
📣 m_kos

Robust and affordable alternatives to Google Play for app distribution?


TL;DR: I am looking for a platform to distribute my dissertation research data collection Android app to ~50 adult study participants in the US. The most important features are the ability to quickly and reliably deliver app updates over one year, safety, affordability, and good UX (participants are non-technical Android users). I don't want to use Google Play Store.

To give you some context, for my dissertation project, I need to collect data using a custom Android research app installed on participants' phones for one year. The app requires a lot of permissions and continuously collects a lot of data. My colleagues discouraged me from using Play Store because Google banned their apps for no good reason and with no recourse, even though their research was approved by research ethics and human subject protections committees (IRB). This jeopardized their federally-funded studies and caused issues with their findings.

For this reason, I would like to distribute my app to ~50 adult study participants in the US using a different platform.

Four features are especially important to me. First, app updates need to be delivered reliably and relatively quickly over one year. Second, there can be no spyware, excessive tracking, unnecessary notifications, nudges to download other apps, and no annoying ads. Third, affordability is important because I would be paying for the distribution from my personal student savings. Finally, I would prefer a platform with good app update UX for non-technical users, including older adults.

So far, I have looked into APK Mirror, but according to their policy [1],

  > If your app is new, doesn't have a proven track record, and not
  > unique, it will likely not be approved.

I have also tried F-Droid, but at least on my Pixel 2 XL, updates of some apps downloaded from F-Droid often fail to install.

Would you have any recommendations on what other platforms I could look into?

Thank you.

[1]: https://www.apkmirror.com/faq/#What_is_the_purpose_of_APKMir...


  👤 toast0 Accepted Answer ✓
Have you considered hosting the APK on your own website?

You would need to build your own update function, but it could be a periodic fetch of a version file, and if the version is newer, download the apk and when done prompt the user to upgrade, opening the (already downloaded) apk in the system installer if they agree. You might need to carefully select the location where you download the apk, I don't know if you can install an APK with the system installer from app specific storage or if it needs to be in the 'external' storage. Relevant, ten year old, stack overflow answer. [1]

Google does put some scary warnings when you install an APK directly, but with 50 people, you can probably walk them through that.

[1] https://stackoverflow.com/a/6085670


👤 commoner
> I have also tried F-Droid, but at least on my Pixel 2 XL, updates of some apps downloaded from F-Droid often fail to install.

I've never experienced this issue when the app was originally downloaded from F-Droid (as opposed to apps downloaded from a different source). Apps in the default F-Droid repository are signed with F-Droid's signing key. Since apps signed with different signing keys cannot be automatically updated without manual uninstallation and reinstallation, apps in the default F-Droid repository can only be updated through F-Droid if it was originally installed via F-Droid.

Instead of using the default F-Droid repo, you can also set up your own F-Droid repo on your own server. This allows you to distribute the app through the F-Droid client, but signed with your own key instead of F-Droid's key. You would also have greater control over the release schedule, without needing to wait for the F-Droid build bot to release updates.

Repomaker instructions: https://www.f-droid.org/en/tutorials/create-repo/

Manual repo setup instructions: https://f-droid.org/en/docs/Setup_an_F-Droid_App_Repo/


👤 thomas-moulard
If your concern is only around the possibility of being banned - do you know if your colleagues were using the Play Store test track[1]? I am not sure if their service agreement would allow this, but apps in the test track do not require a review. It supports up to 100 users and is fairly cheap (25 USD for the dev account registration). I understand this is not what you're asking for, but if you will be working with non-technical people, this may be worth looking at it...

[1] https://developer.android.com/distribute/best-practices/laun...


👤 jlkuester7
> my dissertation research data collection Android app

Does it have to be an actual Android app? Could it be packaged as a progressive web app instead? If so, that might be the best way to achieve what you are looking for. Participants can just follow a link to your app's website which can prompt them to "Pin to Home Screen". That gives them an "app-like" experience where you can easily and quickly push updates without worrying about the Play Store or other app distribution techniques.


👤 tmp65535
I have been distributing a pornographic Android app on the web since 2017 and there are no difficulties.

Simply put the APK on a webpage and link to some instructions for installing an untrusted APK. For example, see http://driftwheeler.com

In particular, look at the "Can't install?" link.

If people really want to use your app, they will gladly do a little work to install it.


👤 lrvick
F-Droid is your best bet. It is pretty much the only viable alternative for those that wish to avoid Google services for privacy.

👤 akdor1154
On F-Droid, there is an app FFUpdater. It checks for new apk versions of various forks of Firefox and updates them (automatically or by notifs, user preference).

I guess you could fork it and change the apk it searches for - you'd end up with something exactly like what you want. N.b. i haven't looked at the code, maybe it's a rats' nest. But i'm optimistic given the simple domain. :)


👤 Farbklex
Microsoft App Center: You can upload your APKs to MS App Center and create a link without login requirements. The additional Distribute SDK will notify users about new app updates when the app is running. You could probably setup an own repeating update task which checks if updates are available. Apparently you can have up to 2000 users in one app version release.

https://docs.microsoft.com/en-us/appcenter/sdk/distribute/an...

Firebase App Distribution: Pretty much the same like MS App Center but from Google. You can upload APKs and App Bundles and create public invitation links. The firebase SDK handles app updates as well. You can have up to 200 testers in one distribution.

https://firebase.google.com/docs/app-distribution?hl=en

If I recall correctly, MS App Center doesn't come with analytics unless you add it yourself. For firebase, you should explicitly disable analytics if you don't want it.

In both cases you will still have to explain to your users how to allow installation of "apps from unknown sources".


👤 dogma1138
If you able / willing to enroll the devices in Intune you can use Azure App Center to deploy and update Android apps without the play store.

👤 kthakore
I work on a product called smartomix.com part of the doc.ai (recently acquired by Sharecare). We help researchers do just this. DM if you think this would be useful for you.

👤 giyokun
Hello, have you considered setting up a good MDM (mobile device management) software? We use TELELOGOS CLYD (https://www.telelogos.com/en/solutions/clyd-mobile-device-ma...) for all of our APK installation/monitoring/log captures needs.

👤 itake
Couldn't you just add the adults as testers to the Google Play app, avoiding oversight?

The problem with breaking off from Google Play is you lose the ability to send push notifications.

You could look at Code Push [0] for seamless updates. TBH its not the easiest to integrate with.

[0] - https://microsoft.github.io/code-push/


👤 cthulberg
for a similar project, I have successfully used: https://github.com/SimonMarquis/InternalAppStore

The Github page explains in detail how to set it up, and for the described use case you should stay within the Firebase free tier limit.


👤 binkHN
While I haven’t tried it, does anyone know if Firebase can be used to update apps that are not on the Google Play Store?

I know Firebase can handle app updates quite well and wonder if this avenue might be an option.


👤 heavyset_go
> The most important features are the ability to quickly and reliably deliver app updates over one year, safety, affordability, and good UX (participants are non-technical Android users). I don't want to use Google Play Store.

Unfortunately, Google hinders the competition when it comes to reliable automatic upgrades on Android. Third-party app stores cannot implement automatic upgrades or background upgrades, only the Play Store can. The exceptions are if your device is rooted or you had the app store baked into your vendor's ROM. Supposedly this design choice was somewhat addressed in Android 12.

> I have also tried F-Droid, but at least on my Pixel 2 XL, updates of some apps downloaded from F-Droid often fail to install.

This will happen if you try to use F-Droid to upgrade or reinstall apps you already have installed, but didn't originally install via F-Droid. Fresh installs from F-Droid seem to work for me.

> To give you some context, for my dissertation project, I need to collect data using a custom Android research app installed on participants' phones for one year. The app requires a lot of permissions and continuously collects a lot of data. My colleagues discouraged me from using Play Store because Google banned their apps for no good reason and with no recourse, even though their research was approved by research ethics and human subject protections committees (IRB). This jeopardized their federally-funded studies and caused issues with their findings.

This is a good example of how Google's anti-competitive actions, when it comes to their mobile OS and mobile app distribution, hinder innovation, research and the advancement of knowledge.

If you have time, or your colleagues do, please consider reporting this to the competition and antitrust divisions of the government. I've posted about the relevant regulatory and investigative bodies and how to get in touch with them here[1]. Here's what the Antitrust Division of the Justice Department says about reporting[2]:

> Information from the public is vital to the work of the Antitrust Division. Your e-mails, letters, and phone calls could be our first alert to a possible violation of antitrust laws and may provide the initial evidence needed to begin an investigation.

[1] https://news.ycombinator.com/item?id=28176193

[2] https://www.justice.gov/atr/report-violations


👤 bradleybuda
> participants are non-technical Android users

> I don't want to use Google Play Store.

These requirements are likely in conflict


👤 rootio
I am working on a Google Play Store alternative, maybe we can try to find a solution together, you can contact me: 500zqm6l0 at mozmail.com

👤 astlouis44
Try the web.

👤 enjoyyourlife
Amazon Appstore