Google will remove Verizon app from Pixel phones

Over a decade ago, I owned a Galaxy Nexus on Verizon, a carrier exclusive in the US. The relationship between Verizon and Android enthusiasts who preferred Google’s “pure” Android builds was strained, as the phone was weighed down by Verizon apps and lagging behind in OS updates. The presence of a pre-loaded Verizon app deep within a Google Pixel phone brings back memories of those days. That app, Showcase.apk, is finally being removed.

Showcase.apk is a system tool used by Verizon retail employees for in-store demos, showcasing the phone’s features along with the carrier’s marketing content. However, it poses a significant security risk due to its system-level access and the inability for regular users to uninstall it easily.

According to a report by iVerify and Palantir, the Showcase app contains an unsecured backdoor due to its installation via unsecured HTTP. This vulnerability could potentially be exploited to cause harm to any Pixel phone pre-loaded with the app, which includes most Pixels sold by Verizon since 2017.

While the app exposes the phone to security threats, there have been no reports of it being exploited in the wild. Nevertheless, Google has decided to remove it as a precautionary measure. A Google spokesperson confirmed that a future software update for Pixel devices will eliminate the Showcase app from all supported models, including the Pixel 4 and newer devices.