A friend of mine once installed a free level-matching puzzle game for her kid. Weeks later she noticed it had access to her contacts, her microphone, and her precise location. A puzzle game. There was no reason on this planet for it to know any of that, yet she had tapped “allow” on autopilot during setup, the way almost everyone does.

Your phone is generous with permissions by default, and apps are happy to take whatever you hand them. The fix is a twenty-minute walk through a settings menu you already have, revoking access nobody earned.

Key takeaways

  • Apps ask for far more access than they need, and most people grant it without thinking.
  • Location, microphone, camera, contacts, and photos are the five worth checking first.
  • “While using the app” is almost always the right setting instead of “always.”
  • Revoking a permission rarely breaks anything; the app just asks again if it truly needs it.

Why app permissions matter more than they look

Every permission is a promise you make to an app: yes, you may see this part of my life. The trouble is that a lot of apps collect more than they use, then quietly sell or share it. Location data in particular gets bundled and sold constantly.

phone screen showing app permission switches
Each toggle decides what a piece of your life an app can see.

Think about what these five permissions actually reveal. Location shows where you live, work, worship, and sleep. Microphone and camera can capture your surroundings. Contacts exposes not just you but everyone in your phone. Photos can carry location tags and faces.

Trimming permissions is one of the three core moves in our online privacy basics overview, and it is the one you can knock out fastest tonight.

Good to know

Both iPhone and Android now show a small dot or icon when an app uses your camera or microphone. If you see it light up while an app should be idle, that is your cue to investigate.

How to review permissions on an iPhone

Apple makes this reasonably tidy. Open Settings, then scroll down to Privacy and Security. Inside, you will find a list organized by permission type: Location Services, Contacts, Microphone, Camera, and more.

Go permission by permission

Tap Location Services first. You will see every app and its current setting. Change anything set to “Always” that does not genuinely need background location to “While Using the App,” or “Never” if it has no business knowing at all.

Then check Camera, Microphone, Contacts, and Photos the same way. For Photos, prefer “Selected Photos” over “Full Access” so an app only sees the images you hand it.

Tip

On iPhone, look for “Precise Location” as a separate switch inside each app’s location settings. A weather or news app works fine with it off, which shares only your rough area instead of your exact spot.

How to review permissions on Android

Android’s layout varies slightly by brand, but the path is similar. Open Settings, tap Privacy or Security and Privacy, then Permission Manager. This groups apps by permission, so you can see, for example, every app allowed to use your microphone.

Tap into each category and set apps to “Allow only while using the app” or “Don’t allow.” Android also offers “Ask every time” for sensitive permissions, which is a good middle ground for apps you rarely use.

While you are there, look for an “Unused apps” or “auto-reset permissions” option. Turning it on strips access from apps you have not opened in a few months, doing future cleanup for you.

A quick reference for common apps

Not sure what is reasonable? Here is a rough guide to sane settings for everyday app types.

App type Reasonable access Usually not needed
Maps and rideshare Location while using Contacts, microphone
Camera and photo editors Camera, selected photos Location, contacts
Messaging apps Camera and mic while using, contacts if you choose Always-on location
Games Almost nothing Location, contacts, microphone, camera
Weather and news Approximate location while using Precise location, contacts, camera
Watch out

Free apps that seem to want everything are often funding themselves by selling your data. If a simple flashlight or wallpaper app demands location and contacts, that is a red flag worth an uninstall, not just a permission change.

Two permissions worth a deeper look

Location and the microphone-plus-camera pair cause the most trouble, so they each deserve their own dedicated pass once you finish the quick sweep.

Location is the big one, because it is sold so widely and reveals so much. Our step-by-step guide to turning off location tracking on your phone covers the system-level switches most people miss, including ad-related location settings.

The microphone and camera feel more alarming, and rightly so. If you want to lock those down app by app and understand what those indicator dots mean, our guide to controlling microphone and camera access walks through every step.

Making this a habit, not a one-off

Permissions creep back over time as you install new apps and updates ask for more. A short quarterly check keeps things tidy. Put a fifteen-minute reminder on your calendar for the first of each season and run the same sweep.

When you install something new, pause on the first permission prompt instead of tapping through. Ask whether the request fits what the app is for. That one habit prevents most of the mess before it starts.

For a plain-language reference on mobile privacy that backs all of this up, the FTC’s guidance at consumer.ftc.gov is a solid, no-hype read.

Your afternoon checklist

  • Open your phone’s privacy settings and find the permission manager or Privacy and Security list.
  • Set every “Always” location app you do not fully trust to “While Using” or “Never.”
  • Turn off Precise Location for weather, news, and shopping apps.
  • Revoke microphone and camera access from any app with no clear need for them.
  • Switch photo access to “Selected Photos” for apps that only need a picture now and then.
  • Delete any free app demanding permissions that make no sense for what it does.
  • Turn on auto-reset of permissions for unused apps if your phone offers it.
  • Set a seasonal reminder to run this same fifteen-minute sweep again.

Going through your permissions once feels tedious, but it is genuinely one of the most satisfying privacy chores there is. You end up with a phone that knows only what it needs to, and a real sense of who you handed the keys to. Start with location tonight, and the rest falls into place fast.