diff --git a/priv_app.te b/priv_app.te
index b2b9e579a51ded534d031e6b5ed2b00f132828f8..58016195a7a7ab837aa74951e6e2d491238e0959 100644
--- a/priv_app.te
+++ b/priv_app.te
@@ -36,7 +36,6 @@ allow priv_app app_api_service:service_manager find;
 allow priv_app system_api_service:service_manager find;
 allow priv_app persistent_data_block_service:service_manager find;
 allow priv_app recovery_service:service_manager find;
-allow priv_app contexthub_service:service_manager find;
 
 # Traverse into /mnt/media_rw for bypassing FUSE daemon
 # TODO: narrow this to just MediaProvider
diff --git a/service.te b/service.te
index bd6ab38b0988d48150f42ff41a8738d493c21162..3cd258b6ced78b8186cb339dacec8a05f841ad44 100644
--- a/service.te
+++ b/service.te
@@ -35,7 +35,7 @@ type battery_service, system_server_service, service_manager_type;
 type bluetooth_manager_service, app_api_service, system_server_service, service_manager_type;
 type cameraproxy_service, system_server_service, service_manager_type;
 type clipboard_service, app_api_service, system_server_service, service_manager_type;
-type contexthub_service, system_server_service, service_manager_type;
+type contexthub_service, app_api_service, system_server_service, service_manager_type;
 type IProxyService_service, app_api_service, system_server_service, service_manager_type;
 type commontime_management_service, system_server_service, service_manager_type;
 type connectivity_service, app_api_service, system_server_service, service_manager_type;