Google is installing an app on your phone that stores your legal signature — and didn't bother to tell you about it.
The new app, simply called "Signatures," has begun appearing on Android devices as part of the June 2026 Google Play system update. According to BGR, the app lets users draw, upload, or type signatures and save multiple versions — but Google declined to mention it in the update's changelog. The app was first spotted by 9to5Google on Pixel, Samsung, and OnePlus devices, and can be surfaced using activity-launching tools, though it isn't fully functional yet.
Your signature is the legal stand-in for your person. It's how you authorize contracts, deeds, loans, and government filings. Hand that to Google — the same company that already catalogs your searches, hoards your location data, and feeds your search history into AI training — and you've handed over the last piece of identification that wasn't already digitized. This isn't convenience. This is infrastructure.
BGR framed the rollout as "helpful" and suggested the app could become a "universal utility" for signing forms across Android. That's the sales pitch. What BGR buried is the question of why Google is building this at the system level, why it's being pushed through Play system updates rather than offered as a standalone download, and why the company is staying silent about it.
According to Android Authority's analysis, the app targets API level 31, meaning it will work on any device running Android 12 or newer. Because it's delivered via Google Play system update rather than an OS update, it isn't limited to specific phone models. Google isn't asking Pixel users to opt in. It's laying pipe across the entire Android ecosystem.
The core functionality, as it stands, is limited. You can create and save signature variations — drawn, uploaded, or typed with a font applied. You can delete them or manage them from a dedicated page. But you can't yet paste them into form fields. That's the current state. The logical endpoint is a system-level API that any app can call to request your signature — and any breach can exploit to steal it.
Google's track record doesn't inspire trust. As BGR itself acknowledged, the company already saves audio files and images used for search and uses search data to train AI models. Adding legal signatures to the data pile is a predictable next step for a company whose business model is harvesting personal information and selling access to it.
No regulator has commented. No lawmaker has raised a flag. The infrastructure of a digital identity system is being assembled in silence, one quiet app at a time.
The question isn't whether a digital signature tool is useful. The question is who controls the vault — and why the company building it didn't think you needed to know.