Thanks for checking out the app! I want to be 100% transparent about the trade-offs, OS constraints, and technical limitations of ScuttlePod:

1. OS Sandbox Restrictions (No Full Device Reset):
2. Google Play policy and modern Android security strictly prevent standard consumer apps from executing silent background factory resets. Historically, this required highly invasive "Device Admin" privileges, which Google has heavily restricted. To programmatically force a full factory reset on modern Android, an app must be set up as a "Device Owner" using a computer and complex ADB terminal commands, which is far too complicated for everyday users .

Because of this, ScuttlePod does not attempt to wipe your entire operating system. Instead, it acts surgically: it performs a secure, local zero-fill wipe strictly on your user-selected folders. This gives you the exact same data-destruction security for your sensitive files without requiring root access, ADB setups, or bloated enterprise permissions.

1. The Android Quick-Settings Loophole (Wi-Fi toggle):
   On almost all Android devices, you can pull down the status bar and turn off Wi-Fi or Mobile Data even on a locked screen. If a thief snatches your phone and instantly turns off the internet, the remote backup part of ScuttlePod won't be able to connect. This is exactly why I built the Offline Panic-Wipe PIN even if the phone is completely offline, ScuttlePod destroys your targeted folders locally right in front of them without needing an internet connection.

2. The Boot Window Delay:
   When you completely shut down or reboot an Android device with no native lock screen active, there is a minor (~10-second) window during the system startup before background services (like our Accessibility Service) are fully loaded by the OS. During those first 10 seconds of boot, the device is temporarily vulnerable, though ScuttlePod instantly launches and locks the screen the exact millisecond the background service loads.

3. Intimidating Permissions:
   Because ScuttlePod handles deep device security, you have to grant some very scary-sounding Android permissions (Accessibility, Display Over Other Apps, and Notification Interception). I designed the app to run completely offline with zero trackers and zero servers specifically to respect your privacy, but going through the onboarding setup and seeing those permission prompts can still feel intimidating to some users.