diff --git a/android/app/src/main/AndroidManifest.xml b/android/app/src/main/AndroidManifest.xml
index ddecfda..0c248d0 100644
--- a/android/app/src/main/AndroidManifest.xml
+++ b/android/app/src/main/AndroidManifest.xml
@@ -11,6 +11,13 @@
     <uses-permission android:name="android.permission.RECEIVE_BOOT_COMPLETED" />
     <uses-permission android:name="android.permission.ACCESS_COARSE_LOCATION" />
     <uses-permission android:name="android.permission.ACCESS_FINE_LOCATION" />
+    <!-- Every WifiManager call — including the connectionInfo that
+         names the joined network — is gated on ACCESS_WIFI_STATE, which
+         WifiService enforces by throwing SecurityException, not by
+         answering null. A normal permission, so declaring it is the
+         whole grant: an install that predates this line keeps the grant
+         set it was installed with. -->
+    <uses-permission android:name="android.permission.ACCESS_WIFI_STATE" />
     <!-- DND control is a special-app grant, and this declaration is what
          puts the app on the "Do Not Disturb access" screen's list: an
          undeclared app opens that screen and finds nothing to flip. -->
diff --git a/android/app/src/main/java/rs/rhema/phone/sensors/PhoneSensors.kt b/android/app/src/main/java/rs/rhema/phone/sensors/PhoneSensors.kt
index 7f7afa0..a3ccf61 100644
--- a/android/app/src/main/java/rs/rhema/phone/sensors/PhoneSensors.kt
+++ b/android/app/src/main/java/rs/rhema/phone/sensors/PhoneSensors.kt
@@ -68,6 +68,11 @@ object PhoneSensors {
             ContextCompat.checkSelfPermission(context, Manifest.permission.ACCESS_COARSE_LOCATION) ==
             PackageManager.PERMISSION_GRANTED
 
+    /** WifiService's gate (a normal permission, declared in the manifest). */
+    fun hasWifiState(context: Context): Boolean =
+        ContextCompat.checkSelfPermission(context, Manifest.permission.ACCESS_WIFI_STATE) ==
+            PackageManager.PERMISSION_GRANTED
+
     /** Usage access is a special-app grant (a settings toggle, like DND access). */
     fun hasUsageAccess(context: Context): Boolean {
         val appOps = context.getSystemService(AppOpsManager::class.java) ?: return false
@@ -209,8 +214,15 @@ object PhoneSensors {
         // Reading an SSID is treated as location by the OS: without the
         // grant the answer is a placeholder, so do not post it.
         if (!hasLocation(context)) return null
-        val wifi = context.getSystemService(WifiManager::class.java) ?: return null
-        val info = wifi.connectionInfo ?: return null
+        // And every WifiManager call is gated on ACCESS_WIFI_STATE, which
+        // WifiService enforces by throwing — an install that predates the
+        // manifest declaration keeps the grant set it was installed with,
+        // and that throw travels out of this read into the whole status
+        // report: one missing permission used to cost every topic.
+        if (!hasWifiState(context)) return null
+        val info = runCatching {
+            context.getSystemService(WifiManager::class.java)?.connectionInfo
+        }.getOrNull() ?: return null
         return info.ssid
             ?.removeSurrounding("\"")
             ?.takeIf { ssid ->