Oppo, Vivo, Xiaomi, and Honor Launch Joint Developer Verification to Curb Sideloading Risks

Oppo, Vivo, Xiaomi, and Honor have rolled out a new Android Developer Verification (ADV) system in mainland China, adding identity checks for developers who distribute apps outside official app stores. The initiative, announced by the Mobile Intelligent Terminal Ecosystem Alliance, means the four manufacturers will recognize each other's verification results, so developers who complete verification on one platform won't need to repeat the process on the others.

The system aims to identify developers behind sideloaded apps—software installed via APK files rather than through official stores. According to the alliance, China currently lacks a unified real-name verification system for sideloaded apps, making it difficult to trace developers responsible for malicious, counterfeit, or fraudulent software. Such apps can expose users to financial scams, personal data leaks, and unauthorized purchases.

Under ADV, a developer's verified identity is linked to their applications. Apps already registered and listed on the four manufacturers' official stores will be verified automatically, so their developers won't need to submit additional applications. However, users installing APK files from outside official stores will face an additional verification step. If an app comes from an unverified developer, phones from the four brands will display an "unverified" warning, and users must manually confirm the installation before proceeding.

The alliance acknowledged that these additional checks could slow down app distribution. Xiaomi opened ADV submissions on October 21 and began checking sideloaded app installations on October 31, meaning the warning system may already be active on its devices. During verification, the company checks three elements: the app's package name, signing key, and developer verification status.

The move reflects growing efforts by Chinese Android makers to tighten security around sideloaded apps, which are often a vector for malware and fraud. By sharing verification results, the four brands aim to create a more cohesive ecosystem that protects users while maintaining flexibility for developers. The system is expected to evolve as more manufacturers join the alliance and as regulators consider broader real-name verification requirements.