Every app you install asks for permissions, and it is easy to tap Allow without thinking. Over time, dozens of apps can end up with access to your location, photos, microphone and contacts. Here is how to clean that up.
On Android
- Open Settings and go to Security & privacy, then Privacy, then Permission manager. The exact names vary by phone maker.
- Tap a permission such as Location to see every app that has it.
- Switch apps to Allow only while using the app, Ask every time, or Don’t allow.
Android can also remove permissions automatically from apps you have not used for a while. Check that this is enabled in each app’s settings.
On iPhone
- Open Settings and tap Privacy & Security.
- Go through Location Services, Contacts, Photos, Camera and Microphone.
- Change access to While Using the App, Never, or for photos, Limited Access to selected pictures.
What to look for
- Location set to always for apps that do not need it in the background.
- Precise location for apps where approximate location is enough, such as weather.
- Microphone or camera access for apps that never use calls or video.
- Full photo library access when sharing a few pictures would do.
The permissions that matter most
Not all permissions carry the same risk. Spend your time on these:
- Location reveals where you live, work and travel. Background location access is the most sensitive form.
- Microphone and camera. Both iPhone and Android show a colored dot or icon in the status bar when an app is using them, so watch for it appearing when you don’t expect it.
- Contacts. Sharing your address book exposes other people’s details, not just yours.
- Photos. Pictures can contain location data and reveal far more than the app needs.
- Accessibility (Android). This powerful permission lets an app read the screen and tap on your behalf. Banking malware often asks for it. Only grant it to apps you fully trust, such as a password manager or a genuine accessibility tool.
- Notification access and device admin rights on Android, which a few malicious apps abuse to read messages or block removal.
Use the built-in privacy reports
Both platforms can now show you what apps actually did, not just what they are allowed to do. On Android, the Privacy dashboard in Settings shows which apps used location, the camera and the microphone over the last day or week. On iPhone, turn on App Privacy Report under Privacy & Security to see how often each app accessed sensitive data and which internet domains it contacted. If a flashlight app checked your location forty times yesterday, you have your answer.
Saying no when an app asks
When an app asks for a permission, it’s fine to refuse and see what happens. Well-built apps keep working and ask again only when you use a feature that needs it. If an app refuses to open at all without access it has no clear reason for, such as a calculator demanding your contacts, that tells you something about the app.
Make it a habit
Repeat this check every few months, and delete apps you no longer use. Fewer apps means fewer permissions to worry about. A good moment is right after a major system update, since new versions sometimes add permission types or reset choices.
What we think
Permission settings are one of the few privacy tools that cost nothing and work immediately. Most people never open them, which is exactly why apps keep asking for more than they need.
Our advice is to focus on three permissions, background location, microphone and contacts, and to treat any app that refuses to work without them, for no obvious reason, as an app you probably don’t need. Five minutes every few months is a small price for knowing what your phone shares.