A shopping list is a few dozen words with no commercial value — which makes it worth asking why so many applications want so much to see it.

The list that disappears, and the list that watches

You write down what to buy, and at the shop the note has sunk under three weeks of other notes. So you install a dedicated list application, and it wants access to storage, contacts and location before it will show you a screen, then serves advertisements for products you happen to have looked at. The task is trivial and the products built for it are frequently worse than a piece of paper.

This one comes from a family of tools built by a research group at a German technical university, working on the boundary between security and usability. Every application in that family follows the same rule: the minimum possible permissions, no advertising, no tracking, and source code anyone can read. The consistency is the point — it is a design position applied to small everyday utilities rather than a single product with a privacy claim.

The features, as few as they need to be

Several lists can exist side by side, so the weekly supermarket run, the hardware shop and the pharmacy do not have to share one page. Items are grouped by kind — produce, meat, household — which sounds like a small thing until you use it in an actual shop, where the difference is one walk around the aisles instead of four. Each item carries a quantity and a unit, because most of the mistakes in shopping are quantity mistakes rather than omissions. High-priority items are pinned to the top so that the one thing you came for does not get buried under the twenty things you might also want.

A list can carry a deadline and remind you, which converts an intention into an event. And there is a usage history: how often each item was bought and when it was last bought, which answers a question people genuinely ask — have we run out, or does it just feel like we have. Lists can be exported as text for backup or for sending to somebody else.

The permissions question

After installation the application asks for no sensitive permission at all. It does not read contacts, does not access storage, does not use the network, does not ask where you are. It is a data entry and display tool and behaves like one. Everything stays in the phone's own storage, and nothing is uploaded anywhere, because there is nowhere for it to go.

There are no advertising libraries, no behavioural analytics, no third-party counters. This is a stronger statement than it sounds: most free applications in this category are free because the list itself is the product. And because the code is open, the claim can be checked rather than believed, which is the only version of this promise worth anything.

What the strictness costs

The high standard has one direct consequence: no cloud synchronisation. Moving a list between devices means exporting and importing by hand, and sharing with a household means passing the phone around or living with one shared device. Anyone who expects a list to appear on their partner's phone automatically will find that missing within a day.

The other absences are conventional: no voice entry, no barcode scanning, no real-time collaboration. Commercial applications do those things well and pay for them with your shopping data, which is a trade each person has to make deliberately rather than by default.

Who it suits

It suits people who want a place to write down what to buy, walk the shop in category order, and occasionally look at what has been bought lately — and who do not want to hand a record of their household to a company in exchange. If you need voice input or a list that updates on four phones at once, a commercial product is the honest answer, and this article is not going to pretend otherwise.

Do one thing, do it properly, then stop. No network, no permissions, no account — the application trusts you and asks to be trusted in return. In the current mobile landscape, that restraint has become the luxury item.