Android permissions: how should apps request them and avoid bad UX?

Ask permissions only when needed and after explaining value. Best practices: - Use runtime permissions correctly - Provide rationale when users deny - Offer alternative flows if denied - Avoid requesting multiple permissions at startup Also handle new OS versions (scoped storage, notification permission) and test across API levels.