com.sec.android.app.servicemodeapp Copy

A Samsung-signed system package labelled "Service mode", with no launcher entry: this site records it as not user-facing on every observation. It sits in the same family as DRParser Mode (com.sec.android.app.parser, documented above), the component that turns dialled keystrings into hidden engineering screens, and "Service mode" is Samsung's own term for those service and engineering menus. The limitation stated plainly: Samsung does not publish documentation for this package, so which screens it actually presents is not sourceable and this note does not guess at them. One observation from Samsung's own listings is worth recording, without drawing a conclusion from it: the same application lists carry a separate package, com.sec.android.RilServiceModeApp, under the label "Service mode RIL", so Samsung ships more than one service-mode component and the split between them is not documented. Version note: no change of role could be sourced across Android releases, and the package looks long-standing rather than superseded, observed here from API 28 through API 37. Samsung's listings record its version as 9 on Android 9-era Galaxy S10+ firmware and 11 on Android 11-era Galaxy S20 FE firmware, which matches the Android major version in both cases, though two data points do not establish that as a rule. Separately, the platform mechanism that carries dialler debug codes changed in Android 10, as described in the DRParser Mode entry above; whether this package relies on that platform broadcast rather than on Samsung's own handling is not documented, so read that change as context for the family rather than as an established fact about this package. For Android Enterprise, EMM and kiosk use, the guidance is the same as for DRParser Mode: treat dialler-reachable engineering menus as a surface to keep out of reach through the app allowlist and through testing the finished kiosk, rather than assuming the package can simply be stripped. Because Samsung does not document what depends on it, disabling is rated caution.

• Galaxy S10+ LTE (G975F) application list - Samsung Knox CC Mode documentation →
• Galaxy S20 FE 5G (G781B) application list - Samsung Knox CC Mode documentation →
• TelephonyManager.ACTION_SECRET_CODE - Android API reference →
• How do I prevent users from escaping kiosk (lock task) mode? - Jason Bayton →
• Package provenance for com.sec.android.app.servicemodeapp - Android System App Database →

• Signed by the device maker's own signing key (Samsung), so it is an OEM preinstall, but 2 different certificates appear across the fleet, so OEMs ship their own builds of it. It also signs the Android framework, so it is a platform-level key on its device(s). Inferred from the certificate appearing only on Samsung devices (508 packages, 10196 observations).
• Its largest observed manifest declares 40 permissions: 8 runtime (user-granted), 18 signature or system-level, 9 install-time and 5 vendor or uncatalogued.
• Never reported as user-facing, so it runs as a background or system component rather than an app the user opens.