Uninstall and clean up

Uninstalling an Android app and cleaning up what it leaves behind are separate tasks.

What uninstalling an Android app actually removes, and what it leaves behind

Removing an Android app through the normal interface deletes the APK, its data directory under /data/data/<package>, and its cache. It does not automatically delete:

• Accounts the app created (a login stored in your Google profile or on the app’s own server).
• Files the app wrote to shared storage (Downloads, Documents, or app-specific folders on older Android versions).
• The app’s entry in the system’s installer-of-record log, which can affect how Play Protect treats re-installs.
• Residual files in /data/media or on external SD cards if the app requested storage permissions.

The exact behaviour depends on the Android version and manufacturer skin. On stock Android 10 and later, removing an app deletes its private data directory; on some OEM skins (Samsung One UI,, Xiaomi MIUI), leftover cache and orphan data may remain in system partitions. The official Google Play Help page (2025) states that removing an app deletes the app and its data, but some files the app created in shared storage may stay.

Before you remove the app

Open the app’s detail page in Settings > Apps. Note the version, the install source (Play Store, Galaxy Store, GetApps, or sideloaded), and the permissions it holds. If the app is a system app that came with the device, you cannot fully delete it without root access; you can only disable it via Settings > Apps > [app] > Disable. Disabling hides the app from the launcher and stops it from running, but keeps the APK on the partition. Use this for preinstalled apps you cannot remove.

Check what you are about to delete

Before you delete the app, open its own settings and sign out of any service it connects to. Then go to Settings > Passwords & accounts (or Accounts) and remove the account entry tied to the app. Deleting the app does not always remove the account, because some accounts are managed by the OS account manager, not by the app itself.

If the app was installed from the Play Store, removing it does not automatically clear its entries in your Google profile. Visit Google Play Help (2024) and check “Manage apps & devices” to see which apps are linked to your profile, and revoke any you no longer use.

Sign out and revoke linked accounts

Removing an app does not automatically sign you out of services or revoke OAuth tokens. Open the app and use its own sign-out function before you uninstall. Then visit your Google Account permissions page (myaccount.google.com/permissions) and revoke access for the app. For non-Google accounts, check the service’s own security settings for active sessions and authorised devices. This step is especially important for messaging apps, cloud storage clients and financial tools that maintain persistent sessions across installations.

How to remove an app on different Android versions and skins

Stock Android12 and newer

1.. Open Settings > Apps > See all apps. 2.. Select the app. 3.. Tap Uninstall and confirm. On Android13 and14, you can also long-press the app icon in the launcher and tap “Uninstall,” or drag it to the “Uninstall” area (Google Play Help,2024). If the app is a system app, the button may read “Uninstall updates” instead.

Samsung One UI

Go to Settings > Apps, choose the app, then tap Uninstall. Some carrier-branded apps cannot be removed and only show “Disable.”

Xiaomi HyperOS

From the app drawer, tap “App info,” then “Uninstall.” Some system apps require disabling via “App settings” rather than removal.

Huawei EMUI and HarmonyOS

The path is similar, but the uninstall button for preinstalled apps may be hidden behind “Manage apps” or “App info.”

Uninstall and clean up: what to do after removal

Delete the installer file

For sideloaded apps, the APK installer stays in your Downloads folder or wherever you saved it. Removing the app does not delete the APK. Delete the installer file separately, or it can waste storage or be reused by a malicious process.

Clear residual files in shared storage

After removal, check for leftover files. On most devices, the app’s own files in shared storage (for example, /sdcard/Android/data/<package>) may remain if the app wrote outside its private directory. On Android10 and later, scoped storage limits leftover files in shared storage, but apps can still leave files in /Android/data/ and /Android/obb/. The exact location varies by Android version and manufacturer; check your device maker’s support pages for the current steps.

Review permission history

When you delete an app, its granted permissions are removed with it, but the permission history in Settings > Privacy may retain logs. Android11 and later (Google Play Help,2023) added auto-reset of permissions for unused apps, but that applies to apps that remain installed, not to deleted ones.

Delete your server-side account

Removing the app deletes the local copy, but the app’s server-side account usually persists. For banking, social media or similar services, you need to delete the account or request data deletion separately. Do not rely on the removal of the APK to close your account on the developer’s service.

Key terms

• APK: The file format Android uses for installation.
• AAB: The publishing format for Google Play, not something you install directly.
• Signature: The APK’s signing certificate, which identifies the developer key, not the developer’s legal identity.
• Play Protect: Google’s on-device and cloud-based malware scanner; it checks apps from the Play Store and performs a one-time scan on sideloaded apps.
• Unknown Sources: Android setting that allows installation from outside the default store; the exact location and wording vary by Android version and manufacturer.
• ADB: Command-line tool from the Android SDK for installing apps directly from a computer.
• apksigner: A command-line tool that verifies APK signatures.
• OWASP MASVS: A standard for mobile app security verification, useful for evaluating an app’s security posture.

Trusted installation sources

• Signal’s official site (signal.org) hosts APKs with a SHA-256 hash. Compare the hash of the downloaded file with the one listed on the official site.
• F-Droid signs all apps with its own key; the client verifies the signature before installing. This is an example of a trusted repository model.
• APKMirror verifies that the APK signature matches the original developer key; it is not a substitute for checking the developer’s own site.
• Developer’s own site: The developer publishes the APK with a known signature; compare the signature or hash against the developer’s official communication channels.