Key points
- Anyone over 18 with a Google account can publish private Android apps for free using Google AI Studio.
- The apps do not appear in public search results or store recommendations, bypassing standard visibility.
- This move contrasts with Apple's tightened review processes and rising delays for new app submissions.
The short version
- Google Play now allows free publishing of private apps created in Google AI Studio without a paid developer account.
- These apps remain hidden from public store searches and recommendations, limiting their exposure to specific users.
- The change removes the previous $25 one-time fee barrier, while Apple simultaneously tightened its own store rules.
The details
Google will allow anyone over the age of 18 with a Google account to publish privately listed Android applications built in its AI Studio, according to The Next Web. There is no requirement to purchase a developer account, and no fee is charged for this process. Bloomberg reported that these applications do not appear in the Play Store’s search results or recommendation feeds.
This policy removes the existing $25 one-time fee that Google previously charged for a developer account. Sam Bright, who manages Google Play and its developer ecosystem, demonstrated the feature using a tracker for a local sports team. The app split costs for jerseys, umpire fees, and pizza across fifteen families. This functionality enables private distribution without the traditional financial barrier to entry.
The context
Apple has moved in the opposite direction regarding app store policies. Submissions to the Apple App Store jumped by 84% in a single quarter as vibe coding spread, according to The Next Web. Apple began removing apps that change their behavior after passing review. Approval times for new submissions increased from one or two days to between one week and more than a month by March.
Updates from platforms like Replit and Vibecode were blocked during this period. The security implications of AI-generated code are significant. Veracode found that AI-generated code passed its tests only 56% of the time last year. Cross-site scripting vulnerabilities passed 15% of the time, and log injection flaws passed 12%, though Google states AI Studio runs its own checks.
What to watch
Europe represents a regulatory focus for Google. The European Commission issued binding measures in July requiring Google to provide rival AI assistants with the same Android access that Gemini has. These obligations begin in 2027. Google must also share search data with rival search engines and chatbots at regulated prices. Google is simultaneously making sideloading harder.
Since September 30, apps installed through participating stores on certified devices must be registered to a verified developer. This rule is currently live in Brazil, Indonesia, Singapore, and Thailand, and will go global in 2027. The workaround requires accessing developer options, restarting the device, and waiting 24 hours.
What it means for organisations
Teams usually need to reassess their mobile application acceptance policies when platform barriers lower. Check whether private applications built by staff or partners meet internal security standards before distribution. Verify that these privately listed apps are monitored for updates and vulnerabilities, as they bypass public scrutiny. Inform IT security teams and legal departments about the shift in responsibility for app safety. Ensure that employees understand the risks of installing private apps, even from trusted sources. Review supplier contracts to clarify security obligations for AI-generated code.
What to do and how to stay safe: Google Play Store
- Verify that any privately listed apps installed on corporate devices come from verified internal developers.
- Monitor device logs for unusual behavior or permission requests from apps not found in public store searches.
- Enforce strict mobile device management policies that restrict the installation of apps from unverified sources.
- Review employee access to AI coding tools to ensure generated code meets organizational security standards.
Step-by-step guide: Secure Home Routers for Small Business Networks
General security guidance from the TechSec Headlines newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Does Google charge a fee for publishing private apps via AI Studio?
No, Google allows anyone over 18 with a Google account to publish these apps for free, removing the previous $25 developer account fee.
Are these apps visible to the general public on the Play Store?
No, Bloomberg reported that these privately listed apps do not appear in the store’s search results or recommendations.
How does this compare to Apple's current app store policies?
Apple has tightened its store, increasing review times and removing apps that change behavior after review, while Google is lowering barriers to entry.
