Is BlackCandy safe?

Black Candy is an open source, self-hosted music streaming server. With this official mobile app, you can access your music library from your Black Candy server. To use this app, you must have a Black Candy server set up. For more information, please visit https://github.com/blackcandy-org/blackcandy

Developer: Ed
Category: Online Media Player
First release: 14 May 2026
License: Not documented

02 / Package identity

Technical fingerprint

Application IDorg.blackcandy.androidApp

Latest APK SHA-2564a565da9688d76c357200baf1a80d9aa7eb7b342859e1c94870a346235675b58

Signing certificate12:84:B1:C0:38:0F:48:09:EF:C7:50:41:7E:64:93:94:B8:1A:22:74:05:3F:6E:52:19:D6:60:51:49:2A:FF:0D

MIN ANDROID28TARGET34ARCHITECTUREarm64-v8a · armeabi-v7a · x86 · x86_64

03 / History

Project timeline

14 May 2026

Package observed in source index

Metadata and versions observed from the fdroid repository index.

04 / Version archive

Documented releases

1 TOTAL

VersionReleasedAndroidArchitecture

2.0.214 May 202628+arm64-v8a, armeabi-v7a, x86, x86_64→

05 / Safety & access

Safety verdict

Authentic — file hash matches the source indexNo ads or tracking flagged by the source

IntegritySHA-256 verified vs source

SourceOpen-source · fdroid

Permissions5 declared · 0 sensitive

Signaturepresent

Anti-featuresNo known anti-features

Sensitive accessNo sensitive permissions

Declared permissions

android.permission.ACCESS_NETWORK_STATE android.permission.FOREGROUND_SERVICE android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK android.permission.INTERNET org.blackcandy.androidApp.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Tracker status: Not assessed by WIKI for Android.

06 / Sources

Evidence ledger

Each entry is a captured public reference backing this record.

RepositorySource package page↗Source codeSource repository↗