In this paper, we present Apposcopy, a new semantics-based approach for detecting Android malware that steal private user information. The semantic, high-level nature of the signature specification language allows analysts to specify key characteristics of malware families without relying on the occurrence of specific instruction or byte sequences, making Apposcopy more resistant to low-level code transformations.