Can students hide apps in Android's private space on a managed device?

Skie for Enterprise · Updated

Short answer

No. On Android 15 and newer, Skie blocks private profiles, and it is on by default. Private space is an Android feature that tucks apps away behind a lock, which would let a student keep apps out of sight of the policy. With the block on, the option is not offered.

Private space arrived in Android 15. It creates a separate, lockable area in the app drawer where apps and their data are kept apart, and notifications from them are hidden when the space is locked. It is a sensible feature for an adult's personal phone. For a school or hostel tablet, it would be a place for apps that you did not choose.

Skie sets Android's DISALLOW_ADD_PRIVATE_PROFILE restriction as the device owner. The Set up private space option does not appear in Settings, and an app cannot create one on the student's behalf. On devices running Android 12 to 14 the feature does not exist, so nothing needs to be set there.

The block is a default and is shown among the hardening switches next to work profile and clone profile. Each is read back from Android after an apply and is included in the compliance score for the device.

Skie shows apps by policy as well. Apps outside the allowed list are hidden or suspended, not deleted, and the install guard removes any that are installed later and not allowed. A hidden space would otherwise be a way around that view, which is why the block exists.

Practical tip: if you buy a batch of new tablets that ship with Android 15, check the compliance score for the first few devices to see all three profile switches reading as on before you roll out the rest.