But because APK apps aren't subjected to the same security protocols as those on the Google Play store, they can contain vulnerabilities, or even contain malware itself. Android apps can access your entire phone if you let them — and sometimes even if you don't.