App Permissions

Every app on your phone asks for access to something: your location, camera, microphone, contacts, photos or files. Many apps ask for more than they need, and some use that data for advertising or sell it. Taking a few minutes to review permissions limits what apps can see and do.

• Everyone
• Parents
• Phone Users

What permissions are

Phones and tablets keep apps separate from your data. An app has to ask before it can use certain features or information. Common permissions include:

Why it matters

• Privacy: location history reveals where you live, work, worship and shop. Apps and data brokers can sell this. See Online Privacy.
• Security: malicious apps can use permissions to spy, steal contacts, read texts (including two-factor codes) or record audio and video. See Malware & Antivirus.
• Safety: stalkers and abusers can use location sharing and stalkerware apps to track a person. See Stalkerware.
• Battery and data: apps running in the background with constant location access drain the battery.
• Children’s data: apps used by kids can collect personal information. See Kids Online Safety.

Choosing the right level of access

• Ask: does this app really need this? A permission should match what the app does. If it doesn’t make sense, choose Don’t Allow. Most apps still work.
• “While using the app” is better than “Always.” Choose “Ask next time or when I share” (iPhone) or “Only this time” (Android) for one-time uses.
• Use approximate location instead of precise location when exact position isn’t needed, such as for weather or news.
• Limited photo access: choose selected photos rather than the whole library.
• Deny contacts, SMS and call log unless the app clearly needs them.
• Be careful with notifications. Allow only the ones you want, and turn off promotional alerts.
• When asked to “allow tracking,” choose “Ask App Not to Track” (iPhone) or opt out of ad personalization (Android).

Red flags

• A simple app, such as a flashlight, calculator or wallpaper app, asking for contacts, location, microphone or SMS
• Apps that ask for accessibility, device administrator or “display over other apps” access. These powerful permissions are used by malware and stalkerware to control the screen and read what you type. Allow them only for apps you trust and really need.
• Apps that won’t work at all unless you grant everything
• Apps installed from links or outside the official app store (sideloaded)
• Apps with few reviews, no clear developer or copycat names. See VPN Basics for fake VPN apps
• Apps that keep asking for access you already denied, or that ask via pop-ups outside the system dialog

How to review permissions

Menu names vary by phone and software version, but the steps are similar:

• iPhone: Settings > Privacy & Security. Tap a permission (Location Services, Camera, Microphone and so on) to see which apps have access, or open Settings, scroll to an app and see its permissions. The Privacy Report in Safari and the App Privacy Report show recent activity.
• Android: Settings > Privacy > Permission manager (or Security and privacy). Choose a permission to see the apps with access, or open an app’s info page. The Privacy dashboard shows which apps accessed the camera, microphone and location recently.
• Indicators: a green dot or a status bar icon appears when an app is using the camera or microphone. If you see it when you aren’t using them, check which app it is.
• Computers: Windows (Settings > Privacy & security) and macOS (System Settings > Privacy & Security) have similar controls for camera, microphone, location and files. Also review browser extensions and site permissions in your browser.
• Check Google or Apple account settings for third-party apps and websites you signed in with, and remove ones you don’t use.

Cleaning up

• Delete apps you don’t use. Unused apps still collect data and can have security holes. Android can auto-reset permissions on apps you haven’t opened in a while.
• Check before installing: read the privacy “nutrition label” (App Store) or Data safety section (Google Play), which shows what data an app collects and shares.
• Keep apps updated from official stores. See Software Updates.
• Review permissions again after major app updates, since they sometimes change.
• Turn off location history and personalized ads if you don’t want them.
• Consider whether to use a website instead of an app, which may need fewer permissions.

Work devices and children

• Work phones and apps: follow your employer’s policy. Work profiles may control what apps can see, and company apps may be able to monitor the device. Don’t install unapproved apps on work devices. See Workplace Cybersecurity.
• Children: use parental controls to approve app downloads and limit permissions, and review the apps they use together. See Parental Controls.
• Smart home and wearable apps may ask for many permissions. Check them at setup. See Smart Home Security.

App permissions checklist

• I allow permissions only when they match what the app does
• I choose “while using” or “only this time” instead of “always,” and approximate location where possible
• I deny contacts, SMS and accessibility access unless clearly needed and trusted
• I review permissions in Settings every few months, and delete apps I don’t use
• I install apps only from official stores and read the privacy label first
• I check camera and microphone indicators and investigate unexpected use

Last updated: October 4, 2026