Check app permissions: the 10-minute cleanup
Location, microphone, contacts: a lot of apps take more access than they need. Here is how to clean it up in ten minutes, on Android and iPhone.
Permissions are granted in a second and then forgotten forever. A flashlight app with access to your contacts, a game tracking your location around the clock: that is exactly how the data sets grow that later show up in ad networks and in breaches. The cleanup takes ten minutes and costs nothing.
The short version
- Go permission by permission, not app by app – that way you see everyone with microphone access at once.
- Background location is the most sensitive setting. Set it to “While Using” or “Never.”
- Sharing contacts affects other people, not just you.
- Deleting apps you do not use does more than any individual setting.
- Revoking access is safe: the app will ask again if it really needs it.
Android: how to do it
Android – Permission Manager
- 1. Open Settings → Security & privacy → Privacy → Permission Manager.
- 2. Work through the categories: Location, Camera, Microphone, Contacts, Phone, SMS, Files.
- 3. Ask one question per category: does this app need it for the job you actually use it for?
- 4. Location: set it to “Allow only while using the app.” Reserve “Allow all the time” for navigation and find-my-device.
- 5. Turn on “Remove permissions if app isn’t used” – that keeps things tidy from now on.
Menu names vary by manufacturer (Samsung, Google, Motorola). If you cannot find it, search your settings for “permissions.”
iPhone: how to do it
iPhone – Privacy & Security
- 1. Open Settings → Privacy & Security.
- 2. Work through the lists: Location Services, Contacts, Photos, Microphone, Camera, Local Network.
- 3. Location Services: set each app to “Never” or “While Using.” Turn off Precise Location wherever a rough area is enough.
- 4. Photos: switch from “All Photos” to “Limited Access” – then the app only sees what you pick.
- 5. Tracking: turn off “Allow Apps to Request to Track.” That blocks the requests outright.
- 6. Turn on App Privacy Report – after a few days it shows you which app touched what, and how often.
The App Privacy Report is the most honest view you can get: it logs actual access, not just granted permissions.
The permissions worth a second look
| Permission | When it is legitimate | When to be suspicious |
|---|---|---|
| Location (background) | Navigation, weather widget, find-my-device | Games, flashlight, shopping, news apps |
| Microphone | Calls, voice messages, dictation | Apps with no audio feature at all |
| Contacts | Messengers, phone, mail | Games, stores, photo apps |
| Camera | Video, scanning, photography | Apps that only display text |
| Accessibility (Android) | Screen readers, automation | Almost always suspicious – it grants full control |
| Device management / profiles | Work phones, parental controls | Anything installed from an unknown source |
The step with the biggest effect: delete
Every app you do not need is a data risk and an attack surface. Go through the list once and delete everything you have not opened in a year. That resolves more permission problems in one pass than any amount of fine-tuning – and it gives you back storage and battery life.
The rule for every request
An app gets exactly what it needs for the job you can see it doing – and only while it is open. Anything beyond that, refuse first. If it genuinely needs the access, it will ask again at the right moment.Next: accounts and sessions
Permissions on the device are only half of it. The other half is the services you gave account access to at some point through “Sign in with Google.” Cleaning those up is covered in Check active sessions and connected apps .
More free checks are in the self-checks overview .
Frequently asked questions
Will an app break if I take a permission away?
Usually not. Modern phones simply ask again the moment the app genuinely needs it. If you are unsure, start with location and microphone – those are the two that are most often unnecessary.
Which permission is the most sensitive?
Background location. It builds a complete record of where you go. Contacts comes next, because sharing your contacts hands over data about other people who never agreed to it.
How often should I check?
Twice a year is enough for most people. Also check whenever you install a new app or your phone gets a major system update.