--- title: "Your Phone Can Now Order Your Groceries. Would You Give It Your Password?" date: 2026-09-03 category: AI in Action site: NeuroAI canonical: https://neuroai.site/a/na-agent-phone-password-question language: en --- # Your Phone Can Now Order Your Groceries. Would You Give It Your Password? > On 1 September the Nubia NaviX Ultra received network access approval — developed with ZTE and ByteDance, running the Doubao assistant, positioned as the first 'AI agent phone'. The technology works. The question is whether you trust it with payment. ## Key takeaways - On **1 September 2026**, the **Nubia NaviX Ultra** received MIIT network access approval. Developed jointly by **ZTE and ByteDance**, running the **Doubao phone assistant**, it is positioned as the world's first AI agent phone, with a September launch planned. - Three words define the difference: **cross-app, multi-step, on-device**. - The three unresolved problems: **authorisation boundaries, liability when it errs, and where the data goes.** - Industry shorthand for the three gates it must pass: **filing, network access licence, and user authorisation mechanism.** NaviX Ultra has cleared the first two. ## The morning this describes Picture a morning. You are still brushing your teeth. Your phone has already answered three work messages, compared prices and ordered cat food, and submitted yesterday's expense claim to the company system. It sounds like science fiction. It is close to the shelf. ## How an agent phone differs from a normal one The old voice assistant: you say "order me food," it opens the app, and then you tap through yourself. An agent phone inverts that. You say "order food," and it opens the app, picks a restaurant, compares prices, places the order, pays, and waits for the rider's message. Those dozen-odd intermediate steps — it does all of them. The difference is three words: - **Cross-app**: no longer trapped inside one application; it moves between messaging, shopping and delivery - **Multi-step**: not executing one instruction but completing a chain of causally linked actions - **On-device**: processing data locally where possible rather than uploading it — and this one matters a great deal ## The barrier is not technology. It is trust. The technology works. Whether it spreads depends on a plain question: **would you hand it your payment password?** Three obstacles an agent phone cannot avoid: **Authorisation boundaries.** It can order food for you — so can it transfer money? Can it message your boss? Sensitive operations requiring second confirmation is the floor, not a nice-to-have. **Who is liable when it errs.** It orders the wrong thing, messages the wrong person, books the wrong ticket. Who eats the loss? The industry currently has no clear answer. **Where the data goes.** Even claiming on-device processing, any networked task involves data exchange by necessity. If it can read your screen, it can see everything on it. NaviX Ultra has passed the first two gates — filing and network licence. The third is decided by users voting with their behaviour. ## How it would change a day The good news first. A large volume of operations that are mandatory but meaningless gets absorbed. Price comparison, form filling, ticket grabbing, schedule reconciliation, parcel tracking, photo tidying — these steal half an hour to an hour from an ordinary person every day. If the agent is reliable, that is an hour back. The cost, stated plainly: **the time you save is paid for with operating authority.** ## What to do now **Authorise in tiers.** When you get one, set payments, transfers and contacts to "ask every time." Do not grant permanent authority for the sake of convenience. **Start with low-risk tasks.** Ordering food, looking things up, organising an itinerary can go to the agent. Money and human relationships stay with you for now. **Watch for "AI-generated" labels and activity logs.** A responsible product leaves a record. Whether you can review and undo it is the key test of whether it deserves your trust. The more capable your phone becomes, the more you need to know what it has agreed to on your behalf. ## Honest limitations "World's first AI agent phone" is the vendor's positioning. Network access approval is a regulatory step, not an endorsement of the assistant's safety or privacy design. The specific permission behaviour of the shipping product may differ from what was described before launch, and readers should verify current settings on their own devices. *Sources: MIIT network access approval (1 September 2026); product announcements from ZTE, Nubia and ByteDance. Information only.* --- Published by NeuroAI (https://neuroai.site/) — https://neuroai.site/a/na-agent-phone-password-question Free to quote with attribution and a link to the original.