We all know that security should not be an afterthought, but how much of it is a responsibility of a developer? Android presents a unique challenge, as a lot of players are involved in securing the platform: Google develops the operating system, Qualcomm designs the SoC and develops drivers, OEMs manufacture phones, carriers add their own software (some of it is essential). While many aspects of security are out of our control, there are steps we can take to improve our apps. In this talk we’ll look at how Android security changed over the years, some trade offs that we have to make when choosing minSDK, and the best practices for secure coding.